Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
File: dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft (raw, json)
Hash identifier: R/kx2oYlvZ1m2WmXg1NoQjFEwhDZDGfQbX5nC9+tyTY=
Subject key identifier: 80:B4:90:2F:5A:F5:7F:3F:AA:A6:66:8D:6F:33:26:F6:D2:13:6E:F4
Authority key identifier: 74:A5:9B:7F:B4:E0:34:F6:77:75:F2:87:5E:FB:FC:9E:FF:24:7E:8E
Certificate issuer: /CN=74a59b7fb4e034f67775f2875efbfc9eff247e8e
Certificate serial: 019D382E5868DD70100F41298D323EB472D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
Manifest number: 116D
Signing time: Sun 29 Mar 2026 06:00:54 +0000
Manifest this update: Sun 29 Mar 2026 06:00:54 +0000
Manifest next update: Mon 30 Mar 2026 06:00:54 +0000
Files and hashes: 1: dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl (hash: wDgJyZN15CyAsMvri6/5po5ucbFSoAgBRzPQI1RFDkQ=)
2: uWzsh13780WlQ44M3rfglByUCB8.roa (hash: yGLdoL/Xc8KKRv7LLREr+ACqHv9uN9Icl3Uh1WiiuFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:58:68:dd:70:10:0f:41:29:8d:32:3e:b4:72:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a59b7fb4e034f67775f2875efbfc9eff247e8e
Validity
Not Before: Mar 29 06:00:54 2026 GMT
Not After : Mar 30 06:00:54 2026 GMT
Subject: CN=80b4902f5af57f3faaa6668d6f3326f6d2136ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5a:07:89:fa:c7:c0:d9:7d:18:6d:f9:d5:90:
39:56:d2:a7:7f:d2:f8:66:94:eb:85:d2:64:22:ca:
93:77:e9:85:2e:f9:d7:13:14:b9:e8:52:f4:e9:8f:
5d:99:50:b7:be:e5:cc:8f:ec:1b:bf:1e:6d:64:c3:
07:40:25:c8:ff:2b:c6:c9:17:8e:3c:6c:33:c1:cd:
c5:9b:f3:c0:dd:2d:c7:50:cf:d6:68:0c:e0:6c:76:
7c:67:1d:83:d2:28:3e:14:35:6f:be:c4:3b:d7:c3:
9d:0a:4f:69:ca:17:99:5b:16:7c:36:11:29:a2:fa:
8d:a2:b2:dc:1a:6f:0e:6d:47:f7:86:da:d9:9e:38:
52:ca:04:f6:17:48:12:ea:3c:1b:e6:17:0f:1f:eb:
cd:10:91:04:90:9d:62:a9:8d:c7:14:36:c5:db:b5:
0e:a9:05:85:2e:0c:0a:9f:a0:50:3f:fd:29:5a:42:
cd:e7:1d:24:6e:62:05:55:76:c2:cc:57:f5:fa:0e:
38:59:95:2f:78:47:be:d6:cd:a7:a0:80:4a:a5:f0:
d2:f3:9f:41:26:e5:71:79:ee:4f:52:81:d0:fa:82:
38:8f:b1:2d:95:87:67:10:57:ac:3d:e8:a7:ef:6b:
31:ef:3a:aa:14:b4:a3:29:28:2f:67:64:e7:aa:2d:
76:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B4:90:2F:5A:F5:7F:3F:AA:A6:66:8D:6F:33:26:F6:D2:13:6E:F4
X509v3 Authority Key Identifier:
keyid:74:A5:9B:7F:B4:E0:34:F6:77:75:F2:87:5E:FB:FC:9E:FF:24:7E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f8:f0:a1:01:2f:2c:d0:c7:d6:34:12:28:c7:bc:bc:65:d5:
0a:5c:3f:12:18:d3:57:c6:a3:4f:42:4b:dc:2a:53:c4:5a:a8:
fd:a3:f7:0f:2f:d9:78:ee:da:b4:fd:63:0c:c9:d2:96:f4:50:
b9:ff:73:88:f3:40:97:2d:14:72:40:46:76:43:ea:40:8d:18:
89:08:20:0e:46:1a:c7:50:43:5a:5e:74:3b:3b:e7:3f:be:04:
d0:fd:be:4c:f7:45:72:ea:81:fd:5e:07:c4:95:8f:9d:e5:5a:
c6:1e:52:d9:af:e6:85:b4:f1:1f:81:39:ad:41:da:00:7b:ef:
56:f1:16:b0:01:eb:12:f1:e6:be:d0:74:d3:41:9a:6e:a0:53:
43:42:8b:37:7a:3d:76:49:cc:52:2a:29:56:86:fe:38:7e:c1:
08:2a:60:46:9f:1e:07:6f:91:6b:44:87:86:11:04:71:92:4f:
07:b1:be:6a:04:f3:b9:c5:ca:7d:48:5e:bf:a6:f7:1b:64:f3:
08:c1:06:19:9a:17:9b:78:a1:91:a2:2e:29:2f:d8:02:c6:1d:
68:c5:a0:72:2e:03:bd:81:6c:88:9f:0f:4d:ab:cc:b4:27:19:
09:e6:9e:96:c0:96:fc:60:7e:e5:e4:e7:1f:74:2f:58:13:b2:
6b:51:b2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:44 2026 by rpki-client