Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
File: DXQT3PU3N0pw2qMf2amf0psDMjk.mft (raw, json)
Hash identifier: 4A1kjuu9xla5czjrZfRqFc0e1kQ1dCpzo9EQMVyvUu8=
Subject key identifier: 1B:9E:E0:5D:92:D5:10:3F:B3:A4:E4:73:B5:3F:8E:56:A4:AB:39:B5
Authority key identifier: 0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39
Certificate issuer: /CN=0d7413dcf537374a70daa31fd9a99fd29b033239
Certificate serial: 019D39E565E163881EB511E3FAF6D8560623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
Manifest number: 1656
Signing time: Sun 29 Mar 2026 14:00:28 +0000
Manifest this update: Sun 29 Mar 2026 14:00:28 +0000
Manifest next update: Mon 30 Mar 2026 14:00:28 +0000
Files and hashes: 1: DXQT3PU3N0pw2qMf2amf0psDMjk.crl (hash: rCeSbuwpM/9pGT4q0lFaZgBFQcrAk77/kgX++K4gpC8=)
2: mGAQzPjBEuNvLBk4PZVTydQ08Ik.roa (hash: nFMnkaBb6s7S3hBrs96M6UKrx0AkayAu23OFBBKrBXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:65:e1:63:88:1e:b5:11:e3:fa:f6:d8:56:06:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7413dcf537374a70daa31fd9a99fd29b033239
Validity
Not Before: Mar 29 14:00:28 2026 GMT
Not After : Mar 30 14:00:28 2026 GMT
Subject: CN=1b9ee05d92d5103fb3a4e473b53f8e56a4ab39b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:89:bb:c3:63:2f:c1:c5:3b:d7:8b:00:81:c7:
da:a7:97:5b:47:20:fb:bc:87:67:61:4f:48:9f:88:
9c:62:e0:ea:8b:e1:82:8d:7a:0c:f2:b2:38:d8:0c:
fd:65:58:52:4f:25:07:27:68:4d:a1:65:44:6b:bd:
b8:46:19:e9:ef:5d:2d:43:81:60:2a:d7:b9:f1:3b:
a3:bd:d8:17:75:18:0f:d5:4d:d9:64:6d:0b:12:cf:
7a:59:08:1f:14:1f:eb:a3:f5:71:b3:be:2e:0c:ef:
79:a3:d1:5b:a1:f8:60:86:1d:c0:66:aa:c8:ae:2e:
ae:d6:8c:87:5d:74:97:44:ef:93:96:3f:bf:f7:1e:
2e:30:a3:6b:e7:7c:6d:92:4e:51:1b:80:22:40:30:
7a:16:49:57:e9:90:c1:9e:97:55:c5:cb:b6:3a:2f:
1d:87:33:bf:8e:7c:9e:87:a0:fd:da:fa:77:5a:84:
fb:c1:d7:f6:05:54:0f:fd:75:d3:88:d5:fa:5d:f1:
f9:f8:de:dc:ac:94:5d:c6:be:a6:84:41:b9:5e:4a:
49:ec:38:89:a9:b3:86:53:20:4f:68:e6:5c:d3:5a:
92:b1:d7:b7:79:7c:73:f5:73:5e:54:ff:8a:34:9f:
c7:9e:59:e4:be:af:42:b1:7c:fa:b9:f8:e7:26:41:
e2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9E:E0:5D:92:D5:10:3F:B3:A4:E4:73:B5:3F:8E:56:A4:AB:39:B5
X509v3 Authority Key Identifier:
keyid:0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a6:4a:4d:3f:9a:c0:7b:4b:0a:c4:ff:ec:58:ea:93:5e:d8:
50:17:57:9a:03:f4:34:5d:38:38:d8:16:a4:82:29:1e:85:01:
cc:05:9c:96:ed:c0:4e:02:be:a9:3f:07:5f:ce:37:64:6d:eb:
76:bc:e4:73:cf:19:c1:81:31:71:1b:d1:e0:18:45:d4:e3:3b:
89:91:20:0e:38:a9:a6:54:2d:26:58:e6:e7:66:29:16:7b:96:
03:29:1f:76:a7:ee:ea:37:ca:fc:0e:91:ea:56:17:4f:f4:15:
93:4e:9b:1b:29:66:ff:d3:f1:14:14:1b:25:65:5a:86:de:1a:
fa:dd:da:73:75:08:a7:90:2e:ef:e2:85:21:ce:7b:cd:92:bf:
cc:d4:e9:08:4b:f4:1c:5b:d5:41:c0:7f:15:e8:2b:80:52:f8:
9d:82:b0:19:6e:e2:96:aa:2c:71:fd:02:e0:c8:aa:e2:de:ad:
29:d4:1a:9f:c0:85:df:8e:4b:82:b1:29:cb:c8:e3:cb:09:48:
90:e9:6d:2a:80:28:44:d8:3b:a9:f3:4c:29:b3:6f:e3:80:1c:
83:4f:9d:65:58:68:16:32:b3:ef:26:62:08:cd:2e:12:9b:f3:
74:a9:e3:a9:48:5d:92:d5:56:6a:12:41:35:60:94:cd:53:95:
35:14:e1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:25:52 2026 by rpki-client