Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
File: dxBykg2MmitA6zoEXx8qbjNKRJY.mft (raw, json)
Hash identifier: o/7tP/4+slZzEN4S99hd+Wra5EVGMK/f+i+gOhXRybs=
Subject key identifier: 07:08:00:7D:41:C7:7A:80:94:CD:61:25:F7:68:5F:AF:62:19:4F:03
Authority key identifier: 77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
Certificate issuer: /CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Certificate serial: 019CB8EFF320DE1EE98F784522B2350A5357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
Manifest number: 1850
Signing time: Wed 04 Mar 2026 13:00:58 +0000
Manifest this update: Wed 04 Mar 2026 13:00:58 +0000
Manifest next update: Thu 05 Mar 2026 13:00:58 +0000
Files and hashes: 1: dxBykg2MmitA6zoEXx8qbjNKRJY.crl (hash: +UhUKON68CqHkgjTLfhKU9vwTb4RtysFqQytMPgp44I=)
2: qMa40C2bwbsuAhlKHVj7zBev3Sk.roa (hash: Q1yI4h86YGsQR3DwWZlfSBoYmM0cIR/AXm0wW8+aF5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b8:ef:f3:20:de:1e:e9:8f:78:45:22:b2:35:0a:53:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Validity
Not Before: Mar 4 13:00:58 2026 GMT
Not After : Mar 5 13:00:58 2026 GMT
Subject: CN=0708007d41c77a8094cd6125f7685faf62194f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:09:00:ed:38:e9:b2:b7:c9:c6:32:64:b9:76:
ec:e4:c7:4a:f8:23:c0:9b:b6:13:a5:ae:8d:c4:dd:
80:ee:46:05:94:6b:1a:83:59:c6:47:b5:14:66:82:
96:d0:b1:78:5d:27:50:9a:2c:81:7a:e4:44:6f:26:
fd:a7:92:9d:fd:0e:cd:06:30:57:d5:7c:d7:a3:97:
aa:35:3b:70:3a:71:19:c2:5a:ce:24:55:3a:56:e5:
f5:86:8b:4b:97:b2:e0:d8:a5:a5:24:aa:ab:e6:4b:
c8:92:31:99:2b:b4:87:fe:fc:62:c8:52:22:c7:48:
be:23:fc:42:cf:3b:da:04:0e:fe:84:77:72:00:19:
e9:0c:ea:c1:42:73:41:2f:7a:a1:8a:04:c7:b4:78:
1a:d3:eb:2d:c5:97:19:2f:01:33:22:5f:41:b9:cc:
9e:1b:0b:dd:9e:20:1c:bf:a1:9a:da:1c:68:c0:e6:
8f:08:9d:1f:f4:ed:41:c6:86:d7:dd:6b:ca:f9:bf:
d2:8f:7b:6d:a1:eb:92:aa:0f:2d:b9:0e:e8:4a:23:
d9:ae:35:1f:5e:17:fe:9b:26:f1:f6:6d:74:16:d0:
6e:31:6d:20:bc:64:f4:31:9f:7e:f1:69:cf:3a:a9:
2b:9b:19:54:85:5c:89:3b:c5:15:95:1f:39:79:bb:
fa:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:08:00:7D:41:C7:7A:80:94:CD:61:25:F7:68:5F:AF:62:19:4F:03
X509v3 Authority Key Identifier:
keyid:77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:70:26:bd:18:1d:e4:b9:2f:4f:1f:55:fc:b5:56:eb:c3:ab:
b4:34:e9:6f:71:e7:7a:76:de:63:5a:71:a6:49:51:50:71:6e:
47:52:3b:b7:8a:c2:fa:17:3a:59:4b:3a:80:29:49:e4:da:46:
9a:da:fd:5e:a7:bc:06:e3:94:46:4e:38:41:1c:c3:df:2e:dd:
0e:0b:70:11:8d:41:35:e6:02:ae:73:f6:92:e3:ad:ed:65:65:
2b:62:21:c6:ac:0d:90:c9:f3:78:62:74:ce:8b:d2:d8:6e:e8:
0c:db:4a:9f:9f:41:88:17:62:36:f1:90:f7:21:e2:62:d6:0b:
db:10:de:e2:46:24:1e:a8:9b:16:c0:5a:ee:fb:6c:ef:50:91:
af:d4:d8:85:34:49:19:5a:11:3d:fa:59:70:1c:86:60:a0:d6:
7a:55:57:1e:e2:e6:87:f2:a4:10:21:07:6a:1a:43:92:ac:71:
28:58:50:40:6b:f6:6b:e8:a7:b0:9c:fc:41:5f:b5:4a:35:be:
69:00:0f:b8:88:81:42:74:c9:1c:e1:bb:f8:62:5d:63:97:3c:
f7:c5:7c:c9:de:81:7d:8c:2d:10:b7:ed:a3:d3:99:a9:af:53:
f2:7e:b7:ad:ee:c4:e8:02:ad:c1:f4:9e:6d:02:1e:c4:bf:4f:
37:21:50:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 20:59:28 2026 by rpki-client