
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
File: dNAyUoux0Vl2bNed5HhtzZYqH7s.mft (raw, json)
Hash identifier: cX/yQep7byUtgPKsK+oF5GKggx6z76cnFcsohY4ct7k=
Subject key identifier: 57:1A:A2:1F:A4:75:42:89:EE:AA:12:6A:51:BC:65:B1:72:73:59:85
Authority key identifier: 74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB
Certificate issuer: /CN=74d032528bb1d159766cd79de4786dcd962a1fbb
Certificate serial: 01A11B99C74D831FD97D34C6FE4E9984702E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
Manifest number: 1854
Signing time: Thu 08 Oct 2026 13:00:25 +0000
Manifest this update: Thu 08 Oct 2026 13:00:25 +0000
Manifest next update: Fri 09 Oct 2026 13:00:25 +0000
Files and hashes: 1: _rWJNNnmk3R1x9pU0oYdGau3c7M.roa (hash: IHOPlEpatbDJApch2mWBilUmuofV8Wjb6ufkWpEothw=)
2: dNAyUoux0Vl2bNed5HhtzZYqH7s.crl (hash: hZWDsDUDu4h73rWYBdXnXtmgbkswXPeDMNII4V8GedE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:99:c7:4d:83:1f:d9:7d:34:c6:fe:4e:99:84:70:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d032528bb1d159766cd79de4786dcd962a1fbb
Validity
Not Before: Oct 8 13:00:25 2026 GMT
Not After : Oct 9 13:00:25 2026 GMT
Subject: CN=571aa21fa4754289eeaa126a51bc65b172735985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f8:16:03:86:1b:f5:8b:06:fa:18:a5:5f:a7:
f9:7d:89:fc:64:24:0a:04:7f:ff:0d:81:11:ff:22:
93:1b:2f:b9:33:89:ff:f2:40:3d:c6:27:c9:a2:92:
21:e2:e4:30:63:15:9c:f3:9c:d4:be:1e:bb:f1:62:
33:78:d4:90:48:33:f2:a5:8b:39:e1:3c:e8:95:5b:
48:d5:26:21:b0:db:f3:50:2b:7e:ea:bd:c7:e8:95:
4d:12:83:40:15:5c:9a:91:1f:21:94:00:9a:65:0e:
6e:6f:95:70:9a:c0:6b:b7:d0:98:7c:23:8a:0b:b0:
2a:33:e1:22:3f:4d:e4:55:34:25:97:f7:ae:52:5c:
f9:72:0c:50:4e:65:4b:ba:48:0f:31:27:8d:21:0d:
c0:db:6b:de:cd:71:74:61:63:58:7e:a5:c4:25:5b:
30:f0:b8:e8:c4:be:aa:d5:4f:3d:96:a5:a6:0c:4b:
f3:e1:dd:de:aa:fa:2d:1f:67:0c:c2:30:dd:30:83:
ea:54:be:a5:00:6a:af:9e:bf:3b:c6:68:76:79:ce:
ca:2d:50:c1:e0:12:14:90:bc:58:1d:d9:12:ab:d7:
ab:fb:14:c0:45:91:71:cc:e0:07:28:80:28:79:98:
b8:50:45:5d:11:e3:82:38:15:2e:9a:bf:ed:ab:0e:
20:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:1A:A2:1F:A4:75:42:89:EE:AA:12:6A:51:BC:65:B1:72:73:59:85
X509v3 Authority Key Identifier:
keyid:74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e6:59:ab:22:c3:02:61:56:bd:81:00:f1:f5:5d:1c:b0:55:
a9:fc:e6:9c:b7:7b:4e:e6:52:4d:48:71:0c:58:34:63:2f:f8:
2a:26:be:09:7b:fd:55:10:3c:4f:6a:40:db:1a:e5:32:3e:61:
1b:a4:67:c2:d5:dd:07:06:57:1a:d8:f9:64:54:db:63:63:96:
73:17:31:3e:90:1a:cd:a9:23:5a:d1:9d:dd:ed:b2:9b:45:00:
c8:27:b1:89:64:b1:8c:95:8c:07:65:ec:06:b4:22:1c:67:58:
6a:60:5d:be:6f:20:a5:5a:1c:f4:1c:f1:49:ac:08:a1:0d:d1:
e4:0b:ca:b3:dd:0a:f9:2d:e9:54:4c:f7:0d:2b:12:94:7e:a9:
34:4b:f9:1e:43:61:35:67:a6:38:59:36:06:ed:a0:e1:37:e9:
ef:27:2f:a8:25:b8:72:63:a8:7a:1d:73:bf:17:dd:c2:6d:0f:
82:83:dd:6a:28:6d:01:65:70:c3:d1:3f:aa:01:15:02:17:43:
25:2a:44:c4:54:da:bd:ae:79:96:b0:e5:2a:1c:68:cd:9f:e7:
2b:6e:c4:6c:00:d1:3b:b7:21:b7:2e:17:6a:3b:5e:0f:c3:59:
7d:3c:3b:b2:dc:40:6a:6a:bd:5e:dc:75:40:1c:9f:ad:cc:dc:
b9:12:1c:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEbmcdNgx/ZfTTG/k6ZhHAuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZDAzMjUyOGJiMWQxNTk3NjZjZDc5ZGU0Nzg2ZGNkOTYy
YTFmYmIwHhcNMjYxMDA4MTMwMDI1WhcNMjYxMDA5MTMwMDI1WjAzMTEwLwYDVQQD
Eyg1NzFhYTIxZmE0NzU0Mjg5ZWVhYTEyNmE1MWJjNjViMTcyNzM1OTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/gWA4Yb9YsG+hilX6f5fYn8ZCQK
BH//DYER/yKTGy+5M4n/8kA9xifJopIh4uQwYxWc85zUvh678WIzeNSQSDPypYs5
4TzolVtI1SYhsNvzUCt+6r3H6JVNEoNAFVyakR8hlACaZQ5ub5VwmsBrt9CYfCOK
C7AqM+EiP03kVTQll/euUlz5cgxQTmVLukgPMSeNIQ3A22vezXF0YWNYfqXEJVsw
8LjoxL6q1U89lqWmDEvz4d3eqvotH2cMwjDdMIPqVL6lAGqvnr87xmh2ec7KLVDB
4BIUkLxYHdkSq9er+xTARZFxzOAHKIAoeZi4UEVdEeOCOBUumr/tqw4gVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFcaoh+kdUKJ7qoSalG8ZbFyc1mFMB8GA1UdIwQY
MBaAFHTQMlKLsdFZdmzXneR4bc2WKh+7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZE5BeVVvdXgwVmwyYk5lZDVIaHR6WllxSDdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yOWE0MjItYTc5MS00ZGNmLTkwZmIt
MmM5MTI3YWI0OGMzLzEvZE5BeVVvdXgwVmwyYk5lZDVIaHR6WllxSDdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yOWE0MjItYTc5MS00ZGNmLTkwZmItMmM5MTI3YWI0OGMz
LzEvZE5BeVVvdXgwVmwyYk5lZDVIaHR6WllxSDdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqOZZqyLD
AmFWvYEA8fVdHLBVqfzmnLd7TuZSTUhxDFg0Yy/4Kia+CXv9VRA8T2pA2xrlMj5h
G6RnwtXdBwZXGtj5ZFTbY2OWcxcxPpAazakjWtGd3e2ym0UAyCexiWSxjJWMB2Xs
BrQiHGdYamBdvm8gpVoc9BzxSawIoQ3R5AvKs90K+S3pVEz3DSsSlH6pNEv5HkNh
NWemOFk2Bu2g4Tfp7ycvqCW4cmOoeh1zvxfdwm0PgoPdaihtAWVww9E/qgEVAhdD
JSpExFTava55lrDlKhxozZ/nK27EbADRO7chty4XajteD8NZfTw7stxAamq9Xtx1
QByfrczcuRIc6g==
-----END CERTIFICATE-----
Generated at Thu Oct 8 20:57:32 2026 by rpki-client