
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
File: dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft (raw, json)
Hash identifier: zcXuKLxiDp0O4l3chiVcTip+I3MlZtO39V195CNJYJQ=
Subject key identifier: A6:04:BC:1A:3E:25:AC:5F:40:3C:4F:19:8A:68:DD:03:5A:82:97:DE
Authority key identifier: 74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9
Certificate issuer: /CN=74d7da63929999603395877448ce50ac6e0213a9
Certificate serial: 019E1F7ED906C486562553B56678E57295D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
Manifest number: 116E
Signing time: Wed 13 May 2026 04:01:07 +0000
Manifest this update: Wed 13 May 2026 04:01:07 +0000
Manifest next update: Thu 14 May 2026 04:01:07 +0000
Files and hashes: 1: SwOC6LWRUnc-Ogb7u3vxF_0mea4.roa (hash: /q8N1XNG3IXyW6BA6haLHv1Ug3hcBfXRJEVoULv8zlE=)
2: dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl (hash: RZdM++Kn7PavfO3oMx0ZuHlQgf75VcFhU5RoduQpQWw=)
3: iGjEi-RetR317ng4nZLQERiyp5Y.roa (hash: VlJirjJKzaqO+FqHC1L2a0e5Ten97AODI8Xgtdno6FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:d9:06:c4:86:56:25:53:b5:66:78:e5:72:95:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d7da63929999603395877448ce50ac6e0213a9
Validity
Not Before: May 13 04:01:07 2026 GMT
Not After : May 14 04:01:07 2026 GMT
Subject: CN=a604bc1a3e25ac5f403c4f198a68dd035a8297de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d8:34:be:ae:1a:d3:44:ad:68:05:b6:30:4b:
9b:aa:ad:bb:e0:b2:58:1d:c6:ed:66:5f:fd:1a:7d:
86:3f:16:55:31:f0:aa:6b:c8:29:2e:2d:e1:7e:cf:
36:e2:f0:99:09:3f:4d:92:58:4d:47:8f:af:89:4d:
81:08:b4:99:be:21:63:63:c1:85:01:44:6a:56:1d:
f3:de:71:f3:5d:04:4e:ed:64:18:db:e6:99:2c:65:
f8:01:2b:a2:1d:06:79:8c:b4:4f:8b:4b:85:84:e8:
86:4f:be:7d:77:c9:85:81:b5:69:d9:ab:0c:54:71:
9e:26:eb:94:0d:2a:a2:05:78:60:c9:96:b9:cd:06:
a3:03:55:e8:0d:0e:90:63:99:fe:56:dc:71:5c:28:
02:89:f1:f7:15:22:dc:2d:ac:50:0d:c3:90:02:3a:
ea:7c:14:10:97:c0:41:4b:f5:14:a1:5a:ca:96:b3:
6f:83:8f:d0:36:65:14:8a:ec:f0:2f:54:56:53:3a:
bb:67:d4:0e:39:40:39:66:3f:5f:96:f3:29:7a:13:
15:8a:50:5a:d1:1e:7d:00:bd:39:3d:e1:39:f4:39:
e6:82:98:c1:b2:0b:16:ed:16:c1:76:40:4f:28:80:
3d:ab:15:ba:15:9f:8f:e0:24:54:9c:8a:0b:4b:98:
9d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:04:BC:1A:3E:25:AC:5F:40:3C:4F:19:8A:68:DD:03:5A:82:97:DE
X509v3 Authority Key Identifier:
keyid:74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f6:06:71:d1:22:37:89:12:ff:28:14:da:f7:5c:de:3c:42:
1e:87:e1:81:c8:07:6d:89:6e:26:62:3a:fc:ed:31:19:98:56:
9f:3a:fc:5d:2c:8c:14:8c:45:49:6f:87:67:3e:ab:c4:f8:8b:
50:ed:0e:a6:53:f9:e4:67:ca:d3:16:5c:71:9b:97:1d:ac:ab:
ab:ee:c0:84:ba:41:4e:19:53:81:7f:b6:2f:25:b9:f2:a8:86:
5f:24:52:6f:af:75:c8:a9:18:67:3b:50:f7:f5:3f:f7:80:70:
58:61:43:e5:8d:21:1a:b7:49:61:7c:15:80:76:08:25:9f:a7:
c2:8f:60:a1:8c:eb:6d:00:67:c8:7d:52:f7:b1:46:a2:67:1f:
e0:dc:20:ba:cb:57:a6:37:be:6a:52:70:4b:2b:13:ce:12:67:
dd:fc:73:bb:25:14:cb:93:83:e3:2c:34:25:55:9a:e1:24:72:
27:2d:6f:a8:b7:9e:9c:4d:fd:62:48:03:ae:ba:e9:0c:f7:7e:
c6:02:28:47:2f:ed:bd:27:9a:c6:15:fa:03:54:e6:00:18:0a:
04:b7:d2:0f:8e:47:78:08:fb:a2:cf:5b:cd:79:1f:61:ba:a8:
87:33:f3:79:87:05:b9:28:bd:0e:4a:9d:f3:22:80:2e:c0:8f:
12:a7:bf:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:27:25 2026 by rpki-client