Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft
File: dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft (raw, json)
Hash identifier: VrGaksgdHNA/g/273B+mPoGSDC/iJHi1Ub0Kg8xonEA=
Subject key identifier: 25:93:24:3D:56:F3:38:79:F1:FC:F5:E2:50:6A:BD:19:3A:3D:38:5F
Authority key identifier: 74:9D:8A:43:28:93:0B:93:8F:A8:60:18:B1:E4:47:EE:4D:8D:A8:F9
Certificate issuer: /CN=749d8a4328930b938fa86018b1e447ee4d8da8f9
Certificate serial: 01A17B16D3766881FB6EA9E9934D7456092A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJ2KQyiTC5OPqGAYseRH7k2NqPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft
Manifest number: 0440
Signing time: Tue 27 Oct 2026 02:00:55 +0000
Manifest this update: Tue 27 Oct 2026 02:00:55 +0000
Manifest next update: Wed 28 Oct 2026 02:00:55 +0000
Files and hashes: 1: 1-mmnoNOS11tga2Q29yD5BQAuFLE.roa (hash: GOq5nJwjD0VCVYVCda8zJe1uGhLFpPTQrRyVuZj7aM8=)
2: dJ2KQyiTC5OPqGAYseRH7k2NqPk.crl (hash: vZ9lnIWXvpmwof+HuBIScywE694DlcWAFO3WELpVilw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJ2KQyiTC5OPqGAYseRH7k2NqPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:16:d3:76:68:81:fb:6e:a9:e9:93:4d:74:56:09:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749d8a4328930b938fa86018b1e447ee4d8da8f9
Validity
Not Before: Oct 27 02:00:55 2026 GMT
Not After : Oct 28 02:00:55 2026 GMT
Subject: CN=2593243d56f33879f1fcf5e2506abd193a3d385f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:70:1b:70:38:6f:91:10:78:ce:41:dd:36:86:
ef:d3:bb:50:9d:dd:b3:15:43:f2:38:26:c0:5b:e3:
3e:03:57:b5:cd:d2:1e:c2:89:5f:5a:4c:d0:99:6e:
fa:5b:a9:1a:bd:fa:52:ce:e3:78:15:1f:18:70:07:
92:1b:a8:e0:7e:f1:6e:ed:9f:fd:a1:db:3d:79:e1:
78:75:26:a9:1e:be:22:4b:93:ec:06:63:ae:7d:48:
53:d8:da:34:e9:c0:8d:89:08:8f:88:ce:38:e5:8b:
7f:69:3f:74:ae:fd:ad:fe:b1:b6:f3:8a:02:65:16:
e3:6f:57:68:43:38:40:5f:72:13:48:12:56:b3:c8:
c2:6f:cf:19:01:3b:22:e3:44:8c:fe:48:93:aa:2e:
87:45:5d:a7:f0:89:76:63:f0:b8:d5:60:eb:86:3f:
0d:fe:0a:2e:ef:26:99:dd:38:da:72:ea:84:0b:a7:
7d:75:38:24:64:84:86:07:db:af:15:b3:ff:48:a2:
f9:3f:d5:a5:bd:08:03:12:5f:b2:d1:cb:0e:0a:06:
64:ae:d5:cc:7e:fc:df:94:b1:51:f0:54:fa:4e:5c:
f9:bd:49:a7:62:1e:2f:0f:dd:cb:08:d4:e0:d6:3e:
eb:73:be:a1:84:2d:a6:ea:36:f0:2b:c5:d9:3c:0d:
f7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:93:24:3D:56:F3:38:79:F1:FC:F5:E2:50:6A:BD:19:3A:3D:38:5F
X509v3 Authority Key Identifier:
keyid:74:9D:8A:43:28:93:0B:93:8F:A8:60:18:B1:E4:47:EE:4D:8D:A8:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJ2KQyiTC5OPqGAYseRH7k2NqPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c5:b4:46:3d:a9:7b:6d:a7:f3:7e:e0:2b:30:03:cb:92:68:
d1:f9:61:fc:5e:b9:af:3f:1c:53:d4:e7:03:40:a9:69:a7:77:
18:20:e6:38:b3:32:14:2f:ca:36:23:64:61:56:d5:cd:70:5d:
ca:7a:4b:6f:8f:8a:4e:29:0a:6c:bc:87:42:77:b5:0a:ea:82:
f8:7b:2c:e7:1b:85:bb:10:c2:ad:ec:4a:5b:97:f0:61:5c:3a:
6f:da:b0:f4:e9:43:57:5e:ae:c0:88:fa:dc:18:a4:53:51:52:
df:46:3d:14:25:54:a1:dc:18:89:06:fe:09:04:be:61:21:03:
bf:fc:cd:b5:5f:22:b8:be:b9:3a:d1:5a:08:83:ed:6d:b8:d6:
fe:dd:dc:36:8d:ea:12:54:e3:14:58:7a:2a:58:95:df:97:0b:
5f:ca:bf:c3:10:fd:2f:fc:cf:61:18:bb:e9:6f:0e:b3:69:60:
02:ad:b7:b0:6d:dc:d6:be:49:86:30:3f:7c:4e:83:c9:2e:7a:
46:a5:a4:69:01:db:4d:8d:a7:51:b7:6f:90:16:34:f5:c6:21:
e2:05:97:f9:52:32:83:47:0e:1f:6e:b0:f0:b7:dd:ea:38:9c:
4e:fa:54:6f:cf:97:3b:f7:d4:07:98:ca:dc:1c:d1:4d:94:bd:
01:67:c5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 07:11:24 2026 by rpki-client