Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
File: dHquXSSwyXpCAx81EKFOL5W72Dg.mft (raw, json)
Hash identifier: V3DUrlb7ldVgDE6TUprr22HU1w7ybH7JC5m1mgTGVwI=
Subject key identifier: 33:CF:F1:81:57:E4:5B:81:F1:05:B4:33:A1:CE:E4:FA:22:33:4D:3A
Authority key identifier: 74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
Certificate issuer: /CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Certificate serial: 019DD05143B97B48F9C0285D3A68F7952250
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
Manifest number: 0A74
Signing time: Mon 27 Apr 2026 19:01:19 +0000
Manifest this update: Mon 27 Apr 2026 19:01:19 +0000
Manifest next update: Tue 28 Apr 2026 19:01:19 +0000
Files and hashes: 1: Caiwf_QYVrjuMQk3SKwJbOdkL1I.roa (hash: 5fx/cD2u1bFDALyIAFqy2QpBhB4xdpPsEpLHocGA9Q4=)
2: dHquXSSwyXpCAx81EKFOL5W72Dg.crl (hash: dF27jgXdIF2CYZ9vJLXC4ZibdXGIOOJ76DSA6xgB7V4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:51:43:b9:7b:48:f9:c0:28:5d:3a:68:f7:95:22:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Validity
Not Before: Apr 27 19:01:19 2026 GMT
Not After : Apr 28 19:01:19 2026 GMT
Subject: CN=33cff18157e45b81f105b433a1cee4fa22334d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:db:4e:39:6f:2c:db:9e:e0:0e:ec:95:5f:b1:
6a:84:3c:0a:04:98:41:99:76:c3:b9:31:34:be:7a:
11:7d:25:fa:e6:14:08:94:c1:47:db:d0:4e:9e:bb:
4e:d8:79:d0:95:82:3a:86:a9:53:70:78:31:78:98:
50:12:9a:4e:31:f0:8e:84:1d:a0:a5:1e:26:0b:a3:
2d:c4:9d:3c:5d:b8:e4:ba:ef:ec:77:fd:6e:96:13:
e5:2f:55:56:d3:3c:fe:40:53:f5:06:bb:84:41:cd:
f3:a5:67:85:8e:53:4a:2c:b1:b8:a7:a4:a3:25:4b:
76:89:ee:f4:78:68:7e:03:8b:c5:92:e0:8d:ae:ec:
ca:ed:82:88:6c:b0:75:6d:ee:43:74:de:11:2b:87:
6c:ba:b5:a2:bc:d3:b2:ba:6b:d2:af:25:0f:1c:21:
89:06:94:37:84:5d:da:58:0d:d0:fb:9f:3a:3c:95:
bf:e3:31:94:0b:21:7e:6b:93:40:28:49:da:6a:3e:
74:fa:f9:59:e8:0b:8c:cf:7a:49:53:ae:ac:f6:fa:
21:5c:cf:e5:12:87:d8:63:6e:b4:c3:7a:9b:73:f4:
f9:18:fb:92:15:78:01:cc:b6:04:28:9c:9a:46:f4:
4c:02:af:9a:6b:c9:88:fb:94:c6:06:dd:58:0e:e9:
3e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:CF:F1:81:57:E4:5B:81:F1:05:B4:33:A1:CE:E4:FA:22:33:4D:3A
X509v3 Authority Key Identifier:
keyid:74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:71:ba:c2:b5:d3:72:e9:33:8d:b5:66:06:fc:4f:64:a6:d0:
55:8a:31:99:73:f3:83:de:1d:a4:fb:8c:50:54:54:ea:1d:c5:
59:fc:73:f0:a4:38:41:64:3c:47:be:86:2d:97:bf:a4:69:9e:
96:02:53:0c:21:0f:8e:5a:d3:65:4c:08:bc:66:b7:76:bd:23:
06:47:ec:ad:fd:58:fa:9e:d7:89:ca:ec:aa:28:6a:25:1d:1e:
cb:ab:9b:1a:31:54:f5:fd:01:6a:83:7e:06:9c:39:5a:6a:6f:
c0:75:bf:b8:5f:31:87:e5:85:fb:8b:b8:f2:e2:cf:dc:70:44:
36:5d:13:32:d7:a3:4f:22:ea:c4:1a:fa:3c:ba:ee:5a:e3:a2:
e3:2e:1d:71:b6:3d:df:cf:fb:9a:81:73:f0:52:e5:01:99:1c:
90:f9:fb:c3:b6:6d:31:a4:f0:de:ca:53:8b:f5:b2:d6:a3:95:
ff:3b:1a:34:5d:95:1b:4a:9f:fd:fd:50:dc:b3:f9:51:b6:70:
d8:f6:95:9a:0a:48:56:ae:b0:16:72:1f:db:ed:34:ef:ca:f9:
9d:f6:20:49:9a:12:5b:6a:cc:f3:c1:48:b7:e8:c3:e8:ac:ce:
ce:d3:7e:78:5f:b9:55:0f:94:36:ca:82:a6:d7:86:0c:8e:35:
d2:05:45:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:13:27 2026 by rpki-client