Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
File: dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft (raw, json)
Hash identifier: OpyGqiI0jiAb0MW+11WtON1N1k+vE/WGB3xG8yM4ieo=
Subject key identifier: CB:7C:5A:79:F5:D3:F3:16:60:F8:9B:FF:D6:E0:30:30:14:84:10:F6
Authority key identifier: 74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9
Certificate issuer: /CN=74d7da63929999603395877448ce50ac6e0213a9
Certificate serial: 01A0DC850DA641D16DD5ACA7340254D149AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
Manifest number: 12D9
Signing time: Sat 26 Sep 2026 07:01:42 +0000
Manifest this update: Sat 26 Sep 2026 07:01:42 +0000
Manifest next update: Sun 27 Sep 2026 07:01:42 +0000
Files and hashes: 1: SwOC6LWRUnc-Ogb7u3vxF_0mea4.roa (hash: /q8N1XNG3IXyW6BA6haLHv1Ug3hcBfXRJEVoULv8zlE=)
2: dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl (hash: +on+Qgiy+MioCtDjvYHDrE3Yltog64rdY0M7UFLpGkw=)
3: iGjEi-RetR317ng4nZLQERiyp5Y.roa (hash: VlJirjJKzaqO+FqHC1L2a0e5Ten97AODI8Xgtdno6FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 07:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:85:0d:a6:41:d1:6d:d5:ac:a7:34:02:54:d1:49:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d7da63929999603395877448ce50ac6e0213a9
Validity
Not Before: Sep 26 07:01:42 2026 GMT
Not After : Sep 27 07:01:42 2026 GMT
Subject: CN=cb7c5a79f5d3f31660f89bffd6e03030148410f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3f:9d:74:c7:29:46:61:b1:e0:e4:88:5c:a7:
b3:d1:65:c0:8d:7b:8a:9b:b8:9e:8a:9a:ac:e6:27:
75:c3:be:bc:1f:38:44:7f:74:59:ed:fd:8e:08:a0:
d1:e1:57:7b:8b:cc:76:c3:74:ef:a4:4d:70:f2:77:
b6:68:a5:1e:72:1e:5a:de:51:4f:fd:6e:4c:87:8d:
d3:37:c8:25:23:4f:71:cb:31:06:2c:b3:4a:8a:f6:
e6:3d:f8:d5:c0:4b:5e:b1:a5:ad:16:80:33:ff:1b:
de:dc:c0:15:a2:6c:96:f0:66:d1:ac:4a:37:33:77:
5f:b2:fd:ff:6d:84:ce:c3:e7:2f:13:f3:ea:d3:cd:
d3:0c:47:98:2f:9e:1a:ab:f6:b9:9a:48:56:5b:f8:
2c:83:02:f7:cd:7f:c5:08:be:96:5b:a9:6c:a7:55:
22:c3:43:af:97:1b:5d:56:37:97:c0:dc:32:05:af:
18:3e:41:53:19:3f:c6:ba:3e:0e:c6:d1:a4:ee:c6:
38:b0:57:8b:94:24:bc:93:e7:2b:5f:0d:8d:de:7a:
ee:dd:25:1d:84:61:85:cb:4a:c0:d8:11:1f:a7:7d:
56:eb:21:34:b9:74:8b:17:6a:57:bd:ce:7f:31:35:
5e:62:83:d8:b5:59:93:97:e7:55:c2:09:f9:f1:3b:
25:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7C:5A:79:F5:D3:F3:16:60:F8:9B:FF:D6:E0:30:30:14:84:10:F6
X509v3 Authority Key Identifier:
keyid:74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:68:d9:66:12:dd:77:e1:c2:e4:c5:f5:8e:fb:78:27:47:f1:
98:d9:5d:52:79:97:f3:1a:c0:05:36:b1:bb:f9:85:80:4f:bb:
4c:f1:dd:80:74:d3:7e:a9:ba:7a:0d:31:a2:a2:04:37:1a:43:
2b:ae:89:16:06:a3:82:bc:00:26:55:10:92:08:cc:f7:ee:b2:
f1:3d:08:93:47:4d:eb:f2:f6:cf:a0:49:3b:64:29:b6:fa:71:
4a:84:af:43:5e:63:cc:04:a0:6d:69:a6:23:8e:dc:38:85:f9:
04:e7:b2:e4:14:13:d6:9a:c4:9e:d1:42:73:b9:5d:73:3b:fc:
af:d1:78:bc:c2:2b:3d:2a:5c:68:a6:17:3f:5b:f6:02:c0:19:
97:35:08:63:8f:93:79:a4:ff:fd:85:de:e1:80:e0:17:6e:71:
1f:f5:79:af:a2:70:0d:0c:c0:b0:3e:60:40:fd:da:1c:58:e6:
b0:45:65:d0:87:80:4e:f9:74:f6:e6:54:01:b7:a8:9c:2a:4f:
b0:0e:ff:17:4f:00:b3:3a:57:5d:3f:ef:44:78:b1:1e:35:29:
3d:82:06:a1:43:0d:0f:a3:15:d6:40:2a:08:93:d1:d4:74:e8:
b5:4c:7e:a0:9d:51:84:b9:35:ef:ab:fe:24:bf:04:3c:7c:96:
f0:93:ea:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:51:36 2026 by rpki-client