Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft
File: 74wzqKYgHUCmAiC9Y5tdNSISZz4.mft (raw, json)
Hash identifier: 7eSZ3KpGl3GbqGrWhQsJ1Tk1YrG4z7oqEY9A1zr2qOI=
Subject key identifier: 3A:2B:35:75:D0:E4:AF:9D:EF:2D:E6:77:73:62:F5:DF:F7:E3:0A:10
Authority key identifier: EF:8C:33:A8:A6:20:1D:40:A6:02:20:BD:63:9B:5D:35:22:12:67:3E
Certificate issuer: /CN=ef8c33a8a6201d40a60220bd639b5d352212673e
Certificate serial: 019E1D5981D9AE9CE3AEF3699028719DC58B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft
Manifest number: 171A
Signing time: Tue 12 May 2026 18:01:05 +0000
Manifest this update: Tue 12 May 2026 18:01:05 +0000
Manifest next update: Wed 13 May 2026 18:01:05 +0000
Files and hashes: 1: 74wzqKYgHUCmAiC9Y5tdNSISZz4.crl (hash: qXSXiJBJLV0zERcENdZU54Bh0vTBgfYeyiFwIB/Zf40=)
2: BcbpeOE1UIMLYcx9_xoYiBz5cII.roa (hash: C/EPAsh6T699gB8fYjC4QQRKH8QFpe67E9wrm8R7nkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:81:d9:ae:9c:e3:ae:f3:69:90:28:71:9d:c5:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef8c33a8a6201d40a60220bd639b5d352212673e
Validity
Not Before: May 12 18:01:05 2026 GMT
Not After : May 13 18:01:05 2026 GMT
Subject: CN=3a2b3575d0e4af9def2de6777362f5dff7e30a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2a:3b:47:ea:39:8e:85:ca:78:0c:28:1f:57:
8c:34:66:ce:eb:f2:0d:95:a5:4a:45:78:1b:f2:d3:
92:82:1d:aa:cf:dc:3a:f9:a6:20:eb:28:47:86:c4:
cb:d2:db:53:fe:21:5d:08:c1:f4:29:9c:2d:54:78:
5f:9a:c1:12:3a:bb:91:ed:89:2f:62:c2:87:d6:5c:
98:a0:9b:0b:0d:2d:18:9b:b1:99:76:6e:56:ab:f0:
4f:3a:4b:64:2f:95:e4:14:cf:cf:59:3b:40:bc:99:
c2:a7:86:b1:d8:8e:fe:00:fd:a6:35:5a:c2:7b:dc:
da:47:7b:de:33:8c:88:ae:2b:69:53:b8:da:9d:fc:
f1:95:3f:c9:35:c5:36:5e:c1:06:7a:1c:ba:57:77:
db:2e:f6:0b:c8:96:d1:0e:a4:2e:80:c4:38:bf:6b:
1d:22:82:5d:01:92:66:6f:a0:8a:5a:50:06:18:8b:
e2:bb:a2:3a:b6:a3:02:21:27:90:6e:6e:b1:1b:2e:
38:56:1f:00:dc:33:8e:e7:a2:7f:2d:83:a4:66:74:
63:5c:3f:c3:fd:c5:ba:a4:e8:7b:f6:ca:08:56:e8:
65:71:6c:6c:a4:5d:bb:81:50:c5:34:87:a9:54:9b:
fa:fa:8f:b2:6e:1b:89:82:15:47:c0:53:37:cc:66:
6f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2B:35:75:D0:E4:AF:9D:EF:2D:E6:77:73:62:F5:DF:F7:E3:0A:10
X509v3 Authority Key Identifier:
keyid:EF:8C:33:A8:A6:20:1D:40:A6:02:20:BD:63:9B:5D:35:22:12:67:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:c0:16:56:56:ee:45:53:bf:1e:cc:f1:5b:e2:b9:f2:1d:bb:
d3:fc:22:3c:18:ff:79:f0:02:99:7e:32:58:83:11:05:1f:eb:
02:85:af:a0:08:39:2d:88:9b:a9:6e:4e:49:74:9f:48:26:70:
60:63:f8:e6:63:01:04:e6:54:91:87:dd:6f:dc:62:84:65:ce:
d9:df:50:5e:74:e9:8a:d6:3a:10:f2:e0:b4:f0:28:bd:62:d5:
2b:bc:0e:39:50:62:e6:28:e8:6e:26:d4:25:fc:6b:c5:2f:3f:
80:0b:da:7a:7b:a3:7c:85:39:b4:2d:33:cb:d5:20:9e:06:24:
00:21:1b:75:2a:7a:bb:18:e7:8e:a1:9a:85:59:10:b9:4f:03:
2d:a8:83:38:39:50:1c:6b:5d:a3:aa:72:6e:34:08:23:7d:3f:
70:5c:ec:87:82:33:97:24:8a:b0:86:b7:df:1a:a6:55:9a:f5:
4a:11:68:b7:40:39:c1:77:69:a0:10:50:2a:4a:06:00:59:ae:
05:62:77:03:9a:7e:46:54:72:f8:04:af:e0:24:5c:f1:82:c3:
e4:c2:9b:c8:6d:2a:cd:38:05:72:f4:3a:7c:57:80:f3:b0:c9:
1b:b0:1f:da:ed:f8:e7:3f:20:14:2d:be:13:d7:ad:c9:56:c4:
96:5e:d0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:56:55 2026 by rpki-client