Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
File: dNnAc7T3BpfiF1walV9sqMOmJGs.mft (raw, json)
Hash identifier: 1Wek/r/LzKlU07jDzD9f21zLgOw0yW6aqsMG2LCRi0c=
Subject key identifier: E4:67:75:B7:FE:B1:CA:43:6C:87:56:B9:7A:8B:40:E9:0A:EB:22:D0
Authority key identifier: 74:D9:C0:73:B4:F7:06:97:E2:17:5C:1A:95:5F:6C:A8:C3:A6:24:6B
Certificate issuer: /CN=74d9c073b4f70697e2175c1a955f6ca8c3a6246b
Certificate serial: 019D273AC731268FFC475984F3C829E16E71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
Manifest number: 11F2
Signing time: Wed 25 Mar 2026 23:00:56 +0000
Manifest this update: Wed 25 Mar 2026 23:00:56 +0000
Manifest next update: Thu 26 Mar 2026 23:00:56 +0000
Files and hashes: 1: WXwPoRCbPqeE9PVP8z3V258rpMo.roa (hash: plbJpqwh1XwCDwZThguZTHp1pk+o9N71tabRf4ITG0w=)
2: dNnAc7T3BpfiF1walV9sqMOmJGs.crl (hash: wN8bVffU+DwTkLBc4/Je5TPfIYaZ/85wq2i5auSBbMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:c7:31:26:8f:fc:47:59:84:f3:c8:29:e1:6e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d9c073b4f70697e2175c1a955f6ca8c3a6246b
Validity
Not Before: Mar 25 23:00:56 2026 GMT
Not After : Mar 26 23:00:56 2026 GMT
Subject: CN=e46775b7feb1ca436c8756b97a8b40e90aeb22d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:db:19:a4:99:61:52:ee:07:5a:9e:4b:d1:3c:
2e:03:71:02:9f:30:51:a8:68:55:52:b1:29:d7:95:
ab:28:a8:16:cf:47:28:70:5b:84:0a:10:44:45:8e:
ec:35:3e:3d:97:46:d2:89:07:66:dd:7a:71:e3:c2:
ea:01:de:12:a7:cd:6f:d2:16:0f:48:58:01:77:d9:
4b:75:23:9a:cd:84:b3:03:e6:89:8e:5c:ea:9c:02:
82:4b:35:e0:9f:4a:8e:54:f4:33:b3:a8:fe:dd:c1:
4c:54:15:aa:99:9a:66:1a:bf:fe:c9:06:8c:78:fa:
bd:7b:c5:e9:4d:84:74:89:a8:ea:99:21:62:ce:5a:
42:28:5d:56:a9:64:46:b0:74:fb:21:21:a8:e3:82:
63:b2:4e:97:86:85:c3:79:ef:63:1b:83:18:3d:6b:
b4:c8:b3:c9:7d:26:2d:2f:09:a0:e8:c8:fe:a0:cb:
c8:ff:3e:a1:18:08:9d:96:21:7a:68:f7:16:05:90:
ac:4e:d7:36:55:9c:84:ee:10:bf:2c:d0:df:8e:7e:
4b:d4:3c:5f:ea:20:33:02:fa:60:31:5e:67:5c:2c:
a2:57:62:ac:98:47:5c:d9:01:aa:ce:92:2c:41:c8:
0f:d1:21:e6:ac:ad:4c:87:c6:c6:77:c9:ab:be:45:
f6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:67:75:B7:FE:B1:CA:43:6C:87:56:B9:7A:8B:40:E9:0A:EB:22:D0
X509v3 Authority Key Identifier:
keyid:74:D9:C0:73:B4:F7:06:97:E2:17:5C:1A:95:5F:6C:A8:C3:A6:24:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:02:e5:a3:6b:b4:ff:23:5a:28:f4:3d:87:9d:39:f6:cb:9f:
f5:9e:e3:e9:8d:75:38:d8:1e:ee:4f:aa:55:c6:92:a1:ec:20:
c6:18:20:82:ea:b9:06:c3:44:18:88:86:cf:b6:7a:68:29:bc:
16:51:c9:c6:29:d4:8f:7a:fd:31:13:72:76:7c:a8:7b:4e:c4:
76:7e:08:0a:fc:dd:56:31:10:0d:a1:9f:ca:04:06:f9:9d:4e:
24:2b:94:33:24:25:64:57:69:c3:01:7c:da:1f:04:7c:fe:b6:
12:d1:8f:26:8c:d1:77:9d:b2:b1:ee:f1:cb:f7:2b:c7:92:1d:
2c:3e:6a:28:f8:09:0b:1a:cb:fd:6e:17:9f:c5:e2:b2:30:1e:
91:2b:9a:b6:2d:92:34:4a:33:fa:05:1e:fb:73:08:0a:57:ce:
81:a1:9b:e1:1d:30:b3:e7:b6:29:8e:39:12:60:1a:c8:e1:b3:
8b:c9:f5:81:b6:4e:e4:0f:77:56:7a:1d:1c:d8:68:9f:62:4e:
46:19:a7:45:43:09:3e:07:84:58:b1:80:18:e9:57:3a:48:f1:
a3:f9:a1:fb:6d:05:f8:f2:f6:59:be:1f:bd:3b:72:01:75:f9:
90:6d:88:8d:c7:b0:9f:82:73:78:79:1d:11:db:38:7f:1c:70:
1b:94:58:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:58 2026 by rpki-client