Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
File: dqNyt1TkkgjWRqp4WeNItHXlJtI.mft (raw, json)
Hash identifier: FQUz6CoUbaoOAOAhZUGgVsEK09YJZjFYmrtn5wKSq6g=
Subject key identifier: D4:65:5B:B1:A8:14:A5:5A:86:88:82:AE:5B:B4:A1:AF:A9:A0:D7:3A
Authority key identifier: 76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
Certificate issuer: /CN=76a372b754e49208d646aa7859e348b475e526d2
Certificate serial: 019D3A53E39054E01D1A61FAC5341F4E7557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 16:01:09 +0000
Manifest this update: Sun 29 Mar 2026 16:01:09 +0000
Manifest next update: Mon 30 Mar 2026 16:01:09 +0000
Files and hashes: 1: dqNyt1TkkgjWRqp4WeNItHXlJtI.crl (hash: Tf7OOi91VI8+NBuOazs39nmV/Sxslzou3sQxRqZMNms=)
2: hU1lZW7ePs-jJStAbmgwJQdywgk.roa (hash: GCbi7/7u241zxcC9BwBBXY2OG87lKhbUz6RrhT+13oQ=)
3: oBx_PUd9jIs7YBgUmwcA4lLwIh8.roa (hash: hhGP/lSRzYSBVwOdWUcy+jdF25VySsbxm9Awg1JpKdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:e3:90:54:e0:1d:1a:61:fa:c5:34:1f:4e:75:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a372b754e49208d646aa7859e348b475e526d2
Validity
Not Before: Mar 29 16:01:09 2026 GMT
Not After : Mar 30 16:01:09 2026 GMT
Subject: CN=d4655bb1a814a55a868882ae5bb4a1afa9a0d73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b3:09:bd:af:1e:82:6a:86:93:bb:0a:6c:4e:
e6:18:59:9f:47:6c:1a:2c:b3:b1:03:5f:ad:66:8b:
ca:58:a1:3e:b4:60:c7:71:82:35:68:40:d0:ac:00:
91:b3:fc:ad:86:3c:36:33:e0:62:63:cc:38:70:c3:
8c:cf:d4:5c:27:c7:eb:00:74:8c:61:f6:c8:a8:47:
8e:ac:43:44:5c:3b:ec:0f:9a:a1:e1:5f:5a:22:c5:
be:09:23:66:e6:b9:e0:73:a2:6a:46:5b:92:28:7d:
c0:e1:63:77:92:39:b8:70:70:6b:7a:d8:05:91:5c:
4d:94:ad:f5:6f:dc:6f:4b:fc:04:ac:c0:a6:36:20:
cd:8d:a0:31:4d:13:0c:2a:91:ef:d6:0b:bb:66:73:
58:c8:ab:bf:08:d5:e3:d6:af:b1:e6:18:cf:4e:74:
f5:e4:f7:71:88:b7:98:f7:76:3d:04:fa:b8:32:f0:
d4:97:83:0c:f1:22:e8:7e:df:18:e5:67:3e:ab:72:
00:42:60:c5:a5:06:04:a2:2b:a4:dd:42:d3:73:19:
22:ff:ab:13:9e:4c:c3:fe:00:5b:c9:62:50:a8:8c:
46:ac:05:82:fb:fd:ee:5f:11:94:ce:e0:60:74:34:
93:6c:b8:ed:44:a3:de:3e:0d:35:d9:c4:65:eb:25:
24:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:65:5B:B1:A8:14:A5:5A:86:88:82:AE:5B:B4:A1:AF:A9:A0:D7:3A
X509v3 Authority Key Identifier:
keyid:76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:2d:22:39:a4:20:35:94:1b:f5:39:c4:5f:cf:c5:7b:e6:0f:
c4:22:bc:96:7b:63:10:fe:13:c7:f9:6f:90:1f:a6:95:fa:94:
5b:20:d1:80:da:65:9c:a7:5b:c9:c7:b4:55:a7:30:a4:41:46:
01:75:a5:16:5c:6f:34:51:3e:bd:49:7c:04:fb:a0:49:1d:ea:
bc:ab:36:b8:da:ae:ab:37:a0:73:b8:8d:70:18:77:b1:d4:61:
9f:82:e7:7c:0b:27:28:0d:15:5c:1c:5c:57:46:e7:40:26:56:
5b:f7:ab:7b:6e:e6:fc:eb:4f:d6:a1:a0:79:62:59:8f:69:24:
dd:20:07:31:51:24:06:e1:3e:1b:bd:3a:81:cb:0d:ea:a1:14:
b9:a9:c2:3b:f0:12:64:1f:47:f1:33:2a:cf:9a:0a:4e:3c:1c:
0b:f9:00:0a:e2:ae:7d:37:10:24:f0:8c:24:69:06:c1:dc:d3:
f6:a6:9c:29:92:91:d7:d1:d8:69:4a:57:4e:bf:55:08:4f:c8:
b8:d9:39:65:81:25:e1:de:7c:e5:db:9f:55:35:0e:95:f7:bf:
d9:4a:d5:0d:71:6b:2a:2d:c2:9a:21:6c:c9:62:88:da:2b:64:
f4:b8:7c:85:a6:75:bf:1a:cf:3f:ca:76:98:5e:b3:16:cd:89:
0c:3a:9b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:19:48 2026 by rpki-client