Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft
File: datAiqn3GoHog_jRSWX3c1OLWkA.mft (raw, json)
Hash identifier: D/Ab4QUM14uD+jxiQUq8PGltdmuP2xG2OwJnYTMqXj8=
Subject key identifier: 43:07:C1:55:EA:08:3E:2C:8D:C4:28:CE:1B:09:A6:0C:20:B6:A0:0E
Authority key identifier: 75:AB:40:8A:A9:F7:1A:81:E8:83:F8:D1:49:65:F7:73:53:8B:5A:40
Certificate issuer: /CN=75ab408aa9f71a81e883f8d14965f773538b5a40
Certificate serial: 019D3977A22D4D87855FFA2BF4527B723F58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft
Manifest number: 0574
Signing time: Sun 29 Mar 2026 12:00:34 +0000
Manifest this update: Sun 29 Mar 2026 12:00:34 +0000
Manifest next update: Mon 30 Mar 2026 12:00:34 +0000
Files and hashes: 1: ajNgz3i4R4z9MoH7g9Gh2FsCAiM.roa (hash: ak7eVyyVkmWQATGl9IjiTOWOerTXTRW7k0wkBuX7rhg=)
2: datAiqn3GoHog_jRSWX3c1OLWkA.crl (hash: 0Vj3tveNOZURcRj5QasY7z/4DYjvYLUzhAivkPVcXeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:a2:2d:4d:87:85:5f:fa:2b:f4:52:7b:72:3f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75ab408aa9f71a81e883f8d14965f773538b5a40
Validity
Not Before: Mar 29 12:00:34 2026 GMT
Not After : Mar 30 12:00:34 2026 GMT
Subject: CN=4307c155ea083e2c8dc428ce1b09a60c20b6a00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b9:f6:9f:df:71:46:f8:f6:cd:66:ec:c0:c5:
27:cb:07:88:1a:0d:99:19:0d:98:a6:d7:74:19:a6:
44:61:e3:82:06:ad:3e:b8:20:7c:fa:0d:34:55:0e:
cf:9d:af:bc:bc:b2:86:33:ae:66:c4:15:cd:39:c4:
85:1e:70:46:e7:2a:ea:20:fe:5f:04:8d:40:50:a1:
93:25:35:78:66:de:9d:b8:c0:c5:a3:a8:fe:0d:c2:
12:17:c5:6c:07:fb:c9:20:c4:ef:7c:04:2f:c3:d5:
8f:49:f5:67:a0:b5:98:5e:fb:62:19:ff:af:c2:d2:
60:2d:ed:89:c2:fe:2d:df:f1:b6:0c:c7:d8:c4:57:
ad:12:e8:c9:d0:97:2c:d1:a2:ef:55:a0:27:56:1c:
67:62:4c:25:af:d9:79:ad:84:55:1b:d0:05:47:6b:
3d:ba:54:41:50:8b:62:bc:36:21:89:73:17:3c:7d:
d2:df:9a:dd:bd:d4:e0:50:be:b3:8f:b7:3e:b1:99:
c5:86:45:9e:00:6c:e1:46:26:19:4f:51:1f:dc:0d:
e6:f9:2d:b5:07:c8:d8:de:be:2b:be:c5:7a:6d:5a:
76:1d:f0:cf:b6:be:ae:55:be:6b:00:8d:63:34:40:
64:38:e9:3b:ba:0c:63:0f:63:82:bb:22:43:2f:62:
4b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:07:C1:55:EA:08:3E:2C:8D:C4:28:CE:1B:09:A6:0C:20:B6:A0:0E
X509v3 Authority Key Identifier:
keyid:75:AB:40:8A:A9:F7:1A:81:E8:83:F8:D1:49:65:F7:73:53:8B:5A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:38:fd:f6:f0:be:54:59:42:ce:83:57:5c:e1:19:ee:df:94:
f4:3f:be:d1:1b:78:2c:7d:7c:cb:23:26:86:66:c4:af:de:ec:
33:08:de:84:f6:d4:c6:23:ee:dd:a3:79:ca:b3:03:b9:ea:50:
98:64:3c:76:46:5b:94:57:ec:17:e0:32:d5:2c:c9:98:71:91:
94:83:48:14:92:91:d1:08:27:5a:8f:21:61:10:10:b9:27:93:
c4:60:4c:aa:77:05:23:28:a6:9e:57:52:fb:12:f7:0b:29:6a:
74:0c:9e:eb:36:d1:23:2c:a9:39:cf:7f:89:56:79:8c:4a:94:
11:11:d9:f5:a2:94:a6:a7:a6:94:85:88:8c:1c:35:0f:ce:21:
73:2c:e6:05:56:d2:47:52:58:f9:49:e2:f0:51:b7:c3:2c:8e:
62:44:32:e0:05:23:4e:d4:2c:f0:74:ca:2e:11:bf:22:6c:84:
4d:9e:ec:72:aa:09:3e:c4:00:c3:31:c0:11:b8:e5:46:58:60:
3e:d8:c1:dd:25:71:71:03:96:af:78:56:40:0c:c4:57:39:81:
80:c2:29:39:c0:d9:f4:97:4d:89:28:2f:9b:ef:71:2f:23:58:
5f:4e:42:b6:7c:73:de:97:0e:5b:72:0d:72:0a:07:ab:61:6c:
93:1a:9d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:58 2026 by rpki-client