Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
File: dNAyUoux0Vl2bNed5HhtzZYqH7s.mft (raw, json)
Hash identifier: zZVCfM2PWoeGAb9xIF/sV6fZSauMfYNH9c1BJ62J4vo=
Subject key identifier: AF:96:78:D2:92:30:50:B6:AF:AD:5C:66:EB:58:5D:0F:6C:9C:7D:68
Authority key identifier: 74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB
Certificate issuer: /CN=74d032528bb1d159766cd79de4786dcd962a1fbb
Certificate serial: 019F9391E5CFE58AE0EED2A06170C4E4F500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
Manifest number: 1789
Signing time: Fri 24 Jul 2026 10:00:39 +0000
Manifest this update: Fri 24 Jul 2026 10:00:39 +0000
Manifest next update: Sat 25 Jul 2026 10:00:39 +0000
Files and hashes: 1: _rWJNNnmk3R1x9pU0oYdGau3c7M.roa (hash: IHOPlEpatbDJApch2mWBilUmuofV8Wjb6ufkWpEothw=)
2: dNAyUoux0Vl2bNed5HhtzZYqH7s.crl (hash: mnEmgJPKD8oFmwdwjXmSGwSsTYWSFhki7yhZgd1iUWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:e5:cf:e5:8a:e0:ee:d2:a0:61:70:c4:e4:f5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d032528bb1d159766cd79de4786dcd962a1fbb
Validity
Not Before: Jul 24 10:00:39 2026 GMT
Not After : Jul 25 10:00:39 2026 GMT
Subject: CN=af9678d2923050b6afad5c66eb585d0f6c9c7d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5f:74:ad:41:ac:32:96:42:78:45:1d:79:f4:
e9:77:dd:db:ee:a3:fd:0b:e4:ee:61:08:5c:7a:6b:
a9:f2:0b:ba:b5:70:2c:38:86:fc:8c:21:ae:fb:de:
0d:50:a4:4b:23:ee:06:5c:e1:40:b2:fb:f2:b4:6e:
0a:c2:d0:02:a2:2a:57:c5:9a:20:f0:8e:60:d1:8a:
00:03:d5:9d:e4:c4:79:60:00:9a:ec:9c:02:b2:8e:
40:d6:79:d5:32:91:6c:b4:f9:80:47:33:d9:17:bb:
08:4f:b7:a6:23:5a:f8:ed:d4:7c:93:7b:12:60:01:
7a:14:42:74:8e:04:0c:42:15:e6:2b:9f:9e:90:e1:
bd:e0:ff:25:7f:7d:87:78:53:8e:63:3b:36:24:54:
df:c8:ee:42:ce:3f:9f:54:b6:c6:42:02:88:99:99:
04:ba:c3:2e:1b:5f:a7:70:fe:71:61:07:ba:97:10:
f3:7d:f9:34:27:bf:a8:af:68:f1:ce:a8:f4:92:8a:
78:d8:d1:9e:bf:0b:5e:5a:30:2c:a3:14:9f:08:6d:
43:54:aa:74:f3:3b:c0:9f:c5:dd:27:00:4a:15:73:
c8:11:95:b3:dc:cb:fa:4c:1b:3b:99:c1:a4:5b:df:
a7:e8:10:f5:84:f5:56:0a:d9:d7:a7:a7:21:96:24:
be:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:96:78:D2:92:30:50:B6:AF:AD:5C:66:EB:58:5D:0F:6C:9C:7D:68
X509v3 Authority Key Identifier:
keyid:74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:3c:98:f1:d1:be:c8:40:58:e5:80:7d:ec:90:51:36:01:ef:
3f:79:26:81:8c:9e:d1:6b:d1:3f:78:e0:7d:cd:96:86:a0:db:
3b:10:5e:a1:50:14:ed:db:30:79:2d:91:75:03:6c:18:06:80:
5c:9d:e1:07:38:46:3e:da:d9:bb:6a:f9:5c:31:58:3e:22:da:
ed:bd:36:a4:0b:77:8e:68:96:38:f9:9d:1a:95:f4:d6:f7:f7:
33:53:ce:42:8b:54:f1:94:b7:5e:1b:09:22:e3:21:47:77:1c:
63:45:a8:ad:1e:b6:60:1c:d7:07:d5:11:e0:31:4b:78:a2:0c:
62:40:94:1c:e2:be:21:76:38:0c:57:5f:9d:76:89:ed:25:fe:
e2:73:c3:f9:e7:16:15:ca:22:99:72:72:f9:d5:f0:87:17:30:
1c:fe:ec:3e:b3:ed:8b:d6:70:8b:37:8c:a2:11:84:0f:8b:9f:
77:03:2c:d2:6a:33:dd:97:5c:43:2b:5c:1b:63:3f:11:0b:46:
a4:ef:c9:2b:d4:f9:54:8c:ba:0f:82:91:06:6e:43:aa:16:49:
28:d4:d6:b4:64:f7:6b:65:d0:99:4a:e3:8e:42:5c:19:80:0b:
83:68:53:6f:19:e1:68:d9:1d:67:63:14:ac:97:9d:ac:2c:9e:
30:c6:b4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:23:46 2026 by rpki-client