Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
File: dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft (raw, json)
Hash identifier: X9rQc34nROEB9Dqq0H437qOenYLGoe7kYqphFMxRphE=
Subject key identifier: FB:4C:0F:22:47:6F:8F:5E:DD:EC:53:A8:19:74:6B:85:0E:F2:7A:85
Authority key identifier: 74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9
Certificate issuer: /CN=74d7da63929999603395877448ce50ac6e0213a9
Certificate serial: 019D265F93677DFC1E94CB426CFE938D7BDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
Manifest number: 10ED
Signing time: Wed 25 Mar 2026 19:01:30 +0000
Manifest this update: Wed 25 Mar 2026 19:01:30 +0000
Manifest next update: Thu 26 Mar 2026 19:01:30 +0000
Files and hashes: 1: SwOC6LWRUnc-Ogb7u3vxF_0mea4.roa (hash: /q8N1XNG3IXyW6BA6haLHv1Ug3hcBfXRJEVoULv8zlE=)
2: dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl (hash: MyLmPokNo+RjfrbYjk9BrYkoiYjLUsF3vCCnHKEChjQ=)
3: iGjEi-RetR317ng4nZLQERiyp5Y.roa (hash: VlJirjJKzaqO+FqHC1L2a0e5Ten97AODI8Xgtdno6FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:93:67:7d:fc:1e:94:cb:42:6c:fe:93:8d:7b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d7da63929999603395877448ce50ac6e0213a9
Validity
Not Before: Mar 25 19:01:30 2026 GMT
Not After : Mar 26 19:01:30 2026 GMT
Subject: CN=fb4c0f22476f8f5eddec53a819746b850ef27a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:82:82:c0:de:08:8d:99:79:25:e4:54:e0:1c:
7e:48:1b:04:6c:37:30:ea:98:c4:31:31:78:53:9d:
43:8b:27:a2:61:a5:59:81:1e:d8:ff:7d:e5:da:51:
d5:8a:c5:97:ae:19:4a:32:94:46:c1:78:7f:3b:16:
22:42:53:72:ba:c0:b2:53:38:ba:54:0a:f5:9a:69:
66:fb:c0:56:95:38:4d:a2:33:47:90:b8:a8:de:0e:
a1:69:5a:39:3c:53:76:bc:f1:e4:06:27:20:5d:8f:
7b:e1:76:f9:09:04:d3:af:f0:ed:02:f2:58:a7:8f:
26:7c:25:e2:b1:f9:f4:a5:57:89:38:3e:b1:a8:63:
64:cc:a1:c9:40:c1:a5:3a:4d:b3:69:d2:b0:9a:90:
3c:94:51:c0:4c:c8:ce:1f:36:14:78:c5:cb:1d:79:
f9:dd:f2:db:24:fe:99:a9:2d:56:38:33:ac:0f:ec:
c1:d4:5a:e9:6e:ad:39:1b:c6:23:d6:ff:88:68:34:
6f:96:5a:7e:07:c2:e9:5e:1e:68:a2:6c:8c:ed:d9:
6e:70:f8:bc:8c:5c:1a:d8:06:0a:8d:81:eb:b7:cf:
3f:81:bf:4b:03:a3:88:8d:97:14:d0:bc:0b:42:11:
37:4a:06:e9:61:50:44:78:d4:b0:c3:e7:54:dd:35:
55:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4C:0F:22:47:6F:8F:5E:DD:EC:53:A8:19:74:6B:85:0E:F2:7A:85
X509v3 Authority Key Identifier:
keyid:74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:03:9b:da:41:08:52:85:9c:87:ee:ec:7c:06:dd:e6:f2:a7:
5e:c5:9c:ab:e6:9f:8d:bd:fd:e2:1e:8d:0e:62:d8:26:27:42:
36:46:d7:a3:84:14:33:ab:db:3e:30:6b:11:e4:9c:e7:3b:0a:
ba:17:3f:2a:e0:8e:d7:16:dc:f6:32:3f:2f:be:5b:83:84:d9:
2f:40:42:35:59:aa:cb:77:be:ec:e6:03:23:cc:49:85:5a:f9:
f7:7a:ca:a1:af:73:80:48:be:01:e6:7e:88:03:e1:e7:47:b0:
fd:74:6a:1b:92:c4:40:88:26:98:21:e1:ba:ee:5f:69:36:f6:
59:ac:ab:b0:91:99:93:8b:2f:42:68:17:98:c6:e7:4f:c3:85:
ec:ad:6f:8a:e9:65:d4:57:14:ef:96:43:bf:97:76:c5:52:2e:
51:9d:4b:2e:b0:2d:1a:03:7a:a5:e5:be:e9:bb:14:0e:f1:44:
7e:b4:41:fb:af:27:69:b0:a1:bb:21:d7:e3:bd:7a:e7:9e:13:
ec:a2:0e:55:a4:a9:8e:f2:59:d7:ac:1d:36:f2:7d:c9:63:83:
b5:00:a4:b7:81:0e:5e:b7:22:f2:4f:c5:78:41:c9:3e:82:ea:
d8:9d:df:0f:cd:7a:10:7e:d7:41:34:dc:ae:03:94:ec:f1:d6:
60:e4:17:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:21:59 2026 by rpki-client