Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
File: dqNyt1TkkgjWRqp4WeNItHXlJtI.mft (raw, json)
Hash identifier: TyZLM2S96k32xA8m2jFEWJOk/aEmmc4fXVVIgbmNYs0=
Subject key identifier: 3F:89:10:0B:79:07:82:45:23:22:F6:98:6B:2B:27:2A:B0:90:06:2B
Authority key identifier: 76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
Certificate issuer: /CN=76a372b754e49208d646aa7859e348b475e526d2
Certificate serial: 01A17B84026218A2D643C418F20E1203EEFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
Manifest number: 1AC4
Signing time: Tue 27 Oct 2026 04:00:11 +0000
Manifest this update: Tue 27 Oct 2026 04:00:11 +0000
Manifest next update: Wed 28 Oct 2026 04:00:11 +0000
Files and hashes: 1: dqNyt1TkkgjWRqp4WeNItHXlJtI.crl (hash: 7H6XdURlVAe0VIcAulnBpn/3dvkZCAszmWZ4ijdN8z4=)
2: hU1lZW7ePs-jJStAbmgwJQdywgk.roa (hash: GCbi7/7u241zxcC9BwBBXY2OG87lKhbUz6RrhT+13oQ=)
3: oBx_PUd9jIs7YBgUmwcA4lLwIh8.roa (hash: hhGP/lSRzYSBVwOdWUcy+jdF25VySsbxm9Awg1JpKdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:84:02:62:18:a2:d6:43:c4:18:f2:0e:12:03:ee:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a372b754e49208d646aa7859e348b475e526d2
Validity
Not Before: Oct 27 04:00:11 2026 GMT
Not After : Oct 28 04:00:11 2026 GMT
Subject: CN=3f89100b790782452322f6986b2b272ab090062b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c7:cb:b3:3e:3d:e8:90:f1:7c:22:51:fe:c8:
56:8d:98:b5:cb:58:f4:46:6b:0e:09:e8:08:19:1e:
42:d6:a5:d7:f0:c3:d8:f5:03:0c:41:bd:94:74:9c:
31:0f:33:65:f8:a8:5e:44:76:75:15:f2:bd:88:49:
9c:b8:62:c0:c9:7f:c1:4e:68:c2:bd:4c:7b:c7:f8:
da:68:4a:4d:c1:d1:17:86:2f:f8:ef:68:0e:18:45:
a5:07:26:7a:12:ee:3e:43:d8:36:6f:1c:2d:cf:5a:
bf:1d:52:72:d2:70:59:27:96:f0:d5:78:17:20:52:
0d:e0:9b:71:aa:8a:49:02:01:dc:8e:f7:2d:c1:5a:
80:5b:9c:2d:6f:9b:b7:8b:d2:9b:e8:31:c1:06:e5:
0c:ec:a4:a4:21:f0:f8:7a:10:34:1a:b7:f2:cc:b4:
ad:d6:62:8c:cf:bd:9f:48:a5:89:ba:1c:50:cc:9f:
51:8b:8a:ab:cb:72:bf:b2:d2:23:3b:69:c4:46:bb:
36:d2:f5:03:df:c8:ce:1a:2b:6f:39:db:32:4a:27:
c4:3b:a5:8a:55:92:6c:30:08:32:64:91:c4:e5:40:
62:c6:e3:ce:a1:6f:1a:0f:65:16:af:ef:68:43:23:
1c:a0:c9:37:67:fc:da:18:b5:45:cb:d8:70:84:01:
ec:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:89:10:0B:79:07:82:45:23:22:F6:98:6B:2B:27:2A:B0:90:06:2B
X509v3 Authority Key Identifier:
keyid:76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:e2:0c:8e:21:ff:a5:fe:07:49:80:b3:1d:f3:bd:9c:8c:a3:
aa:ae:d2:e2:cf:be:ce:be:d3:60:d2:9a:29:56:37:f8:19:b1:
35:ff:4b:21:a9:a4:d9:9b:c0:99:82:da:2f:93:a2:12:2a:d5:
a9:f3:00:9b:58:2b:84:87:6c:a3:9a:08:0f:35:ef:de:d6:18:
4c:f4:a3:5c:23:93:9d:83:42:07:7e:87:a2:79:ee:40:d4:d1:
06:08:47:e4:49:5d:f7:b0:d2:91:6d:d5:42:16:c5:54:c3:7f:
c8:8f:be:5b:ca:24:76:0b:78:c9:66:8c:77:70:28:46:43:58:
29:ea:e1:50:57:f7:4a:c1:29:3f:53:1b:f0:b1:99:0a:6f:98:
7f:03:ef:91:0e:f8:5e:f7:d2:b5:5b:94:73:1b:3c:45:81:f1:
c5:b9:86:18:96:88:a3:0c:98:14:f5:be:97:16:83:da:f2:0c:
c8:fb:db:3d:45:9f:92:df:29:f6:97:02:bc:d9:45:99:80:9a:
e6:f7:0f:8c:dd:e9:57:81:f6:d0:c4:60:ee:3e:52:70:db:a0:
1a:5c:c7:54:05:62:82:2c:f2:6c:bc:7a:1b:54:68:1a:b5:1c:
34:83:60:bc:d2:24:e2:17:a4:23:b8:b0:b3:eb:5e:2a:f7:e5:
9d:2a:f8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:31:04 2026 by rpki-client