Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
File: dNYxjajSNXnE9zi26OVcxf8n5bE.mft (raw, json)
Hash identifier: r5L53RHDodiSNFEIrYQ4nE4TzEWMJEfsYBnZa7OoxSc=
Subject key identifier: 2A:CB:B9:AD:7C:EC:F3:64:7B:0C:C9:FE:41:A5:0B:96:03:33:4C:B8
Authority key identifier: 74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1
Certificate issuer: /CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1
Certificate serial: 019D2695D6B1F7C4F8802C1077294633BFE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
Manifest number: 0E87
Signing time: Wed 25 Mar 2026 20:00:47 +0000
Manifest this update: Wed 25 Mar 2026 20:00:47 +0000
Manifest next update: Thu 26 Mar 2026 20:00:47 +0000
Files and hashes: 1: dNYxjajSNXnE9zi26OVcxf8n5bE.crl (hash: RAyG2k1a1THJ86H+tPZdwoOEDnVR1zOjkkPmvmBTKq4=)
2: yrIjpEKkjVBO_-j8mIxwX1lzZOY.roa (hash: FAr4hIEw59FiwSEosrYa4XkBS1NGFvpwv+TK+Np3XXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:d6:b1:f7:c4:f8:80:2c:10:77:29:46:33:bf:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1
Validity
Not Before: Mar 25 20:00:47 2026 GMT
Not After : Mar 26 20:00:47 2026 GMT
Subject: CN=2acbb9ad7cecf3647b0cc9fe41a50b9603334cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:19:1f:ae:15:13:65:83:bd:d9:56:90:6b:6f:
6c:fc:f2:52:7b:4c:6b:36:b6:ab:cf:bf:87:4a:d7:
78:ff:b6:aa:6e:0c:9c:20:c3:3c:06:6f:ee:5d:ee:
b0:46:71:e5:3b:c1:25:7d:9f:c4:6f:9f:1c:ba:ca:
b3:76:f3:2b:2f:3c:3a:b5:58:79:25:d6:97:cc:c2:
20:c8:87:86:87:4f:f1:69:8a:63:ab:ec:17:9c:c1:
19:96:30:8c:3a:e5:f1:b3:4c:56:4d:c7:25:80:0a:
5d:f0:dd:c1:f9:ce:bf:0c:c4:a2:5a:82:29:94:b0:
3e:4e:ab:45:26:ea:db:0b:13:f8:74:80:c0:d1:d1:
bd:fd:5f:02:60:c2:38:57:6f:ef:d2:64:c9:b4:9c:
a2:72:10:0d:46:9a:0c:52:16:89:98:a8:5c:54:36:
f7:1b:4f:b4:17:c6:d8:72:b8:78:30:64:ea:a7:96:
8e:80:5b:27:8b:4e:a6:76:e8:b6:8f:3a:c3:31:fc:
39:7d:91:e7:97:66:4b:8a:dc:62:87:8a:96:e6:e3:
6a:1c:c9:b9:9f:82:3f:69:6f:6f:94:40:01:76:dc:
ac:64:89:24:d8:f9:d1:47:a6:c1:96:a7:b3:42:40:
20:de:e0:11:e2:39:01:6e:14:f2:d6:a3:ee:80:9c:
4f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CB:B9:AD:7C:EC:F3:64:7B:0C:C9:FE:41:A5:0B:96:03:33:4C:B8
X509v3 Authority Key Identifier:
keyid:74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d1:e3:ca:c5:8e:ed:a0:10:9d:86:5b:43:72:0b:19:c2:f6:
34:f5:02:f4:a2:f9:3e:79:6f:d4:7b:4d:87:2d:f3:25:09:70:
8e:d3:c1:e6:f8:9b:58:69:0e:01:00:eb:70:07:0c:b9:f5:9e:
dc:a2:8e:18:02:dc:30:98:84:1b:e5:10:3b:21:18:d2:5a:c2:
04:50:69:85:c0:89:7e:46:08:14:a7:ae:e2:aa:5e:d4:e4:b2:
48:28:76:92:c1:e4:a1:ae:6d:64:1d:ad:04:c8:21:24:16:e4:
67:3b:34:94:97:40:15:69:96:f0:58:5a:82:94:94:72:f5:73:
aa:e6:6f:c5:5c:32:f3:a6:5e:98:d6:0a:ad:35:f5:11:3d:5e:
6d:89:9f:51:62:e0:80:44:df:4a:b5:81:d5:80:ed:55:37:f1:
25:ea:7b:8c:22:dd:e1:e0:4b:4a:44:6b:11:8e:88:cc:0a:c5:
ef:8b:85:c1:9a:0f:e7:15:e1:6b:3c:23:24:c1:bb:6d:d6:14:
ca:5d:b9:82:d9:5a:50:5d:49:ba:42:52:14:7a:d3:9c:b6:54:
78:26:34:28:b0:fd:95:d5:aa:2f:25:97:f9:6f:20:73:f1:67:
96:48:20:11:a6:d9:e6:d3:ce:fd:7f:01:cc:3b:33:66:f4:f5:
52:e5:b3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:56:20 2026 by rpki-client