Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
File: dxBykg2MmitA6zoEXx8qbjNKRJY.mft (raw, json)
Hash identifier: a4AkjCKQKZ7OkyMbOakFNHyXawtUz/r65Lmcl7ki8IQ=
Subject key identifier: 3C:EA:E4:BB:88:DD:95:39:12:16:54:E8:F3:A7:BF:67:39:86:DE:CA
Authority key identifier: 77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
Certificate issuer: /CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Certificate serial: 019E8E37580E07A80AB783340A0FDD9F98CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
Manifest number: 1943
Signing time: Wed 03 Jun 2026 16:00:52 +0000
Manifest this update: Wed 03 Jun 2026 16:00:52 +0000
Manifest next update: Thu 04 Jun 2026 16:00:52 +0000
Files and hashes: 1: dxBykg2MmitA6zoEXx8qbjNKRJY.crl (hash: G7akJJbctbXSslLUK+h8p/hTATjktrVJjnyGnadXGRU=)
2: qMa40C2bwbsuAhlKHVj7zBev3Sk.roa (hash: Q1yI4h86YGsQR3DwWZlfSBoYmM0cIR/AXm0wW8+aF5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 13:19:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8e:37:58:0e:07:a8:0a:b7:83:34:0a:0f:dd:9f:98:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Validity
Not Before: Jun 3 16:00:52 2026 GMT
Not After : Jun 4 16:00:52 2026 GMT
Subject: CN=3ceae4bb88dd9539121654e8f3a7bf673986deca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:54:c2:3b:ce:99:97:d4:3c:c1:b8:a7:67:5d:
b2:23:3e:38:b0:bb:6c:2d:6a:c5:da:04:82:9b:f6:
a6:ab:ee:6a:b4:ba:3e:cb:82:5c:5a:1a:2c:ca:0e:
7e:b1:89:fc:b0:7e:27:00:e4:c4:e1:ed:75:37:3c:
e5:30:e8:3f:69:cf:28:e1:46:c3:43:e1:ba:3f:6b:
65:a1:82:1c:26:69:4c:99:c9:28:e1:cf:df:a7:ce:
c5:14:d6:c5:a5:f1:07:e1:22:c8:d2:a6:53:d1:34:
b6:4a:a2:f5:a7:3a:a3:70:66:0a:34:60:7a:9e:e7:
cb:42:2f:50:a2:b8:0b:02:67:be:21:02:f5:d3:b4:
29:f7:e0:5e:4e:41:e9:3b:1c:b4:fa:18:93:65:0b:
57:2c:88:e9:51:14:f6:aa:20:ab:95:a9:37:0e:f9:
38:53:cf:ad:59:f2:d2:8a:cb:7f:b9:4a:49:3e:f3:
a3:b9:7c:32:79:f0:50:9b:18:80:7d:3f:50:44:63:
c4:7a:4b:5e:cc:dc:3e:ee:f3:5d:e3:4f:bc:1c:98:
42:8c:46:48:76:34:c7:34:cf:de:17:2b:58:40:e2:
32:83:9a:5f:21:98:a8:99:ee:1b:b4:a5:19:f9:bc:
1c:77:e0:86:ee:56:23:5c:43:ac:3a:ba:8d:cb:64:
28:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:EA:E4:BB:88:DD:95:39:12:16:54:E8:F3:A7:BF:67:39:86:DE:CA
X509v3 Authority Key Identifier:
keyid:77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:a3:5c:dc:e6:ab:f8:f0:35:27:dc:e0:21:f3:6b:3a:55:d3:
26:9a:b2:02:00:bf:c4:f0:9d:64:17:d1:35:6d:65:e2:bd:67:
c4:a8:a7:8f:9b:36:0b:09:1f:fb:9c:01:b6:27:7a:e5:e1:ea:
e9:2f:3f:ed:63:05:39:b4:4b:61:1e:a5:0b:c3:07:15:54:25:
e4:93:de:27:95:be:4e:15:15:55:fc:2c:3b:99:67:76:ae:97:
b6:5d:99:aa:94:79:07:dd:2a:26:4c:47:64:ad:f1:d2:40:98:
cb:9a:fb:28:19:29:2c:4e:54:a7:a6:ff:74:db:bf:e3:e7:ae:
fd:22:da:ab:2d:52:40:bc:8f:d3:52:33:c3:ae:21:8e:6f:27:
93:dd:43:8c:77:85:eb:19:12:c0:db:3f:e0:ba:0f:fb:65:d1:
da:11:9e:48:a8:fb:17:aa:8c:b3:5d:87:0b:d4:e5:fc:32:f9:
81:4d:c6:fb:62:f8:84:c9:7c:60:68:47:90:64:24:ca:0a:71:
da:5a:49:58:bf:67:c8:1a:77:ec:35:34:a0:a5:45:4b:52:c1:
c7:f0:5e:0b:d6:53:a8:7e:36:2e:cd:39:ff:a3:f4:4e:19:e2:
ac:45:87:32:d9:db:ab:b8:f9:7f:95:f0:4c:f1:04:14:b0:ab:
e4:50:8a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 20:02:21 2026 by rpki-client