Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
File: dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft (raw, json)
Hash identifier: BRWS1YGva+6cbbJyBRJUlt8gdGyCYX46k0ozMcxXRtg=
Subject key identifier: 89:01:EA:81:D9:46:59:4C:51:EA:7F:C6:BE:3B:ED:A1:22:07:47:B6
Authority key identifier: 74:F9:36:9C:6E:23:C1:BF:0D:BE:D3:01:C7:D0:0B:4A:3F:DF:0D:04
Certificate issuer: /CN=74f9369c6e23c1bf0dbed301c7d00b4a3fdf0d04
Certificate serial: 01A0DB7205A24003E1A98597898064352EF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
Manifest number: 1A74
Signing time: Sat 26 Sep 2026 02:01:17 +0000
Manifest this update: Sat 26 Sep 2026 02:01:17 +0000
Manifest next update: Sun 27 Sep 2026 02:01:17 +0000
Files and hashes: 1: dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl (hash: jovo0Gjv8TQoFHiH8S1EFQww9E7JJ3CxvFB5OLGRouM=)
2: g7fYHM51W9swYseMkrEDa3soWXY.roa (hash: k9K4BHL4fbJsHQSn19Joe+3Hon27U4MZ6GclcBUO56E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:72:05:a2:40:03:e1:a9:85:97:89:80:64:35:2e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f9369c6e23c1bf0dbed301c7d00b4a3fdf0d04
Validity
Not Before: Sep 26 02:01:17 2026 GMT
Not After : Sep 27 02:01:17 2026 GMT
Subject: CN=8901ea81d946594c51ea7fc6be3beda1220747b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:47:e0:ce:cc:c6:70:79:d4:c6:de:83:cc:ae:
f8:60:cf:bc:6f:31:e9:f1:6c:06:b1:eb:85:45:b6:
d9:ab:fb:db:6c:8d:a0:65:44:da:73:11:38:73:df:
8d:47:06:98:33:33:8a:6b:db:e2:6f:33:e2:5d:63:
ab:f8:c2:3e:e2:19:76:0e:3b:26:e6:2c:06:89:2b:
cb:13:a9:96:51:39:37:a8:ac:3d:6d:f0:32:c0:bb:
28:8e:c4:84:81:a3:d3:c3:a3:00:ae:02:2f:84:58:
d8:80:6d:fd:36:6c:61:0c:78:1c:c6:a8:e8:d8:a4:
1e:b8:71:03:bb:55:4c:9d:c3:39:52:48:37:48:35:
3c:c0:51:90:92:0e:13:7d:08:a1:f2:f8:6a:a6:52:
93:8d:1a:a5:ab:ec:25:d9:10:0d:8e:3c:61:99:94:
e3:6f:e9:85:e2:bb:68:71:45:1a:92:42:ff:17:b9:
32:5d:75:8a:64:bf:91:23:bf:7e:dd:29:a9:2c:59:
a1:22:70:8e:84:02:34:df:a7:34:9f:fc:77:75:1c:
06:de:75:69:f5:3a:6f:82:f9:a5:e4:2a:5b:6b:43:
a7:37:d0:b1:05:c1:1a:5d:3d:7b:3f:0d:80:57:45:
16:07:1d:25:65:dd:bf:ad:82:7c:ed:20:3b:e4:73:
e8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:01:EA:81:D9:46:59:4C:51:EA:7F:C6:BE:3B:ED:A1:22:07:47:B6
X509v3 Authority Key Identifier:
keyid:74:F9:36:9C:6E:23:C1:BF:0D:BE:D3:01:C7:D0:0B:4A:3F:DF:0D:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:3b:9f:6b:7e:1c:e4:60:dc:6e:30:c6:17:69:b1:80:c2:9a:
ab:ac:7f:a5:2f:b1:f2:64:4d:d2:a6:33:d5:2f:b1:52:d7:12:
84:9a:0c:43:97:b6:3d:e6:80:92:cd:02:22:44:07:20:f4:4f:
5e:6f:ef:68:b1:b7:48:55:0a:67:5b:4b:e4:35:36:3f:99:19:
e9:30:bf:1b:98:3b:e1:f2:f4:b0:fe:f2:bf:1d:28:9b:81:c5:
2f:9a:29:43:25:c1:7a:3a:09:7a:95:9c:95:4e:f0:ce:86:ff:
db:88:6f:a0:b8:da:be:bb:f4:bd:2f:fd:3d:a3:22:9f:22:0c:
f3:f5:f1:69:cb:44:06:db:55:2a:ae:56:42:0e:3a:e9:19:36:
ef:31:08:a4:ab:42:25:53:8d:17:b1:3c:1b:d5:03:fb:36:a5:
85:6e:dd:3b:11:f3:13:40:71:51:0c:00:3f:33:31:2e:7e:d1:
a1:2d:1f:30:32:73:e3:4e:60:95:d3:4e:ba:67:5a:c2:c8:28:
e9:67:a8:f4:78:d6:b0:b2:a8:af:26:3f:69:b6:e4:f6:46:cb:
d3:07:6b:06:5c:83:3f:51:3b:7c:2c:2b:f1:3b:cd:c7:73:6d:
1b:05:46:16:0a:26:36:83:2e:dd:5e:4c:4e:51:ed:22:24:f4:
95:b8:5a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:44:54 2026 by rpki-client