Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
File: dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft (raw, json)
Hash identifier: o7rzINj8cmbnYVQ5aE7usPqClf7mmmOW6aaGhjgYvl8=
Subject key identifier: 31:4C:0C:47:D9:86:DE:EC:89:77:A0:1E:7F:A4:D2:85:F5:19:DB:C0
Authority key identifier: 74:F9:36:9C:6E:23:C1:BF:0D:BE:D3:01:C7:D0:0B:4A:3F:DF:0D:04
Certificate issuer: /CN=74f9369c6e23c1bf0dbed301c7d00b4a3fdf0d04
Certificate serial: 019D273B3366121B2A021D98538C4746C5F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 23:01:24 +0000
Manifest this update: Wed 25 Mar 2026 23:01:24 +0000
Manifest next update: Thu 26 Mar 2026 23:01:24 +0000
Files and hashes: 1: dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl (hash: kZ4WTWIfroDtQDt1QWOaOcjUN3knvlwNdNqWDLoy0hI=)
2: g7fYHM51W9swYseMkrEDa3soWXY.roa (hash: k9K4BHL4fbJsHQSn19Joe+3Hon27U4MZ6GclcBUO56E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:33:66:12:1b:2a:02:1d:98:53:8c:47:46:c5:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f9369c6e23c1bf0dbed301c7d00b4a3fdf0d04
Validity
Not Before: Mar 25 23:01:24 2026 GMT
Not After : Mar 26 23:01:24 2026 GMT
Subject: CN=314c0c47d986deec8977a01e7fa4d285f519dbc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:18:67:40:88:97:16:a6:19:d5:34:91:e4:47:
bc:79:5f:71:a2:d0:b8:dc:30:4a:a1:69:80:58:60:
d7:0e:be:26:3f:7b:0d:07:ba:9c:82:93:30:9a:a0:
5c:d4:28:e0:27:3f:51:5b:86:30:15:ce:d1:54:8f:
12:18:ab:8e:b1:77:5c:89:a9:f8:81:66:b7:83:7f:
b2:91:3e:b6:d8:a0:0b:23:72:c5:cf:5d:91:ce:b4:
d2:93:77:92:d7:44:f9:ff:51:3e:be:7a:f3:b1:5e:
76:d7:e1:0b:84:36:2b:77:55:8d:83:f0:85:3f:44:
aa:66:a9:93:02:88:0e:49:00:59:5b:c1:44:d3:c8:
a6:2c:2e:e8:8e:6b:91:85:76:1a:9a:9f:08:c6:92:
87:b5:5f:ea:1e:46:ad:c4:96:17:3d:6a:32:82:a2:
fb:2b:ae:fa:3e:c6:ca:9e:df:ff:2e:5b:4e:74:45:
7a:45:e7:25:f6:7c:36:91:57:db:5b:dc:a9:a9:46:
45:5d:4f:0d:24:4d:56:7c:e3:c2:e7:bd:99:52:c1:
10:24:d8:ca:41:a0:4c:12:22:fb:2c:59:b5:e1:60:
78:79:a1:70:0c:36:d9:69:0a:62:a7:c6:a0:4c:27:
90:39:0e:da:3e:19:56:98:91:37:20:66:87:a9:03:
f6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4C:0C:47:D9:86:DE:EC:89:77:A0:1E:7F:A4:D2:85:F5:19:DB:C0
X509v3 Authority Key Identifier:
keyid:74:F9:36:9C:6E:23:C1:BF:0D:BE:D3:01:C7:D0:0B:4A:3F:DF:0D:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:58:d0:f1:96:b1:0b:01:ee:da:db:f5:a7:21:5d:2e:e7:73:
2a:50:f1:6b:b0:67:a2:f6:69:e0:65:88:d2:2a:6a:74:8b:4b:
95:22:84:90:de:bf:ab:31:a3:19:1b:20:e3:e6:31:bd:ab:db:
40:9e:ee:99:72:0c:84:a7:3c:a6:77:d0:66:90:02:01:9c:0f:
6f:73:56:f1:f0:2a:fb:c5:7f:8a:df:bc:c7:b6:1d:c0:f7:f1:
5d:18:68:f3:09:31:5d:0a:7f:53:ec:86:8a:d1:94:e5:2d:fa:
a4:aa:3d:14:09:0e:e6:47:95:8c:8b:47:47:16:eb:6b:01:f4:
2e:5b:b2:f8:15:04:51:84:76:2b:98:f9:ef:23:1d:ff:40:b7:
40:dc:9f:df:fc:83:d4:46:d3:88:d3:a1:d8:7a:86:bb:f6:09:
df:16:e7:f7:07:a8:04:8c:a4:e8:a9:1e:d3:9a:e0:4d:d9:6b:
60:d4:cc:d8:f0:d2:82:19:3f:03:1d:c3:42:80:4f:c1:00:9c:
2d:80:3f:39:d9:4c:d1:03:01:a8:6e:4c:af:bc:34:4b:bf:6b:
c5:1d:43:a0:47:03:e2:36:31:44:90:fa:c9:d7:ee:6e:56:62:
5a:5b:cd:c0:53:1f:8a:0d:15:2b:19:eb:35:39:17:44:e5:da:
27:e7:92:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:30 2026 by rpki-client