Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
File: DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft (raw, json)
Hash identifier: aLWtLVu6vh6Xu2UyCG4TZEMb0fGsgELD5THaKst5NrI=
Subject key identifier: 68:FF:26:DD:D4:32:F3:24:91:D0:E8:F4:CC:45:2D:C4:EF:C0:E2:57
Authority key identifier: 0D:0D:BF:9E:B8:36:08:5C:19:D9:3F:52:54:22:1C:33:94:8E:85:E3
Certificate issuer: /CN=0d0dbf9eb836085c19d93f5254221c33948e85e3
Certificate serial: 019D37C029C837401C37751D05A4F1E1D8C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
Manifest number: 149E
Signing time: Sun 29 Mar 2026 04:00:33 +0000
Manifest this update: Sun 29 Mar 2026 04:00:33 +0000
Manifest next update: Mon 30 Mar 2026 04:00:33 +0000
Files and hashes: 1: 3UgaGbZGGFfjB7sq8z7R6V-NiDY.roa (hash: e/q2ZKMuya72WNv5B5kUE91L0olkeZByYdU0k2qDJHo=)
2: DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl (hash: euW8lhWtoVvgxgXMBcpRe/xdDyv3fPwwEwlf6Wuja1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:29:c8:37:40:1c:37:75:1d:05:a4:f1:e1:d8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d0dbf9eb836085c19d93f5254221c33948e85e3
Validity
Not Before: Mar 29 04:00:33 2026 GMT
Not After : Mar 30 04:00:33 2026 GMT
Subject: CN=68ff26ddd432f32491d0e8f4cc452dc4efc0e257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9a:fd:b5:80:9a:b4:11:64:b0:bc:09:7b:1c:
19:b6:ab:30:91:99:0b:80:43:fc:30:ad:7b:20:db:
00:ea:79:80:9d:a2:e1:ad:93:dd:71:ac:70:19:41:
7f:54:75:a9:45:e1:bb:11:f6:00:2a:a2:5a:17:e8:
10:0b:9c:31:c0:a6:30:24:fb:a8:f8:9b:46:4a:c8:
8e:a3:04:69:71:e0:74:d5:2e:40:cc:32:46:09:2d:
6d:23:38:dd:ed:05:2e:d8:0e:b3:7f:0b:81:5f:c4:
01:77:f9:da:8e:db:8c:db:47:99:9b:cc:ed:f5:d4:
3c:8d:a3:65:df:06:52:84:3d:87:62:93:1a:ef:aa:
cb:95:be:25:c2:47:cd:96:6b:90:88:f8:c7:3a:2b:
aa:96:91:ab:8f:9d:8d:1e:e2:85:56:b4:cf:18:1a:
e9:54:67:7a:b1:c7:3c:79:71:86:ce:8c:34:c6:73:
ee:53:c9:16:56:37:72:79:79:85:70:0b:55:92:55:
ff:2b:6f:a5:d1:f0:48:eb:da:ed:86:44:23:c2:9e:
4f:dc:f5:d9:ec:67:77:27:39:42:28:cd:dd:dc:9e:
7d:ce:36:ad:b3:bb:c2:77:66:ef:2f:54:ae:6d:f2:
8e:2f:12:7a:e7:72:8a:d6:a4:aa:19:7a:5f:95:a8:
02:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FF:26:DD:D4:32:F3:24:91:D0:E8:F4:CC:45:2D:C4:EF:C0:E2:57
X509v3 Authority Key Identifier:
keyid:0D:0D:BF:9E:B8:36:08:5C:19:D9:3F:52:54:22:1C:33:94:8E:85:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:de:88:6f:05:91:cd:9f:4b:7e:00:f5:67:2c:e8:53:a4:6e:
a6:cf:7f:02:3b:96:68:5c:f4:ab:27:b4:0b:3f:38:e9:30:9a:
33:76:61:7d:0c:f5:08:2b:28:6d:2b:20:54:f2:35:40:2b:78:
5f:aa:ce:29:ba:c7:87:3a:e7:4f:cb:bd:f6:b5:6a:0f:0f:1c:
d1:b8:87:0e:de:4f:91:ba:42:e4:73:62:04:4a:10:b3:49:e3:
fa:e3:a4:e3:25:dc:87:af:e4:4d:84:3f:53:30:0f:5c:c7:1c:
9d:49:f0:9f:7f:50:01:90:9c:e0:29:af:f6:d8:43:96:32:7d:
2a:89:00:79:4d:bc:7c:bb:d0:ee:a3:15:61:eb:b6:6f:65:71:
0c:6b:7f:e4:06:29:c3:04:cc:f8:34:f9:34:09:85:83:22:c9:
ef:d0:4e:ea:27:fe:97:ad:7e:e1:46:26:81:24:1c:e4:c7:71:
5a:80:53:8c:24:8f:df:c2:83:87:2c:26:85:98:2a:1f:b1:e2:
34:ce:f1:92:cd:ff:1a:38:ac:92:81:62:fe:2c:a1:e1:69:d1:
49:28:71:2f:81:33:41:f0:6a:f1:0d:b0:f7:db:b5:e7:65:3c:
ef:4c:c1:c8:8a:ac:7d:fa:4f:f2:db:04:dd:00:e0:07:d4:8b:
7e:0e:c7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:04:12 2026 by rpki-client