Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
File: txDNRHGj-M3NhE0_NmFIlAlStOc.mft (raw, json)
Hash identifier: 7QqoO61k5sQVGlpm7rBk+IM14ynoJY1UcuX2bnG2rxY=
Subject key identifier: DE:A9:4E:57:44:F1:EE:61:BF:03:B3:78:7B:91:20:C2:53:DE:B7:B4
Authority key identifier: B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7
Certificate issuer: /CN=b710cd4471a3f8cdcd844d3f366148940952b4e7
Certificate serial: 019D29CE2C353012052CDE63F12945768114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 11:01:10 +0000
Manifest this update: Thu 26 Mar 2026 11:01:10 +0000
Manifest next update: Fri 27 Mar 2026 11:01:10 +0000
Files and hashes: 1: Hh4oawFMPhlZWHiv9oVznjVHldw.roa (hash: ZkANeMjzmI2+4mD6XiyteCRytMwKnaF4f4SfTl1h+1g=)
2: txDNRHGj-M3NhE0_NmFIlAlStOc.crl (hash: nvMlSLwjoxLSCSYiGLhbxe+fHe4znAq02+D0pKisk/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:2c:35:30:12:05:2c:de:63:f1:29:45:76:81:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b710cd4471a3f8cdcd844d3f366148940952b4e7
Validity
Not Before: Mar 26 11:01:10 2026 GMT
Not After : Mar 27 11:01:10 2026 GMT
Subject: CN=dea94e5744f1ee61bf03b3787b9120c253deb7b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c8:57:5f:b2:1e:fc:e9:e9:5f:b3:94:fd:a2:
c3:c0:6e:32:46:a3:27:49:d9:6a:d8:54:03:31:38:
1a:de:d5:f5:ca:d7:ee:7b:2e:ac:d9:66:f4:ef:0c:
d4:15:f5:fc:f7:42:36:bd:35:7e:05:50:92:40:67:
1a:67:cd:cf:cc:62:2b:4a:7f:e5:05:d8:26:90:ab:
54:9c:f1:e6:24:7d:ca:77:e7:e8:eb:1d:7d:dd:0a:
38:71:70:bc:ad:bc:2c:1d:51:87:60:aa:d6:5f:03:
79:48:b5:f5:cb:ac:a5:0a:f5:dc:2e:70:53:12:69:
f5:ae:ff:11:7a:45:fb:e2:40:3e:b4:bf:1a:2d:46:
4c:6c:a1:21:bc:54:33:f3:f8:93:fa:d2:07:0f:e9:
b9:35:ad:34:bd:ac:fd:22:fd:b2:df:90:80:76:dc:
78:6c:46:e3:b1:40:2d:1a:ed:84:6c:ec:4b:95:cf:
6b:41:e5:c8:ce:7d:27:21:d1:5a:eb:6a:9c:13:6e:
4e:77:9d:ef:48:a8:c1:cf:e4:c1:b9:71:82:f7:c0:
c2:3f:ed:a9:ad:0c:fd:ae:76:5b:42:f0:8c:53:62:
8a:8d:88:ca:8c:88:07:9d:b8:0f:05:bb:3d:42:64:
1b:4d:19:e7:28:04:65:99:30:38:7a:53:31:62:10:
37:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A9:4E:57:44:F1:EE:61:BF:03:B3:78:7B:91:20:C2:53:DE:B7:B4
X509v3 Authority Key Identifier:
keyid:B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:50:fe:77:31:98:81:ef:00:c3:dd:5c:2f:92:0c:ac:7b:13:
b6:e1:d0:74:c2:93:53:bf:3a:f6:df:94:73:d2:4f:49:ed:2a:
cc:1e:0b:b6:d5:95:3d:aa:35:2c:05:f0:58:73:fb:5f:9a:45:
b2:01:dd:26:a5:2c:15:36:ad:06:79:84:88:7a:92:1c:6f:2e:
a9:37:e1:60:f3:4d:dc:9b:94:cf:cb:e9:61:27:63:02:32:d2:
23:f5:c5:be:59:da:21:c9:ae:51:3f:34:e9:ce:90:61:17:62:
e5:d9:88:d8:ba:c4:87:b7:63:d6:aa:5e:4a:03:35:e3:c8:1b:
69:56:14:4b:4a:9f:bf:13:5b:ba:d1:55:8a:2c:f0:d3:dd:0c:
15:f4:f4:9b:60:f3:e2:57:97:c0:70:68:77:bc:b6:e4:27:3e:
72:68:d4:82:ef:ea:47:3e:e5:c7:b7:b2:e1:7d:62:ed:3e:3b:
0d:4f:c6:f2:50:a0:32:3d:42:23:08:08:57:78:af:81:5b:a7:
8a:49:ed:f2:df:31:5d:4c:ba:95:0d:9f:f3:1a:a7:94:9d:e3:
c4:f9:9f:98:ce:c6:7a:bd:38:d5:aa:ea:2e:5f:dc:6a:1e:a9:
6e:8e:0f:c1:bd:0d:f6:07:2c:71:ee:9a:9c:09:84:45:c2:e1:
23:c5:55:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:21:15 2026 by rpki-client