Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.mft
File: dQ5S3lMzDVAFSYsPxAnmTdmLsJk.mft (raw, json)
Hash identifier: +VtLGO//LS68w312Zu3ta8ew27RewhKtrXeruK922G4=
Subject key identifier: 6B:4A:7D:DC:C0:B7:CB:5A:0A:ED:03:51:75:1F:D4:A1:07:07:57:FC
Authority key identifier: 75:0E:52:DE:53:33:0D:50:05:49:8B:0F:C4:09:E6:4D:D9:8B:B0:99
Certificate issuer: /CN=750e52de53330d5005498b0fc409e64dd98bb099
Certificate serial: 019D37C0D36EC5F4DE01215394D4411E47D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.mft
Manifest number: B6
Signing time: Sun 29 Mar 2026 04:01:17 +0000
Manifest this update: Sun 29 Mar 2026 04:01:17 +0000
Manifest next update: Mon 30 Mar 2026 04:01:17 +0000
Files and hashes: 1: Qkmm8NzglIDSaRRojnPgAONoFTs.roa (hash: +ytJC/qxZWUUZ4DE43GZcN4/00ano+1+6kAJf6whSh4=)
2: dQ5S3lMzDVAFSYsPxAnmTdmLsJk.crl (hash: wYUzIP9hnoSGGej7P8Txs7sqvUFSWssdeB8TjmZusTc=)
3: fS9DhAA3eiG8HtVq67hAVe5MUHU.roa (hash: IiJhrxZlH7dtIcu6+WjaoQeyu/z5L+5HOr52j6mMjfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:d3:6e:c5:f4:de:01:21:53:94:d4:41:1e:47:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=750e52de53330d5005498b0fc409e64dd98bb099
Validity
Not Before: Mar 29 04:01:17 2026 GMT
Not After : Mar 30 04:01:17 2026 GMT
Subject: CN=6b4a7ddcc0b7cb5a0aed0351751fd4a1070757fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b7:d6:df:49:6b:ee:d1:eb:3c:05:06:f3:a8:
3e:c4:e9:08:c7:8b:58:60:e2:f5:1e:0f:61:a7:5e:
95:3a:ba:d5:8d:76:0d:89:88:58:47:e0:84:46:87:
d2:fe:c0:cb:d0:0f:49:ea:3b:d8:05:86:30:51:54:
2c:a7:95:c5:13:d3:ec:51:08:bf:77:4a:90:c4:3d:
f3:15:eb:2c:27:1e:30:5b:24:8f:75:3c:2f:7e:6f:
42:46:c6:a5:c2:7b:0b:ec:10:9d:2f:fb:c1:d2:7c:
50:5a:cf:c5:53:66:ac:af:05:c3:3a:11:98:9d:07:
11:5b:05:84:0f:14:99:a5:2d:8b:5e:f5:a5:cd:80:
c1:ca:e0:f2:be:e3:b8:78:47:38:bb:7f:17:38:f2:
d7:50:22:db:d1:e3:c4:63:e6:ce:28:af:ba:30:ac:
e4:f1:38:6a:a5:fd:11:01:ab:77:95:09:ef:64:ee:
d0:30:33:13:5d:7b:7b:73:98:d1:89:fc:33:50:df:
7c:50:6f:c9:29:8d:d7:a8:ba:6d:81:df:13:1e:9f:
00:76:af:6c:3f:af:f3:19:97:58:44:8c:a7:8b:8b:
1c:51:58:77:51:3d:39:d8:45:db:ab:c8:dd:81:1f:
78:59:e7:a3:86:c4:de:c7:fb:37:b3:5b:4b:ef:5a:
cf:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4A:7D:DC:C0:B7:CB:5A:0A:ED:03:51:75:1F:D4:A1:07:07:57:FC
X509v3 Authority Key Identifier:
keyid:75:0E:52:DE:53:33:0D:50:05:49:8B:0F:C4:09:E6:4D:D9:8B:B0:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:13:0e:75:55:c8:1c:10:82:92:f9:e0:85:15:8f:e4:24:99:
1d:9f:ac:50:1e:96:bf:7b:4e:0e:3a:f9:88:1c:64:5b:4a:51:
83:04:55:57:2d:89:10:bd:0e:ae:f9:02:88:b7:31:a0:fd:47:
41:58:76:2c:9a:9b:73:9c:c1:35:71:92:65:01:99:78:08:c6:
5c:c0:94:dd:47:b2:53:9c:97:1e:06:54:59:4d:7e:17:f4:59:
d8:f2:63:97:29:30:06:cb:42:20:ba:8e:aa:8e:d9:d4:0d:f4:
36:a0:eb:aa:70:a6:ed:29:d4:75:92:e1:93:23:88:09:2e:91:
11:5b:3c:67:88:8c:6a:30:0b:cf:16:1f:bb:7f:86:b1:73:5e:
da:f8:b4:6c:c8:c1:40:b4:4f:68:d8:b7:31:6e:97:b4:49:cf:
8e:ca:03:3b:ab:b0:26:0f:98:64:35:48:5e:2b:ba:ec:37:51:
19:1d:99:65:2e:08:57:4b:e4:d6:7b:a7:61:66:5b:56:ed:db:
7e:b8:da:6d:75:6c:53:8b:22:bb:ed:a0:fe:18:88:21:f9:a7:
9f:ba:02:16:2e:e1:8a:91:b3:82:50:51:3c:a8:6f:74:70:7c:
b3:10:0c:a1:6b:f6:a9:3f:a1:fe:fe:e6:b9:f8:40:f6:2d:a9:
c5:0a:62:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:37 2026 by rpki-client