Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
File: dn871L-9MHHDjNTXCSvTSQkgw9k.mft (raw, json)
Hash identifier: qYPZpRUOwFTq8pD1cuvCHp/58u2t7ADtSwmx743FL1Y=
Subject key identifier: 24:7C:E3:A1:3A:FE:FE:D9:8C:FA:E5:8B:1C:D5:FA:28:66:2A:35:DB
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 019D0E20228B036E790889549695C62F626C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
Manifest number: 1269
Signing time: Sat 21 Mar 2026 02:01:20 +0000
Manifest this update: Sat 21 Mar 2026 02:01:20 +0000
Manifest next update: Sun 22 Mar 2026 02:01:20 +0000
Files and hashes: 1: 2_M3hjSd7CTsmWcIflPRCb5WQkA.roa (hash: lb+AroYfcHpsLjtLQUflH3VlWHXn0bD5oDoLv70oXjU=)
2: GApNKBWC5Ue-NAU5Sg1EwP8MY6k.roa (hash: 2tMBvhTBaG9FOblLPHKcO+h2HyVM2AobojKlvW5vzV0=)
3: S_cMNHwGmO53SbTaPSTvEUZSyO4.roa (hash: VJ2mNoR51FwtQFNmuZTNPyshVFI+sQ6fyBXwc1Q4lR4=)
4: TpDZ8IP6rdDoqNG2faUZ93mOnhY.roa (hash: WauO2SokhDFlsHFeFhypHeCTlK3wDUgWAzshLZtKSQg=)
5: dn871L-9MHHDjNTXCSvTSQkgw9k.crl (hash: xGm4Vf3IoMnigWeCeSjLxJow3VqzP45dCYaeeRRSq5M=)
6: dwc98g5fGUgPAWxFG8AQgkdTGUE.roa (hash: r33CVUyGl3+7P6ErqgK1Pc1v2YLarpkrErbsExQx0So=)
7: ocHcLPqIiXs39TMNmLocr_HH0to.roa (hash: 2m7W1dsOxKOHHVh+M6gzZPsYBZCOmqgU0+hBomALNJM=)
8: yrbB1vsBIjdbUaylEPRfMMB-k3g.roa (hash: uUmid3sXY3uL8GFqpHsIlPFVeU82iqmCl12sBdQU42s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 02:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0e:20:22:8b:03:6e:79:08:89:54:96:95:c6:2f:62:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Mar 21 02:01:20 2026 GMT
Not After : Mar 22 02:01:20 2026 GMT
Subject: CN=247ce3a13afefed98cfae58b1cd5fa28662a35db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6e:c0:d5:8d:a0:7f:f9:7c:5e:34:93:fb:ac:
c7:38:11:62:a8:86:f1:87:f5:ed:32:75:36:63:4f:
a9:91:55:0a:40:41:3f:6e:ae:69:d6:5d:ab:85:bf:
08:16:99:98:df:93:ef:0c:7e:37:ee:40:d2:4d:43:
01:19:1b:8b:2a:2e:c4:5b:c3:91:d6:20:0a:a1:c5:
04:e2:6e:2d:13:e5:49:4d:62:ea:29:62:2c:01:31:
61:86:79:3e:4b:0d:a6:d6:53:09:9d:64:86:e5:2c:
af:63:4a:85:01:bc:4b:a6:a8:a5:4c:89:cf:48:4f:
c0:d1:cf:97:ec:a2:94:3e:77:ab:ce:94:dd:bb:8c:
39:f6:77:a5:22:8f:48:da:bc:4a:17:b0:44:f3:37:
26:8a:73:c5:6b:99:6c:96:19:a7:dd:9b:0c:72:4a:
b5:a1:10:d1:38:1f:fe:56:52:db:d2:54:47:13:7c:
64:22:f9:23:4f:29:90:6a:13:65:3c:78:35:e1:f8:
f0:ef:84:3c:35:30:45:47:07:14:43:a3:4d:21:cc:
f6:98:ca:e1:fc:14:50:77:4b:e8:b0:cc:d4:5d:f0:
b8:25:45:5f:62:14:cc:7d:9b:62:75:f5:ee:82:3c:
7f:b2:4d:2e:3d:08:e2:d9:81:59:7b:8e:5e:d8:23:
10:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7C:E3:A1:3A:FE:FE:D9:8C:FA:E5:8B:1C:D5:FA:28:66:2A:35:DB
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:95:c5:7f:c8:17:4f:6a:ad:a0:6d:4e:77:06:91:a6:62:91:
84:63:4a:06:ac:13:4a:d4:ec:b9:15:5f:65:42:5f:3d:ee:8e:
f4:24:58:5a:59:8c:bd:2a:ab:e9:27:99:7d:0f:b5:ce:17:85:
27:37:47:23:6e:87:e6:59:f1:b6:b4:db:05:1c:c9:2a:24:77:
41:a0:95:df:cf:6c:e8:53:94:a3:ab:b8:21:16:08:63:2d:69:
f9:50:f9:6d:f8:a2:5b:ac:27:a3:98:a8:6e:2e:08:a4:bc:46:
9f:5f:53:8f:7d:48:25:b6:6e:16:70:fd:71:c0:71:d1:66:ff:
7b:3d:06:2f:2d:53:d1:5f:ae:c1:08:d9:72:0d:3e:8e:fb:11:
2a:e7:82:9b:14:cc:5f:fe:d2:10:3d:20:87:d3:30:de:ee:ae:
24:65:36:bb:af:d1:aa:d6:73:ce:ae:13:a9:51:8a:ab:f9:9d:
7e:38:ac:f7:12:5b:ee:c5:a7:0e:f8:ef:55:43:d0:ab:e1:e3:
71:7a:06:c9:65:be:10:1e:b3:63:30:fa:b1:d7:f3:44:1a:9a:
23:c9:0d:8a:ab:a3:31:03:59:dd:a2:ac:e3:a8:1a:e4:c6:ed:
62:1d:01:b3:2d:43:0b:62:e1:78:f3:85:fe:a4:53:7b:1c:2b:
73:8e:02:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 08:03:34 2026 by rpki-client