Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
File: _Dq1XVdQnL-ueYvXGqojs0RNjlo.mft (raw, json)
Hash identifier: ozkgR8G8WgpIGZLkK7Exnpi2whywHpluVGZtdipD1Z8=
Subject key identifier: 49:6D:DE:23:62:D7:3F:9F:29:74:A2:27:6A:65:4F:0B:A8:90:2C:04
Authority key identifier: FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
Certificate issuer: /CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Certificate serial: 019CB881D64208A1ACA03DC6A112E53CD126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
Manifest number: 08B4
Signing time: Wed 04 Mar 2026 11:00:42 +0000
Manifest this update: Wed 04 Mar 2026 11:00:42 +0000
Manifest next update: Thu 05 Mar 2026 11:00:42 +0000
Files and hashes: 1: DQYoTEX-x8cjYmvb3bOaTtlqK-o.roa (hash: kvQYDQBkZ3WehVJeMmEkmsNV2/eI8PigHmwQeG9g+Eg=)
2: _Dq1XVdQnL-ueYvXGqojs0RNjlo.crl (hash: rYHquJ4pYpMR8GfNuLFcBj/mYeBldtwOnhByH1r9eVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b8:81:d6:42:08:a1:ac:a0:3d:c6:a1:12:e5:3c:d1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Validity
Not Before: Mar 4 11:00:42 2026 GMT
Not After : Mar 5 11:00:42 2026 GMT
Subject: CN=496dde2362d73f9f2974a2276a654f0ba8902c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:41:18:65:59:4f:d9:47:6d:e7:a3:c8:bf:94:
cc:ce:73:1a:19:5a:92:91:9d:82:e3:46:f4:32:0f:
c2:73:a9:92:e4:fd:87:c8:76:bd:eb:13:1a:14:71:
a1:4c:bd:46:99:f9:a3:94:0d:ff:8f:31:ad:a4:35:
fc:66:70:ad:7d:55:78:51:e2:36:bd:a1:c4:68:0a:
e8:7e:40:d5:5b:8f:4d:6d:65:c0:24:65:33:fe:c1:
0b:03:71:b8:30:54:cd:36:03:81:f2:1d:bf:4c:24:
99:d0:b5:75:a3:e4:3c:66:8f:7f:e2:a9:e8:3f:95:
31:8c:0c:72:5a:93:65:7e:b8:aa:7c:ad:45:c4:88:
aa:5d:fd:ec:c2:0d:6d:8f:5d:b0:f4:4c:01:9f:c7:
dd:f7:6d:eb:6e:81:81:1c:76:90:0b:89:32:47:81:
28:af:68:73:f9:fc:ce:7b:4e:5b:27:91:39:86:e4:
3f:44:cf:2f:2b:b3:a7:6f:68:9b:4f:00:09:24:30:
81:dc:df:1c:f9:48:e3:61:0f:de:6f:70:7d:12:1b:
69:51:77:a3:1b:48:2b:a0:91:4e:29:49:1c:4c:a5:
dc:3b:47:7d:f8:95:2a:f2:61:17:b0:95:80:0d:8d:
40:ed:80:29:3a:21:0d:42:ae:f3:7e:ae:3c:5a:c4:
78:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6D:DE:23:62:D7:3F:9F:29:74:A2:27:6A:65:4F:0B:A8:90:2C:04
X509v3 Authority Key Identifier:
keyid:FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ee:94:6e:4f:72:4b:63:7e:8e:8e:94:31:7a:90:b1:db:80:
bf:8d:1a:3f:9e:b3:0d:07:7d:fe:70:ec:0a:7a:de:a5:c5:42:
52:61:5c:37:f5:33:33:45:ab:79:08:05:61:2e:ef:4e:aa:01:
69:e2:f4:ba:1a:32:f0:75:54:9d:ba:a0:ce:3c:55:cb:de:72:
80:d5:d5:c5:93:20:76:cd:6d:a9:af:4c:f7:88:2d:c4:9b:a2:
ec:9b:13:f5:36:aa:df:90:7c:e6:46:93:22:5d:fc:96:38:df:
82:d7:a0:e5:50:5e:cc:96:ab:e9:d2:39:97:0a:0d:44:5f:b7:
b0:8b:fb:f5:a1:fc:03:90:13:fe:91:1c:7d:f9:5d:93:7f:bd:
ff:fa:87:65:cb:8c:30:8d:77:4a:43:e2:dc:22:99:3d:f1:a6:
85:76:3c:1b:6a:be:4f:5c:05:e3:8a:c2:c5:59:b9:5e:8d:ef:
69:df:21:4c:f8:6f:7e:72:24:c0:ba:b0:9d:d6:af:96:ee:19:
ac:ad:7c:d6:b7:2b:8d:82:53:86:5d:f3:80:4a:53:12:fd:1b:
48:98:68:c8:80:50:54:28:c5:e5:cd:b9:ef:3d:58:78:7a:3d:
ae:2c:c1:11:c3:f7:00:5c:82:af:bf:e2:d4:a0:72:21:2d:84:
6e:b4:c0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 16:06:30 2026 by rpki-client