Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
File: dNAyUoux0Vl2bNed5HhtzZYqH7s.mft (raw, json)
Hash identifier: QqMnY7qk5zwTrWZh0b9dFAev3Dd4UA5+0zQd07cYGR4=
Subject key identifier: 67:5F:B2:15:8C:3D:E2:AE:43:2A:12:84:CE:17:A8:51:CF:89:6D:35
Authority key identifier: 74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB
Certificate issuer: /CN=74d032528bb1d159766cd79de4786dcd962a1fbb
Certificate serial: 019D288462519CBAA919D47A7673DAD89067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
Manifest number: 1648
Signing time: Thu 26 Mar 2026 05:00:57 +0000
Manifest this update: Thu 26 Mar 2026 05:00:57 +0000
Manifest next update: Fri 27 Mar 2026 05:00:57 +0000
Files and hashes: 1: UWc6YQjM9t1ffmI-LVxAUT_OwbI.roa (hash: 6Dahf9gKo3spL66J3FQf4jt5WqJRr1c/pSpOxLB19HE=)
2: _rWJNNnmk3R1x9pU0oYdGau3c7M.roa (hash: IHOPlEpatbDJApch2mWBilUmuofV8Wjb6ufkWpEothw=)
3: dNAyUoux0Vl2bNed5HhtzZYqH7s.crl (hash: IeiP4bHQzus+C+sf0WlLGtEndgsxfI5S9Ih3cnI1j5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:62:51:9c:ba:a9:19:d4:7a:76:73:da:d8:90:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d032528bb1d159766cd79de4786dcd962a1fbb
Validity
Not Before: Mar 26 05:00:57 2026 GMT
Not After : Mar 27 05:00:57 2026 GMT
Subject: CN=675fb2158c3de2ae432a1284ce17a851cf896d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:65:dc:76:26:b1:6b:6f:39:6c:1e:2f:10:bf:
7b:14:9a:13:69:da:f1:c5:e2:61:9d:df:50:57:7b:
32:8b:dc:ce:7e:4e:9b:de:9e:95:56:f6:9e:a4:a6:
3a:eb:27:1a:26:4c:a2:3f:aa:44:c2:d2:ba:cb:04:
25:8e:7b:85:8c:b4:52:c6:e7:a7:12:20:75:90:11:
6d:06:2f:11:d0:88:20:ac:44:2e:4d:88:1f:94:3d:
e9:b0:4a:e1:55:d3:73:06:db:ae:f0:58:eb:d0:ab:
b8:1a:ab:6c:f3:e3:a4:74:fa:2f:e1:f9:5c:a1:37:
43:d2:6a:36:d8:54:f7:63:32:23:87:8f:e3:68:63:
66:ba:6b:15:23:cc:0a:d0:1f:a4:2e:7a:6a:cc:9a:
d2:d5:64:48:b3:e4:66:69:46:d9:26:18:7a:07:10:
98:d4:f6:4a:47:65:11:0e:7f:1c:42:99:70:1d:66:
69:15:b7:b8:a3:9e:b8:02:bc:7a:de:11:26:ba:50:
67:f4:4a:ff:35:94:7f:3b:fe:e4:4f:bf:e4:98:06:
10:82:b2:a4:8f:0b:48:3b:3a:39:58:e4:ea:e1:99:
3c:51:3a:84:e0:81:97:e5:46:69:30:27:54:e6:cc:
f8:5f:0b:bb:1f:69:c9:01:cb:66:f7:22:bb:aa:37:
81:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5F:B2:15:8C:3D:E2:AE:43:2A:12:84:CE:17:A8:51:CF:89:6D:35
X509v3 Authority Key Identifier:
keyid:74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:17:8a:46:37:b0:0c:c2:f6:b7:00:81:6b:6d:46:ec:92:ef:
e3:13:1e:84:a8:68:bc:48:59:85:59:e8:37:2b:28:71:10:aa:
28:cc:f6:f4:5a:27:24:2b:d9:46:c2:04:5d:5e:b1:4f:af:a2:
db:7a:49:41:da:7b:5f:d9:7f:3b:04:0f:e0:3e:79:b3:0b:28:
99:e6:16:0f:51:ef:dc:ee:fb:3d:21:b7:ad:68:81:22:3f:15:
0a:64:e4:1b:8c:22:b8:bf:90:7c:8b:c5:51:c4:6b:da:40:eb:
51:a7:3a:00:30:27:2b:87:1d:01:55:7a:52:27:a8:47:ee:5f:
22:1d:04:cb:13:97:f1:4d:80:e3:f1:0d:cf:21:59:88:15:77:
b5:be:9a:ed:78:8a:e3:36:fe:52:29:3f:68:fa:38:6a:44:ed:
1c:89:44:0b:fd:68:e1:00:31:09:92:7b:ab:5e:5e:6f:9e:92:
d4:79:c6:07:7b:39:bc:6b:89:15:0b:76:c1:94:65:75:79:31:
9d:e7:40:f9:fb:c3:d8:be:82:05:ab:e6:51:a4:84:1f:56:aa:
b4:b5:f1:5b:4d:db:76:c9:35:2b:2a:b1:5f:82:b7:5c:40:51:
6d:1e:04:8e:5d:6f:d8:11:b4:bb:cd:1c:91:0b:fd:48:17:31:
a4:90:95:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:19:18 2026 by rpki-client