Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
File: dNAyUoux0Vl2bNed5HhtzZYqH7s.mft (raw, json)
Hash identifier: iE55E9hrwOf4cdzrxFM3aE/XFB9gyhMul2vLSDX620Y=
Subject key identifier: 01:B4:3F:49:C7:81:DD:6A:4A:FA:3D:3A:DA:A5:84:59:56:39:D2:AF
Authority key identifier: 74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB
Certificate issuer: /CN=74d032528bb1d159766cd79de4786dcd962a1fbb
Certificate serial: 019E1DC753CE3A9827546BF8AFE8022541DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
Manifest number: 16C7
Signing time: Tue 12 May 2026 20:01:02 +0000
Manifest this update: Tue 12 May 2026 20:01:02 +0000
Manifest next update: Wed 13 May 2026 20:01:02 +0000
Files and hashes: 1: UWc6YQjM9t1ffmI-LVxAUT_OwbI.roa (hash: 6Dahf9gKo3spL66J3FQf4jt5WqJRr1c/pSpOxLB19HE=)
2: _rWJNNnmk3R1x9pU0oYdGau3c7M.roa (hash: IHOPlEpatbDJApch2mWBilUmuofV8Wjb6ufkWpEothw=)
3: dNAyUoux0Vl2bNed5HhtzZYqH7s.crl (hash: v64OR8XcBsCkldf/PoDR+uI3TmgsMN4SoUjygArYxGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:53:ce:3a:98:27:54:6b:f8:af:e8:02:25:41:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d032528bb1d159766cd79de4786dcd962a1fbb
Validity
Not Before: May 12 20:01:02 2026 GMT
Not After : May 13 20:01:02 2026 GMT
Subject: CN=01b43f49c781dd6a4afa3d3adaa584595639d2af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0e:39:ae:e3:47:a4:41:7b:6c:e4:60:0f:49:
2a:35:c4:7c:3d:fd:73:db:25:8a:16:8d:38:ac:a0:
8e:7d:9a:5b:93:6b:b8:6c:88:ab:f4:7f:b5:62:58:
b1:39:22:ff:e8:88:9d:a8:e7:4f:62:3f:6e:57:49:
7d:7f:f7:ca:ae:1a:ce:0f:5a:65:8f:8a:2f:a4:73:
0f:38:25:f4:be:58:b6:41:40:47:84:1c:49:ec:2d:
f5:1d:83:66:8e:0a:8d:1f:0b:36:35:b1:07:86:76:
e9:3b:ba:d3:98:ea:0a:a9:7b:44:c8:3a:70:92:97:
7f:74:72:d4:f1:0f:53:5e:c6:6d:23:31:bb:56:49:
ae:78:b5:da:9e:af:bb:0b:bb:bc:84:d4:88:41:a6:
48:f2:3d:04:8d:37:18:65:1e:8a:c7:8e:38:f4:91:
5f:03:97:1d:2e:04:68:ba:c2:16:85:20:01:dd:35:
fe:ea:78:04:12:9c:9a:a8:9b:35:f7:fa:a3:b1:02:
27:f2:ce:6a:5d:f0:86:b2:d2:7b:9c:b9:ec:7b:f7:
96:48:96:b0:d1:21:55:22:4a:c7:9a:3d:9d:4a:6f:
1b:a4:aa:cf:88:55:48:72:aa:70:a5:9e:04:91:28:
f7:da:55:fe:00:66:3b:02:f2:9c:4a:cc:61:97:75:
b4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B4:3F:49:C7:81:DD:6A:4A:FA:3D:3A:DA:A5:84:59:56:39:D2:AF
X509v3 Authority Key Identifier:
keyid:74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:db:86:13:fa:8f:a2:e2:c0:5c:ab:d3:ac:0d:6c:e2:dd:33:
de:37:8d:a7:e3:40:27:da:6d:a8:25:29:66:ee:bb:e2:b7:26:
fb:5b:39:9b:66:df:96:4e:dd:77:cb:ef:86:e0:9a:f0:48:bc:
83:e2:be:33:d6:ea:d9:d8:c7:cd:f2:59:12:a7:a0:d9:fd:d8:
67:e3:31:4e:e5:c0:4a:c6:da:1a:63:83:f2:1c:23:48:3c:a9:
03:51:cd:0c:74:1c:04:a9:3e:ac:25:95:ef:b0:d8:fc:cd:58:
30:af:5a:10:6d:9a:0f:24:21:54:78:84:9f:58:9b:47:d1:79:
51:36:d0:76:42:8c:bb:ea:f4:3c:4b:69:83:36:4d:cc:90:6f:
d6:fa:30:6a:cc:99:8e:f9:bc:06:0a:94:fd:49:9e:78:18:5e:
bc:c5:bb:a3:cb:4e:ac:79:af:12:08:74:f4:d8:4c:be:66:c1:
fe:c6:6a:3f:3a:9c:4a:9a:3d:b3:40:7f:c9:e3:a8:75:20:50:
f9:c9:45:a4:62:be:8f:47:ac:c1:12:17:7e:76:71:09:d3:e5:
8a:54:62:cb:c0:24:e7:da:6a:70:b4:47:10:19:08:fc:f3:00:
f0:40:82:4a:de:d9:4d:f6:44:e2:5e:af:17:55:e3:0d:ac:4c:
d1:6a:1d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:49:52 2026 by rpki-client