Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
File: dxBykg2MmitA6zoEXx8qbjNKRJY.mft (raw, json)
Hash identifier: lxaCjqaewD1EKJBM8spFTLy74KENllL4K0toisM7G+0=
Subject key identifier: 49:9D:A0:34:C6:65:F3:16:7A:A2:8E:3A:92:CC:36:88:97:0C:5F:BF
Authority key identifier: 77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
Certificate issuer: /CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Certificate serial: 01A1814FEA69F26AFF203D5DB1D036EB6072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
Manifest number: 1ACA
Signing time: Wed 28 Oct 2026 07:01:00 +0000
Manifest this update: Wed 28 Oct 2026 07:01:00 +0000
Manifest next update: Thu 29 Oct 2026 07:01:00 +0000
Files and hashes: 1: dxBykg2MmitA6zoEXx8qbjNKRJY.crl (hash: EItuek0AUNoWpogKsevmUdPkOHaqiuam8+xwotwtDWM=)
2: qMa40C2bwbsuAhlKHVj7zBev3Sk.roa (hash: Q1yI4h86YGsQR3DwWZlfSBoYmM0cIR/AXm0wW8+aF5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:4f:ea:69:f2:6a:ff:20:3d:5d:b1:d0:36:eb:60:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Validity
Not Before: Oct 28 07:01:00 2026 GMT
Not After : Oct 29 07:01:00 2026 GMT
Subject: CN=499da034c665f3167aa28e3a92cc3688970c5fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7b:2b:32:92:88:8d:ac:52:5f:41:c3:29:8e:
fa:03:51:a3:8f:ff:bb:ec:00:22:67:ca:b9:e1:d2:
f0:c6:77:b3:0d:f7:c7:0a:71:0e:73:db:61:30:44:
09:5e:04:7b:30:9e:1b:51:41:07:01:90:a8:e2:74:
16:dc:79:6c:ca:2b:fb:4d:ed:37:b2:ff:50:ae:fa:
34:38:54:45:5c:bd:cf:aa:b6:42:a4:a1:33:66:15:
49:38:8e:35:01:45:b1:c8:23:98:89:17:af:34:12:
9d:f0:a1:43:03:43:9c:d6:c1:d2:61:b7:bb:d8:2f:
18:94:56:09:2d:88:64:e7:bc:10:03:37:a1:3c:3f:
69:f4:e6:97:26:a3:6b:af:52:66:0d:05:97:a1:b8:
3b:0a:9c:c7:4b:77:16:fc:be:a6:de:07:43:1c:e2:
21:64:db:2f:9c:9e:84:8a:46:50:3b:79:80:a8:1f:
4c:1f:9e:cd:f0:50:85:ad:0b:12:ff:6d:cf:1a:e9:
c2:bf:a0:c1:1e:e0:c8:c3:52:fc:01:d1:2d:7b:4a:
45:79:63:12:09:a4:1d:9f:ab:2c:31:16:30:2d:8b:
ff:78:40:d5:90:de:87:cb:de:10:50:a5:26:36:6f:
ea:37:df:09:b2:76:74:d1:56:0f:12:dc:e3:b6:bd:
05:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:9D:A0:34:C6:65:F3:16:7A:A2:8E:3A:92:CC:36:88:97:0C:5F:BF
X509v3 Authority Key Identifier:
keyid:77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:0d:b2:c9:67:bf:29:ad:dc:1f:2d:d2:87:1e:33:6a:6b:05:
1b:bb:ea:56:3b:85:f4:9d:06:41:e1:46:27:0f:c3:ac:40:a0:
ef:a7:c3:10:aa:5b:f1:e5:97:9a:08:61:4f:4a:db:fa:70:3c:
0e:52:7f:37:84:ed:b7:83:52:a2:62:e2:cc:75:fc:53:00:cc:
9b:a2:b0:41:c4:1a:97:74:f9:42:5a:13:0b:6d:51:68:df:29:
76:e3:ef:d7:66:e2:0a:97:d7:52:83:6d:28:57:1d:77:44:f3:
29:5f:57:92:90:bf:dd:4d:89:ce:81:52:f6:b5:16:8b:2c:50:
43:8d:30:0d:0d:08:ee:39:c2:90:59:a0:6e:a8:d7:78:fb:c5:
69:2e:c8:36:2c:b3:40:ea:2d:8c:5a:be:bc:d7:ce:f2:8a:65:
82:c3:20:4e:f6:94:6c:ad:62:6f:f0:83:74:6e:eb:95:4a:6b:
d3:77:10:a1:7d:92:9b:a9:94:cc:a3:94:af:d4:ac:4d:5d:32:
35:97:e4:d0:28:43:35:21:6f:b7:73:10:10:54:70:21:91:21:
03:c7:c3:a1:f2:98:9b:ba:57:ae:6c:eb:f0:ab:52:b1:8a:e9:
eb:ce:42:a2:48:a9:f1:71:ee:d7:4d:08:0a:03:80:b1:c5:01:
12:0c:1d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 12:32:31 2026 by rpki-client