Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
File: dAId0eJ80ed44tu9YKoYSxY7zv4.mft (raw, json)
Hash identifier: U3L0TBtbjt5ZdbWoxDE8GetqWh6TvuKJzRsUcmL/xXQ=
Subject key identifier: 1E:77:79:D5:1A:2C:F5:18:AC:90:67:F0:1A:E6:F0:5D:82:94:D6:F9
Authority key identifier: 74:02:1D:D1:E2:7C:D1:E7:78:E2:DB:BD:60:AA:18:4B:16:3B:CE:FE
Certificate issuer: /CN=74021dd1e27cd1e778e2dbbd60aa184b163bcefe
Certificate serial: 019CBD3A54AD2AADED3350D5D5D1BA6B6DA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
Manifest number: 03A6
Signing time: Thu 05 Mar 2026 09:00:42 +0000
Manifest this update: Thu 05 Mar 2026 09:00:42 +0000
Manifest next update: Fri 06 Mar 2026 09:00:42 +0000
Files and hashes: 1: dAId0eJ80ed44tu9YKoYSxY7zv4.crl (hash: nzWNiA+C2TPb426KDISZ1bmQ+tblvJMF+O6EklKFUV0=)
2: eh-_1IK7oCD8nbLcwB1h-jsivvQ.roa (hash: 1hB/vcchKccjfMUEW19JzNX5vcI2nAxqryUItaWwuI8=)
3: pdvwezXifSPbHn7Zg5GsoIZ-9_g.asa (hash: L3xvDc7N16Bw2yzHqAnTIftFzbiPXKuwqnDanSSbEog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bd:3a:54:ad:2a:ad:ed:33:50:d5:d5:d1:ba:6b:6d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74021dd1e27cd1e778e2dbbd60aa184b163bcefe
Validity
Not Before: Mar 5 09:00:42 2026 GMT
Not After : Mar 6 09:00:42 2026 GMT
Subject: CN=1e7779d51a2cf518ac9067f01ae6f05d8294d6f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:16:05:5b:d7:4b:85:29:bc:b9:54:97:cb:e9:
10:26:c6:b9:f4:25:d6:d1:ac:6b:70:39:1e:01:b6:
c9:33:8a:d1:fa:e8:52:cd:c4:00:12:99:b4:46:03:
45:66:08:bd:d1:6a:b4:4b:b6:8e:ab:63:00:97:d2:
91:65:a9:96:d5:02:5c:f5:e3:be:c3:47:f8:08:2c:
54:b0:0a:7f:4a:57:71:14:9d:43:aa:19:fb:dc:9b:
ce:44:fe:70:2c:36:1e:73:44:95:4e:ce:85:65:b1:
ab:a4:1b:e3:a9:7a:b2:dc:40:15:73:62:23:e0:52:
02:d5:a5:b3:9f:a7:7b:4b:d5:24:10:51:f9:21:eb:
70:05:72:8b:cc:c5:1e:41:a6:5f:04:02:c9:a5:0e:
3e:16:b3:2f:62:28:3a:41:3d:e9:0e:8e:ce:b1:5a:
f2:80:a4:5c:ef:89:6e:67:96:26:08:de:55:e0:58:
ed:5b:ec:95:30:b8:44:5f:84:2e:08:e9:84:98:fb:
c9:f5:b6:87:1d:33:3b:c8:a9:aa:c4:52:16:87:ef:
4f:39:ab:41:bc:bf:32:37:6d:36:1f:35:37:9d:bc:
b2:90:27:42:ae:62:b4:7d:b1:9d:42:70:0e:59:78:
59:44:51:32:7f:76:67:d5:36:2c:da:1a:b6:4a:eb:
1f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:77:79:D5:1A:2C:F5:18:AC:90:67:F0:1A:E6:F0:5D:82:94:D6:F9
X509v3 Authority Key Identifier:
keyid:74:02:1D:D1:E2:7C:D1:E7:78:E2:DB:BD:60:AA:18:4B:16:3B:CE:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b3:92:0f:b0:de:f9:92:d9:0c:2c:90:e4:d5:de:c8:ef:6b:
e6:49:86:41:90:be:ae:fe:da:32:99:97:ad:6a:35:65:a2:7f:
21:ae:27:aa:29:cd:2c:e3:77:dc:9b:65:cf:46:bc:df:10:a3:
f6:b2:8e:73:73:5a:5a:04:49:ec:d3:c0:52:06:f5:ca:5d:f9:
d2:7b:b0:da:ec:bd:4e:71:a7:7d:03:ea:f6:06:68:4a:27:97:
17:81:31:78:ca:84:f7:84:8c:bd:df:70:04:2f:64:cd:4f:14:
43:66:07:ad:04:30:e2:2c:58:8a:d0:1b:a2:6b:21:ab:e4:a7:
9e:86:4d:b9:96:dc:33:66:e5:c8:a3:42:69:00:85:fe:f9:76:
8c:0f:38:7c:98:2e:ce:8b:86:94:c9:3a:e4:3b:29:ff:6e:a3:
7d:cd:4f:1f:f4:5e:7a:05:eb:3b:0d:b3:d4:fa:ac:82:eb:a8:
f3:50:01:3b:25:d7:d3:29:6c:e4:25:c6:ef:37:64:29:eb:01:
22:be:b9:8c:b4:3f:79:39:ae:d2:5a:d6:75:af:3f:3d:63:d1:
bf:b9:bf:22:c4:05:8b:92:7c:ff:07:c6:62:ec:cf:4d:e3:98:
ef:3d:ae:cb:08:3a:24:a5:87:36:d8:c5:44:90:28:dd:db:ef:
37:66:82:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 12:46:40 2026 by rpki-client