Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
File: dHquXSSwyXpCAx81EKFOL5W72Dg.mft (raw, json)
Hash identifier: wk6ZTH90k1bB0fOObIozDN09Y9Qg9DFSxRy373uSp7I=
Subject key identifier: FD:FC:B3:11:60:F5:07:18:F6:77:B3:A0:E4:8D:6E:9C:32:C7:1B:69
Authority key identifier: 74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
Certificate issuer: /CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Certificate serial: 019CE6A4BAC8AD2D07DFE72AE25ED7FBC237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
Manifest number: 09FB
Signing time: Fri 13 Mar 2026 10:01:21 +0000
Manifest this update: Fri 13 Mar 2026 10:01:21 +0000
Manifest next update: Sat 14 Mar 2026 10:01:21 +0000
Files and hashes: 1: Caiwf_QYVrjuMQk3SKwJbOdkL1I.roa (hash: 5fx/cD2u1bFDALyIAFqy2QpBhB4xdpPsEpLHocGA9Q4=)
2: dHquXSSwyXpCAx81EKFOL5W72Dg.crl (hash: ZnMsH1WludXKnI8lj7yv6Unbc4VADSzgyFMtwXJOKt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:a4:ba:c8:ad:2d:07:df:e7:2a:e2:5e:d7:fb:c2:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Validity
Not Before: Mar 13 10:01:21 2026 GMT
Not After : Mar 14 10:01:21 2026 GMT
Subject: CN=fdfcb31160f50718f677b3a0e48d6e9c32c71b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a5:08:b2:89:5d:b4:50:3d:79:57:e0:87:b7:
b4:0a:6e:9a:d1:1c:cf:46:17:94:2d:66:20:b4:4f:
95:a1:9d:95:3d:b2:ba:73:4e:00:7c:37:b6:19:e3:
48:81:2d:0f:7b:fe:e1:ce:c8:03:82:5f:22:4f:3d:
fb:e8:81:f2:86:b2:45:bc:92:a2:83:65:a3:ff:8a:
bb:5f:64:13:e2:4f:b0:b7:2b:e4:ab:bf:5b:97:6b:
e5:c1:6c:50:ce:4d:06:cf:ce:a3:56:88:f2:ed:14:
ce:fa:5a:82:e2:b8:30:b8:72:83:9b:7d:69:0f:af:
23:f1:1c:77:27:9a:9e:92:57:5d:40:4a:4c:bc:92:
98:10:43:53:13:3b:e8:3d:f8:33:6b:19:3b:9c:e1:
3d:88:85:50:43:62:ea:3b:60:10:1b:1a:b1:c4:e7:
e7:fe:c8:24:3b:4b:bf:46:f5:90:15:16:37:65:92:
5d:ef:7d:ac:26:3c:2d:e2:83:26:1c:33:a5:8a:72:
c0:12:df:61:40:51:0f:58:48:31:b1:35:db:b1:50:
8a:25:2f:cd:c2:78:9b:ef:41:92:2c:96:4f:8f:3b:
72:25:7a:f4:4d:5c:55:0e:c6:96:15:45:40:d4:67:
ea:4b:c7:0f:5e:64:46:e4:9f:91:b3:61:0c:46:42:
c2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FC:B3:11:60:F5:07:18:F6:77:B3:A0:E4:8D:6E:9C:32:C7:1B:69
X509v3 Authority Key Identifier:
keyid:74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:2c:7a:56:78:96:35:5d:8b:95:1c:95:1e:4e:17:65:d1:27:
a6:ac:11:ff:d3:74:17:8c:87:7e:c9:bc:32:a5:60:93:98:70:
77:d1:d9:0e:4f:47:92:fa:31:a5:63:9f:a4:f4:0b:4c:69:11:
04:e5:23:d4:4e:fe:9a:3d:e6:18:d2:03:d8:c2:57:68:46:0d:
6a:0b:ea:71:25:36:b8:d8:47:bc:0d:48:52:6f:14:87:62:76:
6c:73:90:39:17:f8:00:8a:7a:bf:e2:d3:6d:c1:96:6e:70:25:
13:79:b7:4c:6a:5c:66:72:77:2c:9a:1d:70:72:55:65:0b:3d:
ca:39:52:7b:58:64:53:f0:0d:b2:a7:08:d9:02:3f:5f:bb:51:
a9:bb:f0:ee:f2:04:14:5b:51:f9:09:0a:3f:a6:17:4a:9d:e2:
ef:f1:e3:8c:0e:fb:ca:ce:bf:27:aa:80:60:dc:ca:4f:0c:d8:
50:36:e0:42:03:f1:6f:71:c2:37:e3:9f:f6:7a:f4:09:07:b7:
7d:ae:32:07:d0:6a:19:fd:40:c4:bd:5b:e4:4a:68:60:7e:ca:
c7:da:87:50:02:a5:c4:14:d5:e0:49:65:46:50:e9:09:45:4e:
c9:c8:03:31:7c:5b:7b:79:f3:35:40:45:0f:f6:46:94:d4:f8:
19:89:32:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:45:44 2026 by rpki-client