Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
File: DXQT3PU3N0pw2qMf2amf0psDMjk.mft (raw, json)
Hash identifier: bJcCwu/vG3pfymACH7GNZ7qACQErPM9jpestkQxFJjg=
Subject key identifier: 2E:87:C0:08:1D:1F:45:45:44:61:82:75:1B:F1:01:D5:51:4E:CB:67
Authority key identifier: 0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39
Certificate issuer: /CN=0d7413dcf537374a70daa31fd9a99fd29b033239
Certificate serial: 019F18D6F68D5610A151F11456B6C8B7A6E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
Manifest number: 174E
Signing time: Tue 30 Jun 2026 14:02:48 +0000
Manifest this update: Tue 30 Jun 2026 14:02:48 +0000
Manifest next update: Wed 01 Jul 2026 14:02:48 +0000
Files and hashes: 1: DXQT3PU3N0pw2qMf2amf0psDMjk.crl (hash: 971z7hzcpikI6Brcu+UhSrJvHueSu1wHtpO6SoZpuCw=)
2: mGAQzPjBEuNvLBk4PZVTydQ08Ik.roa (hash: nFMnkaBb6s7S3hBrs96M6UKrx0AkayAu23OFBBKrBXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:f6:8d:56:10:a1:51:f1:14:56:b6:c8:b7:a6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7413dcf537374a70daa31fd9a99fd29b033239
Validity
Not Before: Jun 30 14:02:48 2026 GMT
Not After : Jul 1 14:02:48 2026 GMT
Subject: CN=2e87c0081d1f4545446182751bf101d5514ecb67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ba:98:ec:6c:2d:49:8b:06:50:da:cc:bd:ff:
fb:51:8a:24:3b:c1:2c:93:b5:db:01:3b:28:f3:de:
ac:8d:f3:84:a4:70:9a:96:a1:57:e2:c3:68:28:16:
e5:a5:e6:82:65:95:79:d8:45:01:5b:f5:23:74:9f:
ef:2a:62:a4:0b:2b:d3:58:c2:a4:b3:8d:01:51:88:
21:b1:97:ad:95:d9:8e:3a:8b:f9:3f:cb:01:58:d6:
8c:dd:5c:fb:11:11:9c:fc:a6:5e:a8:3b:70:6e:0c:
7c:2a:89:b4:31:72:a8:ec:54:d0:e6:55:05:9d:9d:
5c:f8:cd:4e:f1:c9:a0:7c:a0:f6:b7:9b:23:99:a2:
91:6d:b7:13:ec:a9:6f:ad:19:a4:9c:e6:29:a9:15:
97:59:03:64:2b:2a:da:47:ba:71:36:de:9b:94:92:
22:29:8b:00:70:90:44:64:8d:1e:5a:05:61:32:89:
91:4a:a3:0d:76:e1:d6:98:6c:df:2a:bf:cd:c5:94:
a0:84:7a:b1:bf:a1:03:40:8b:2a:82:d5:83:27:f3:
41:54:5b:1f:92:d3:09:f1:2a:cb:94:dd:ba:0c:da:
13:56:5e:15:a7:b5:e8:7a:bf:e6:49:be:b2:1b:48:
53:1e:00:53:15:a5:a0:22:8f:d1:68:2d:b6:e7:06:
93:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:87:C0:08:1D:1F:45:45:44:61:82:75:1B:F1:01:D5:51:4E:CB:67
X509v3 Authority Key Identifier:
keyid:0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:45:57:c4:9b:a7:ca:77:a1:be:3d:47:85:5e:91:e4:a6:80:
01:d8:64:ae:3a:96:af:ea:f2:dd:31:a2:7d:34:eb:63:4a:3f:
0c:2b:8b:48:fc:78:f3:63:bf:cf:08:47:0a:2c:cc:88:b9:bd:
6e:bb:6b:09:ee:4c:07:e4:60:06:9e:be:e6:d3:8c:92:0b:58:
f4:7d:c8:2d:88:e0:bc:fc:2e:bf:97:28:5d:01:0b:f8:e1:05:
8d:56:d9:77:0d:c3:5b:65:5f:d6:15:84:1f:8c:50:9a:8b:13:
93:14:94:3f:ae:d3:bb:6d:26:ce:85:4c:be:9c:22:de:e5:f6:
47:6c:d5:8d:86:fe:79:8a:23:dc:6b:ac:56:5a:20:c8:59:64:
6f:10:21:c8:26:e3:22:0f:2c:c7:8e:f1:97:49:e2:b3:8e:bd:
84:3b:9a:37:3b:36:80:21:6f:2c:cd:63:b4:97:47:02:66:b6:
7b:d9:34:d7:5f:84:7f:b2:61:43:94:56:73:d6:d9:53:aa:7c:
c1:32:e0:3f:90:e5:19:76:c4:19:c7:71:6a:bf:ab:1f:c9:86:
b1:be:9d:51:d7:a8:2a:7f:b8:bb:5c:ec:29:be:08:47:7b:1a:
15:b4:c3:e6:d8:20:85:60:84:6b:14:4c:b6:de:47:b0:fa:ff:
d5:7b:06:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:22:35 2026 by rpki-client