Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
File: dKjYRykGwgOKrshMez5Wwglr6GA.mft (raw, json)
Hash identifier: ufiUNlIsUq0KmdRIG291Epr0uRcXpMAqcRSuC6fK2p4=
Subject key identifier: 26:F9:5E:C0:59:6C:6F:97:A9:70:E6:63:81:C8:B9:BF:CC:27:CE:36
Authority key identifier: 74:A8:D8:47:29:06:C2:03:8A:AE:C8:4C:7B:3E:56:C2:09:6B:E8:60
Certificate issuer: /CN=74a8d8472906c2038aaec84c7b3e56c2096be860
Certificate serial: 019D262887F4A8944A262B3F7BE5BE69C0A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
Manifest number: 159D
Signing time: Wed 25 Mar 2026 18:01:23 +0000
Manifest this update: Wed 25 Mar 2026 18:01:23 +0000
Manifest next update: Thu 26 Mar 2026 18:01:23 +0000
Files and hashes: 1: dKjYRykGwgOKrshMez5Wwglr6GA.crl (hash: vsGQfr37pIrJ8VDIDvbTzYy9+ADE4nTzQXbRg0DZgAE=)
2: oQCJF4siUdcpboMPfHP2EbeM0ps.roa (hash: IesKj0DCrmac38Ifbjs7D9byS/qB5f4vRUYllQm6ZFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:87:f4:a8:94:4a:26:2b:3f:7b:e5:be:69:c0:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a8d8472906c2038aaec84c7b3e56c2096be860
Validity
Not Before: Mar 25 18:01:23 2026 GMT
Not After : Mar 26 18:01:23 2026 GMT
Subject: CN=26f95ec0596c6f97a970e66381c8b9bfcc27ce36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d2:d2:ed:82:2f:07:8f:99:32:36:e8:d0:63:
80:8f:e2:cc:be:32:c8:39:45:f1:4e:df:cd:4d:fe:
a1:4c:1f:8d:d6:56:1c:90:dc:83:b8:da:81:97:ea:
cb:1c:af:cf:5a:94:f7:a4:2c:a1:b8:0c:3f:8f:be:
3f:16:4c:bf:4b:b2:83:03:55:1c:74:95:4b:dd:15:
32:2f:25:9d:e8:fb:52:2d:52:f7:84:93:2e:c5:8b:
35:9c:ec:f2:15:d1:a5:32:d9:f8:53:48:14:f9:4b:
9b:ee:89:4a:80:95:74:99:1a:2d:86:c6:b0:96:7e:
97:dd:a9:3d:75:5a:63:f1:63:ac:ba:09:10:38:6b:
56:0d:62:44:34:30:9e:cb:24:7c:05:f5:c8:bc:c8:
d9:84:55:00:e0:24:7b:9b:e8:20:91:69:25:83:d6:
55:82:6e:ec:eb:7d:95:2a:8b:47:ba:7f:eb:85:01:
33:82:f5:a8:c1:7d:b5:9c:05:c3:58:f4:7d:6c:78:
4a:6f:57:7d:ee:f7:2a:d6:09:1d:c9:d8:3d:88:b6:
85:ed:68:62:91:9a:8a:68:36:95:9f:3f:46:de:1b:
aa:f1:32:9b:88:a6:26:86:ae:ae:02:96:54:3b:f9:
68:e2:4f:45:b2:3d:15:48:6b:7f:69:c2:4d:e8:8e:
42:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F9:5E:C0:59:6C:6F:97:A9:70:E6:63:81:C8:B9:BF:CC:27:CE:36
X509v3 Authority Key Identifier:
keyid:74:A8:D8:47:29:06:C2:03:8A:AE:C8:4C:7B:3E:56:C2:09:6B:E8:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:1f:4f:11:f9:4e:a8:6f:fb:0d:55:88:8b:57:70:12:f0:af:
1f:d2:a3:60:c1:4a:bc:a4:3c:a7:51:4a:31:b6:0a:4f:e1:60:
fa:f1:fb:66:43:73:63:f5:4f:91:0a:f5:f5:a8:6a:47:63:33:
46:ba:ca:48:22:35:f1:f2:8c:56:b6:a3:8a:96:9c:24:8c:55:
ba:ba:89:94:32:2c:ae:2b:66:bf:42:8e:b2:f9:1d:b5:9a:8b:
ab:59:fb:a0:f0:c4:50:5e:15:3e:d9:91:ec:56:1c:75:cf:33:
b6:09:6e:e9:cd:ce:8a:54:49:f6:ab:d5:5c:a7:8e:22:50:eb:
66:72:f7:11:8a:60:06:f2:f2:7c:d7:d7:4d:ab:c1:01:93:3c:
a4:2b:92:64:44:15:6c:c2:0d:ad:06:a1:d7:b5:7b:f5:33:54:
59:13:8b:f3:67:1a:c8:76:fd:82:74:0e:be:2c:b2:8c:d7:65:
28:42:12:b8:ac:85:e6:7f:c7:01:c6:f5:0b:a8:7a:fc:ce:a5:
49:da:c2:1c:36:99:1b:37:5f:05:8f:39:a7:81:42:4c:a1:1d:
bf:19:d4:cc:29:48:67:8e:8c:e6:84:33:bf:ca:59:b9:23:47:
13:36:83:6f:2f:bd:79:77:fa:5b:ce:50:86:69:ea:32:b5:29:
5e:28:f3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:54:22 2026 by rpki-client