Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
File: dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft (raw, json)
Hash identifier: NLN+rjsE8pIdSXYuNNV0rOj/OPYWVBTSkfGeKe5YPqM=
Subject key identifier: B0:13:F1:FB:C5:0D:BD:D9:2F:6F:CB:18:61:DB:16:A2:54:54:44:EE
Authority key identifier: 74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
Certificate issuer: /CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Certificate serial: 01A17D3C2ED99E13F63BB3CE85C197F5C079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
Manifest number: 1650
Signing time: Tue 27 Oct 2026 12:00:58 +0000
Manifest this update: Tue 27 Oct 2026 12:00:58 +0000
Manifest next update: Wed 28 Oct 2026 12:00:58 +0000
Files and hashes: 1: dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl (hash: 1q160A5uh6R9dadWNgf2BPnRl97SR9kNxtaRgtmnZmo=)
2: ebNjr6wF8ptJZsxCF_H1FATel2Q.roa (hash: T9p3ve877mC/eqYiFHAqylDZAjZLIpC4U6yL58ZPYIU=)
3: nFTF0VkjXRKqCPY796T1GnzkqjY.roa (hash: WVddRHUkGr3zZHWqGX5a7FnpsfkXVaD8LmCGuvGSXrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:3c:2e:d9:9e:13:f6:3b:b3:ce:85:c1:97:f5:c0:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Validity
Not Before: Oct 27 12:00:58 2026 GMT
Not After : Oct 28 12:00:58 2026 GMT
Subject: CN=b013f1fbc50dbdd92f6fcb1861db16a2545444ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:09:de:66:75:e6:4b:d5:e1:6d:31:ea:07:e9:
b0:9f:38:6a:3b:df:b4:89:b1:7c:32:21:3a:2d:ee:
f7:90:3f:07:90:42:39:0b:03:03:44:ff:bc:f9:43:
96:98:35:8b:d8:8e:fb:c1:fc:dc:52:3e:0e:b9:85:
fd:27:b8:cc:6d:f8:21:61:c8:88:b0:c7:2a:6c:8a:
29:36:3c:4b:2e:34:e7:e8:6a:14:44:a3:e2:4e:dd:
78:3f:a9:16:b1:b6:6b:89:9f:38:bb:a9:02:59:58:
a9:3e:98:d4:f0:1d:0b:e0:74:b7:91:b0:1a:7c:16:
e6:82:d6:fb:c7:4d:75:25:6a:37:56:7f:aa:76:0f:
3d:28:44:5b:5c:2a:65:aa:f0:35:fe:db:83:1a:83:
14:98:3b:e3:c8:0d:8d:0d:7d:c9:c5:26:c2:12:c3:
cd:85:b3:15:e9:9f:38:b2:e1:f9:3a:ab:7e:db:6b:
7a:06:0c:a4:88:ca:74:52:45:3a:a4:b9:06:a4:5b:
af:ee:cd:1f:e8:5e:b3:ed:b3:23:97:41:00:d1:26:
a1:a3:d9:d5:5e:74:31:87:fc:02:7a:a4:27:77:ab:
fb:32:37:4c:4f:72:ef:c3:00:c9:57:1e:47:fb:21:
f5:12:f1:46:8c:cb:45:1f:26:63:14:52:2c:fd:8f:
32:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:13:F1:FB:C5:0D:BD:D9:2F:6F:CB:18:61:DB:16:A2:54:54:44:EE
X509v3 Authority Key Identifier:
keyid:74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:5d:96:70:4e:01:16:65:6b:2f:17:75:e8:f5:0e:dd:06:ac:
0a:f7:a6:a3:55:21:92:f1:18:ba:5c:c0:a0:81:b0:29:9e:d4:
b4:21:76:a0:f6:00:c1:98:99:3d:17:ce:51:be:7f:82:a1:7e:
7f:81:da:82:c6:18:18:4a:51:f6:ef:4a:73:f1:6e:f0:31:60:
9d:5a:76:86:3e:d5:7e:05:41:e7:6c:a5:d7:25:e1:f1:65:34:
b7:c3:fd:72:60:7c:fe:27:76:e8:6a:76:d8:33:1c:5f:55:e3:
8e:4b:f8:9e:60:d7:79:b6:fb:73:66:0b:70:44:2b:56:68:67:
e9:12:67:6c:b0:09:d5:24:95:a8:24:d9:ff:df:2c:51:bc:aa:
18:f2:39:86:21:bc:08:bc:4a:c1:6d:85:d0:50:63:3c:ea:45:
ba:48:6c:ff:25:3c:17:d8:ad:a3:32:2e:20:d3:a3:48:58:66:
fe:03:6e:75:ed:15:49:5b:01:e8:e1:78:2c:ed:b3:95:83:1b:
fc:98:a0:bd:fc:74:6e:1b:96:e1:ca:2a:f4:15:52:ff:15:e9:
a1:ca:b4:4a:ad:a4:c6:53:f2:c0:75:be:55:69:d8:02:a8:45:
ab:a1:e6:50:b5:76:c0:90:df:74:6e:58:51:78:85:47:8f:b4:
0f:b2:eb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:48:41 2026 by rpki-client