Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
File: DXj57XHKOklrjVS5fxR5GNrbnFQ.mft (raw, json)
Hash identifier: BSBCar1LKJAfjuVdbqRXv1Nn6OwGb2nGixupyq1esy8=
Subject key identifier: BF:34:A2:B8:F7:47:7E:CC:1E:A9:B7:01:EB:8B:EF:37:EA:0D:B4:A4
Authority key identifier: 0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54
Certificate issuer: /CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54
Certificate serial: 019D2771DE858EE98A65722DFE17D4D31EA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
Manifest number: 041E
Signing time: Thu 26 Mar 2026 00:01:07 +0000
Manifest this update: Thu 26 Mar 2026 00:01:07 +0000
Manifest next update: Fri 27 Mar 2026 00:01:07 +0000
Files and hashes: 1: DXj57XHKOklrjVS5fxR5GNrbnFQ.crl (hash: OmFyCmPANbSd02XKuiFHnVqZA9XXwU4hjTmIyWwj5/8=)
2: WBE9XqEf7MFyalSUqu-vF0MYUwE.roa (hash: dqMxE1BdW8dFl07KbG3IeIB419vd91Jj1Eyr9ex+Uk0=)
3: WBO5Gvlksp1h2Nj2XcuQWgWe3aM.roa (hash: 21Q33n7ktv9Mw0KQGNV5mbgpviM4S02U0e8hX8gzv14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:de:85:8e:e9:8a:65:72:2d:fe:17:d4:d3:1e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54
Validity
Not Before: Mar 26 00:01:07 2026 GMT
Not After : Mar 27 00:01:07 2026 GMT
Subject: CN=bf34a2b8f7477ecc1ea9b701eb8bef37ea0db4a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f8:d8:80:62:0b:fb:fd:ee:fb:4f:c6:a4:c9:
53:5a:5c:8a:94:76:98:eb:a9:6c:c2:e6:14:e1:eb:
b2:96:58:c3:df:2b:60:fc:0f:a7:dd:5e:c9:fd:46:
04:00:c6:bb:50:b8:84:00:96:5a:e6:79:62:c1:9f:
fe:09:9e:86:f6:14:b2:c0:86:4d:17:4b:60:83:18:
a1:f7:fa:00:fc:e6:13:ca:06:19:42:d0:f9:d6:01:
35:a8:40:13:22:24:df:58:96:26:06:44:5b:ec:74:
2c:5a:98:da:6f:b5:ee:87:7b:ca:f3:0f:4d:40:3f:
8e:0c:bc:1c:c9:a1:88:f0:dc:97:a9:95:d1:0d:5d:
8d:5c:54:95:3b:eb:bc:e6:92:d8:75:6a:47:9c:db:
4a:34:e4:80:ef:7a:55:ac:ae:99:e1:30:27:59:23:
57:ca:18:3a:45:91:26:6a:8c:9c:89:33:4c:fd:f4:
17:ac:3f:7e:4a:52:e1:4a:63:a2:34:c4:74:0e:0d:
ab:01:5f:d5:f7:77:4e:bd:8d:fe:c5:60:91:e6:90:
d6:64:58:a2:a8:e3:5a:13:1b:70:c0:a3:64:a3:8f:
97:d4:c8:25:e7:4a:20:4a:9b:74:bb:61:81:5f:bc:
cf:68:1a:af:0f:40:17:53:e1:35:3e:15:00:45:de:
85:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:34:A2:B8:F7:47:7E:CC:1E:A9:B7:01:EB:8B:EF:37:EA:0D:B4:A4
X509v3 Authority Key Identifier:
keyid:0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ab:62:c7:5e:53:40:a1:2b:22:36:e2:9f:cb:0c:6e:0b:e6:
96:65:fb:b7:f4:e7:dd:c2:3e:58:e6:74:73:46:dd:95:f8:9a:
e9:86:62:aa:00:81:b1:3e:2a:b2:9b:92:6e:c6:85:34:f7:2a:
5e:e6:a4:fa:af:52:e4:ac:10:17:11:e3:69:30:54:76:05:78:
e3:3f:9f:40:72:bf:c2:be:5f:e4:4a:8b:79:84:02:00:c0:29:
92:89:62:74:78:fc:8d:d1:cb:2c:2a:60:a7:24:b7:74:b3:c5:
57:4e:75:48:bb:10:fa:37:f5:96:fc:04:d2:57:6b:5e:cd:a2:
1d:bb:5c:60:1b:d2:9b:fd:4c:3a:ef:22:e3:29:43:ab:bf:72:
fa:38:3e:7e:a3:a2:43:4c:46:73:f3:22:c3:e4:60:f0:9c:55:
fd:fc:25:97:c9:68:2c:1c:a9:7d:50:93:ef:44:46:49:84:4e:
d0:f2:07:09:c9:79:79:33:4f:81:32:92:41:9e:33:08:45:f4:
4a:12:66:2b:1a:8d:65:a5:da:dd:bd:fc:f3:13:14:a2:4c:d3:
cf:af:ca:64:b1:fe:39:ea:cd:dc:a1:80:ea:05:c7:ab:d8:18:
38:fd:72:83:fc:79:bf:c2:7d:02:d5:f0:41:b1:ab:d6:a1:6b:
df:3a:17:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:37:12 2026 by rpki-client