Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
File: dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft (raw, json)
Hash identifier: +2x2uKmdKyMIH0QqBdb0pfI6bNdUK+nu66fe+2Ndw1k=
Subject key identifier: F8:6B:86:79:68:D9:BC:13:81:03:0D:73:D7:EA:47:81:36:25:98:5B
Authority key identifier: 76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39
Certificate issuer: /CN=765ea3400a3748c3b6c61268d492f8bf0a908239
Certificate serial: 019D38D397D020C1F97D6D033519328B2D67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
Manifest number: 1414
Signing time: Sun 29 Mar 2026 09:01:24 +0000
Manifest this update: Sun 29 Mar 2026 09:01:24 +0000
Manifest next update: Mon 30 Mar 2026 09:01:24 +0000
Files and hashes: 1: dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl (hash: 21FDbt+zvx4AbV0rrBebe+6sfaetFt1LGvvBn+Z7iZE=)
2: pyuMnNg45Imlk2H0jl_EMiwNCJY.roa (hash: Du2wmMU/s9sp+p6yThJQ53vWQyfYeVO+yB5tdkmnkw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:97:d0:20:c1:f9:7d:6d:03:35:19:32:8b:2d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=765ea3400a3748c3b6c61268d492f8bf0a908239
Validity
Not Before: Mar 29 09:01:24 2026 GMT
Not After : Mar 30 09:01:24 2026 GMT
Subject: CN=f86b867968d9bc1381030d73d7ea47813625985b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a8:66:0d:96:6e:6b:b2:af:65:c4:f6:25:ee:
96:e2:a4:dd:71:dd:2e:6c:22:77:94:71:dd:dc:7a:
54:d3:1f:98:b4:62:55:f3:d4:3b:7d:69:90:cf:e5:
42:db:54:bd:d9:b0:81:d1:e0:c6:5d:e6:22:23:00:
51:2e:08:80:5a:03:9b:2b:c6:ec:64:55:ba:ec:b9:
3f:e9:29:c6:47:a9:79:96:65:8c:68:18:97:f8:29:
25:cb:ce:2c:a1:fd:2e:7e:27:9d:b5:7c:fa:3f:5a:
04:2b:57:f0:a1:31:8b:f8:0d:20:8e:59:f9:33:3a:
6a:f4:68:a6:6e:66:33:b0:02:4e:ba:ac:2c:26:92:
13:98:50:18:32:28:45:07:a0:5e:fd:32:c2:fd:ec:
e0:de:a4:39:b7:19:8b:13:98:3b:96:58:c6:c0:c1:
62:62:27:d5:d6:f5:01:06:53:35:28:47:08:f5:6d:
99:54:e9:21:48:8e:d6:fe:61:2e:6d:9d:c5:18:51:
5b:b1:f9:47:0d:f3:24:1b:28:97:cd:d6:f0:94:ff:
74:4e:b0:97:af:91:06:e8:d5:8e:6b:75:d3:3f:06:
4d:0f:90:75:0b:24:d9:e0:01:bc:22:ef:25:36:7f:
a6:f5:87:0b:06:65:d1:a5:d0:46:a6:78:78:19:8a:
42:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6B:86:79:68:D9:BC:13:81:03:0D:73:D7:EA:47:81:36:25:98:5B
X509v3 Authority Key Identifier:
keyid:76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:56:32:0e:fd:80:c6:97:d7:82:bf:69:57:18:d4:bd:20:16:
02:55:36:dc:2b:42:50:b1:59:1f:92:85:59:b2:96:b3:a3:91:
70:e6:ac:a3:32:43:1e:2d:17:d6:eb:08:f7:f9:99:d4:73:d1:
65:dc:ca:9d:a4:06:f5:86:c3:cf:b5:ae:8a:44:4f:6a:4e:3f:
9e:75:56:0a:b0:ae:0c:07:87:2a:3c:24:42:0e:79:da:8f:c7:
7a:45:43:54:f5:a4:92:35:c0:a8:8c:7a:6b:97:af:32:5c:eb:
ef:3f:e0:ce:03:ee:81:60:cc:00:b0:04:5b:45:5a:a2:27:4a:
72:db:83:93:1c:55:92:82:f6:95:b8:65:10:a0:28:14:60:a6:
d2:61:ce:53:55:f0:82:15:a4:8b:cf:c9:a5:45:dd:0c:c8:3a:
03:19:04:a7:1b:b8:db:81:fc:a5:b7:9d:94:84:9d:ce:dc:0f:
8f:62:96:1c:d4:da:ba:8d:18:80:13:0d:5e:88:73:38:d7:39:
7f:62:1a:eb:97:67:11:d0:c0:d3:78:52:b1:2b:26:69:53:3a:
55:7f:8f:3f:7e:ab:8b:02:0d:3f:4e:ff:a5:88:0f:36:20:b3:
cb:27:2e:c6:c4:e6:fc:3c:4f:be:d5:8b:98:11:62:c1:a3:a1:
89:44:c3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:34 2026 by rpki-client