Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
File: dX-f3qNQp2a7mMYE07nCeRZzIgk.mft (raw, json)
Hash identifier: 3tCFI5FyJ5NsVkFDEIkxMbnzdfqgILQ5NesEHRqMuDY=
Subject key identifier: B0:30:B2:A3:FA:95:3C:45:44:75:E5:16:8F:80:4E:36:A7:40:06:01
Authority key identifier: 75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09
Certificate issuer: /CN=757f9fdea350a766bb98c604d3b9c27916732209
Certificate serial: 019CC82C0F9617B8CD8A57B20A4D7D137412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
Manifest number: 1858
Signing time: Sat 07 Mar 2026 12:00:56 +0000
Manifest this update: Sat 07 Mar 2026 12:00:56 +0000
Manifest next update: Sun 08 Mar 2026 12:00:56 +0000
Files and hashes: 1: dX-f3qNQp2a7mMYE07nCeRZzIgk.crl (hash: Rcujwh6avHHwwgMPvIm2eywzxuyrmV17CmfRLL38cIQ=)
2: wBzUUS1esVzgp7-S8WP1zjKAIpw.roa (hash: UgXBz+OKL1MAmpi06fp5fY0KFQ1LRcUZSGp9CfyxDlU=)
3: wjNWOCuY2E1_FvlqggQMJz_Utqw.roa (hash: BberhHSGLHh2AX9W6raGWWWl/q21AJDPsEIrCo+NFbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c8:2c:0f:96:17:b8:cd:8a:57:b2:0a:4d:7d:13:74:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=757f9fdea350a766bb98c604d3b9c27916732209
Validity
Not Before: Mar 7 12:00:56 2026 GMT
Not After : Mar 8 12:00:56 2026 GMT
Subject: CN=b030b2a3fa953c454475e5168f804e36a7400601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4b:b3:d1:0f:66:14:38:31:2c:2a:1b:9b:9f:
41:8a:93:44:74:7e:35:96:6b:d3:d2:71:a0:aa:de:
39:3d:f6:d4:12:50:3c:3b:9f:a1:93:69:b8:58:ee:
1c:06:65:ea:56:71:51:3e:27:1e:45:f9:52:e5:4c:
cc:2d:84:9e:94:11:c5:f7:55:8b:5f:ee:bc:b3:cb:
43:21:b1:61:06:ee:a6:86:38:1a:0a:ad:f9:65:9d:
39:ef:a9:a4:94:98:67:2f:a2:db:ed:24:e1:57:a2:
bc:55:09:38:40:f7:fa:87:b6:74:37:2c:f3:97:17:
30:64:34:e1:4f:d7:5d:2a:66:a6:d8:12:5d:e1:42:
d9:35:4a:db:bc:72:e3:de:aa:33:1c:15:9c:32:64:
85:b9:51:cf:d6:cd:9d:98:fd:ac:71:2f:55:c0:af:
73:39:aa:f3:3b:50:4e:a7:d4:f7:8a:61:55:d8:4a:
38:78:d2:26:55:f8:27:b8:7e:1d:37:43:77:e5:94:
9f:3a:db:08:1a:fc:8a:c5:e1:1f:e0:3a:e8:db:18:
1d:2d:5e:69:61:e4:43:5b:0d:e1:9c:ba:ea:94:af:
ab:78:1f:56:a2:2e:e2:55:39:8f:11:f1:ae:91:ac:
71:9b:55:3b:f5:ab:c9:a2:87:13:c0:f8:c1:33:cb:
f4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:30:B2:A3:FA:95:3C:45:44:75:E5:16:8F:80:4E:36:A7:40:06:01
X509v3 Authority Key Identifier:
keyid:75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:bb:90:7b:71:92:bf:42:ee:89:6f:04:f8:96:ac:f8:67:91:
db:fa:eb:3c:8c:2c:3c:d0:62:5a:87:a7:e4:78:e6:ed:87:9c:
2d:63:b4:fc:e2:c4:40:c3:a1:80:0e:2b:f3:2a:c6:65:30:74:
a0:cb:d0:e9:50:5a:af:9b:00:51:d5:36:af:99:0a:bb:95:b3:
65:39:13:dc:bf:f2:7b:0a:39:f2:99:70:7b:a7:40:73:cc:d8:
d7:06:c8:ea:de:d8:f9:f2:5b:b8:2e:6f:0c:6e:08:f1:33:84:
9c:9e:26:b6:5b:cc:f3:1c:32:c8:c6:df:dc:83:6f:88:ec:e0:
90:9a:93:09:ca:e0:8f:41:a2:4d:d9:b0:98:c4:1d:51:1a:8e:
0d:39:d1:25:81:2e:7f:23:27:e1:6b:4d:db:d8:d6:ba:c8:46:
47:52:ea:35:a9:b3:8d:5f:f1:e1:9f:8a:43:14:73:c8:af:84:
82:74:85:69:d3:3a:e4:ee:c1:db:a0:e0:4b:bf:05:0e:e7:bd:
4a:f9:3d:e6:70:af:89:0f:dd:70:63:59:8f:f5:00:24:96:44:
cc:89:3c:47:9b:50:5c:ac:9e:2f:25:ec:f1:e6:0a:d6:9f:3e:
e7:b7:38:68:e1:78:f6:3f:0d:04:d6:0e:43:b1:b3:28:4e:ed:
4c:c6:d2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:22:38 2026 by rpki-client