Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
File: dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft (raw, json)
Hash identifier: eoso5/qGnDwnq0qhswfj6A/TzVUJOhNGtQGIMvOx/Hw=
Subject key identifier: 00:62:7A:BA:0A:A8:DF:EE:BB:B2:CB:9A:7F:54:45:DF:E7:15:16:61
Authority key identifier: 74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9
Certificate issuer: /CN=74d7da63929999603395877448ce50ac6e0213a9
Certificate serial: 019D284E02DFEA311B7923F1A96D1BAFED03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
Manifest number: 10EE
Signing time: Thu 26 Mar 2026 04:01:34 +0000
Manifest this update: Thu 26 Mar 2026 04:01:34 +0000
Manifest next update: Fri 27 Mar 2026 04:01:34 +0000
Files and hashes: 1: SwOC6LWRUnc-Ogb7u3vxF_0mea4.roa (hash: /q8N1XNG3IXyW6BA6haLHv1Ug3hcBfXRJEVoULv8zlE=)
2: dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl (hash: JzAo7nGFWD0ae6EiECFm25YVwnDL3uI5bA3bxi0+gng=)
3: iGjEi-RetR317ng4nZLQERiyp5Y.roa (hash: VlJirjJKzaqO+FqHC1L2a0e5Ten97AODI8Xgtdno6FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:02:df:ea:31:1b:79:23:f1:a9:6d:1b:af:ed:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d7da63929999603395877448ce50ac6e0213a9
Validity
Not Before: Mar 26 04:01:34 2026 GMT
Not After : Mar 27 04:01:34 2026 GMT
Subject: CN=00627aba0aa8dfeebbb2cb9a7f5445dfe7151661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:11:e9:1a:03:33:57:84:65:54:65:84:99:68:
a2:63:17:ee:3a:2b:b5:39:e3:a1:43:29:b1:01:33:
79:b1:39:f5:ad:dc:56:6a:f7:b2:1c:c5:84:b5:2a:
12:60:6f:86:92:3d:0f:cb:b0:08:a3:4b:67:46:9c:
2c:fa:53:95:c5:d9:49:e1:5b:a6:ec:3b:5a:46:5e:
f0:6c:8c:42:c3:f3:ad:e6:32:cb:4a:b8:83:2e:e4:
80:f3:9d:c6:1a:0a:ee:6b:f9:18:89:f3:97:33:23:
33:74:52:25:1a:f0:5a:b7:de:5e:de:4d:d6:9d:4d:
54:b5:47:f2:63:3d:46:1d:c3:9d:c2:24:e6:52:4c:
23:d8:73:ac:cc:b6:72:93:50:cc:0e:f8:f3:5b:2a:
13:10:26:63:74:4d:74:ab:b5:d9:62:ac:d9:8b:ef:
1d:6b:61:38:a9:23:f2:41:02:a5:1f:57:a3:ca:f3:
92:41:8a:4e:05:9d:ab:60:94:41:a5:bb:a9:d2:01:
c4:10:9d:bd:92:74:a2:91:3d:b1:89:78:0a:a4:e0:
7b:53:2a:11:c3:3e:f2:2e:6a:83:db:7e:0e:5f:0b:
e5:9b:6d:0f:c3:6c:02:95:a7:aa:9b:73:87:c4:58:
18:0b:71:a1:f7:52:54:bb:ba:5c:3c:ee:24:17:5a:
5d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:62:7A:BA:0A:A8:DF:EE:BB:B2:CB:9A:7F:54:45:DF:E7:15:16:61
X509v3 Authority Key Identifier:
keyid:74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:a7:05:f2:3c:e7:b9:83:2d:e4:62:f6:00:5f:a0:54:68:2d:
fd:67:04:4e:30:4b:dc:20:8e:77:3a:50:0a:89:0d:26:43:84:
df:b7:07:33:ae:0c:ab:2e:23:dd:de:f5:80:c9:d9:fa:f4:96:
ca:9a:83:26:38:53:19:53:ee:53:f4:d6:0a:87:71:ba:b7:b1:
d6:c4:c9:65:2d:0f:05:f4:9c:3b:1e:4c:44:76:36:f1:29:99:
5d:b2:a2:6f:07:b1:8d:75:39:c0:da:6a:e9:d6:67:74:e2:2c:
d6:ed:72:d3:66:31:29:5f:cf:e2:79:ea:71:f7:c6:18:c4:03:
27:e3:fa:76:93:3e:80:47:df:23:18:bb:1c:f2:58:c0:be:0f:
b1:96:3f:fa:95:ad:9d:7f:5e:5d:66:d4:19:69:1a:0a:25:4b:
c9:ed:78:00:61:59:4e:11:fb:4b:b6:1b:12:7c:82:7e:41:4a:
c1:8f:ea:ec:e5:a0:e9:1f:af:48:ec:9a:e2:89:d1:86:bf:93:
82:49:d7:8f:f5:34:d1:50:55:46:5c:eb:81:86:ed:92:57:88:
3d:01:2d:2b:cb:f1:94:b5:1d:2d:5a:12:8f:1a:93:45:47:72:
70:de:29:d8:c4:85:be:74:25:80:0e:2b:41:4e:a0:c4:dd:92:
0a:b3:ab:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:41:00 2026 by rpki-client