Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
File: dLQqbeTgH8MSUNG74yIoEEbuYao.mft (raw, json)
Hash identifier: qbpCyX0kG49L1jCliHBStidOrd6bM4iTxT9crM6wMIk=
Subject key identifier: E1:2F:1C:10:F0:E6:9A:58:F2:7B:70:49:48:B9:BC:60:01:C7:C3:3D
Authority key identifier: 74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA
Certificate issuer: /CN=74b42a6de4e01fc31250d1bbe322281046ee61aa
Certificate serial: 019D3752B6FC44C96E2CF510056DA4FDFCDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
Manifest number: 1332
Signing time: Sun 29 Mar 2026 02:01:00 +0000
Manifest this update: Sun 29 Mar 2026 02:01:00 +0000
Manifest next update: Mon 30 Mar 2026 02:01:00 +0000
Files and hashes: 1: 2snz2cHxMIqDrmWpyQdj5PDHUMA.roa (hash: PDvyyYGhi1AmhDsFwKXgGPleS0592sAJ/29+42mhJtU=)
2: ck9fph3pnGBfD51d6ySumkAZbWw.roa (hash: cePM5hzSAL7gxgiyzP8i8tA4JspwG2EEsvqQZVUTIU0=)
3: dLQqbeTgH8MSUNG74yIoEEbuYao.crl (hash: Fd6HhhDPRoBfJQbVt92/REBrWoReEQSEFcLRAWezq7o=)
4: zsYC7eTs7CKxZQzMiKBYtW02NU4.roa (hash: zfsiqu/7VESSfUyUGFpkJ4f5HeLFmZSKqmckIw2soSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:b6:fc:44:c9:6e:2c:f5:10:05:6d:a4:fd:fc:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b42a6de4e01fc31250d1bbe322281046ee61aa
Validity
Not Before: Mar 29 02:01:00 2026 GMT
Not After : Mar 30 02:01:00 2026 GMT
Subject: CN=e12f1c10f0e69a58f27b704948b9bc6001c7c33d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:51:50:4f:e0:36:46:54:1f:cd:7d:d1:ee:9c:
c9:3f:b3:dd:98:2f:23:c5:b9:fa:3f:fd:81:8e:17:
10:66:74:7d:c2:70:48:fa:09:56:43:9c:ca:ab:df:
f5:0d:d9:8a:ee:f5:5e:06:ff:e9:f4:1c:d1:09:34:
b3:8c:c7:c8:89:9b:e1:a0:2e:9d:9c:29:9f:c5:90:
5f:c5:96:4a:e4:18:01:02:d8:66:9c:c8:39:55:93:
a6:00:2f:90:65:d2:e8:f5:1b:33:53:d3:b3:7f:38:
98:96:78:f9:f4:dd:b7:37:f1:13:1e:fc:da:9b:da:
30:b1:68:bf:ec:bc:ae:c3:6c:23:4b:c2:cf:ec:ff:
3e:31:41:a4:5e:6c:19:d1:94:be:d4:fe:13:e8:e1:
aa:fd:31:40:d0:1f:8e:3b:df:7c:d8:f1:4c:52:d9:
85:cb:d6:75:f3:dc:d1:c1:8e:96:a5:27:9a:87:46:
d9:e1:e4:35:c9:fe:3e:32:5b:db:bc:9a:2e:3a:dd:
3d:67:b2:9b:ae:35:ea:6d:2c:9d:ad:dd:59:29:95:
08:d6:c6:67:ab:38:df:3e:01:f9:59:8f:25:ee:55:
4b:98:f4:0d:a1:6d:88:f0:75:72:cd:65:cd:6e:e1:
56:cd:9e:b5:8c:dd:f1:16:aa:39:b9:60:80:e5:2d:
6f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2F:1C:10:F0:E6:9A:58:F2:7B:70:49:48:B9:BC:60:01:C7:C3:3D
X509v3 Authority Key Identifier:
keyid:74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:16:c5:f4:a6:42:5f:2a:8d:64:c1:ca:26:af:07:53:af:bd:
b8:d1:0e:92:25:8f:5c:00:5e:cf:22:1a:d9:94:7c:32:f4:22:
10:bf:8e:9a:56:11:f8:19:6e:88:47:c2:e1:2a:3a:17:a8:d8:
5c:9f:b8:d7:5e:5c:d9:d3:4c:0c:f0:19:8c:c9:21:76:ca:18:
f0:53:29:b5:c2:3a:af:e0:45:e5:5d:94:62:59:2c:38:13:e1:
93:d7:b8:dd:a0:39:42:41:a9:9f:61:f5:78:5b:82:39:dc:4d:
b7:f8:c1:7e:ff:21:9e:45:94:9c:7c:db:4f:91:c0:47:ad:61:
ad:7e:3f:40:fe:b4:4d:02:1c:cd:d1:b4:8b:bf:c4:d0:35:4d:
d1:61:7b:04:56:a7:7e:da:c0:05:d5:bf:b5:57:9e:be:ae:7f:
a2:cb:3b:93:00:78:4e:7d:f0:48:6d:e9:11:7b:63:2f:c1:8b:
09:ed:32:4f:f5:6d:ae:c5:2d:88:af:63:b6:ec:28:26:fc:f7:
d7:b8:ff:76:0d:5c:c8:c4:2a:a8:f6:ae:2f:79:5a:44:8b:b6:
0c:35:79:7e:2f:2a:dc:39:60:c3:7a:ee:8d:44:5b:d7:bc:56:
5d:8e:f5:ce:b2:5c:46:0b:ba:2c:ca:bf:ec:b5:61:35:12:35:
f6:d7:aa:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:41 2026 by rpki-client