Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
File: dMf46RuB_mSHMHxSJusET5I5bOo.mft (raw, json)
Hash identifier: CnaUsycabJw23CMMmfP52nUE0PXpucr8vtxwklZUFZ0=
Subject key identifier: F1:12:4B:03:B4:F5:89:09:5B:E0:84:DB:8C:36:42:F7:08:AC:21:38
Authority key identifier: 74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA
Certificate issuer: /CN=74c7f8e91b81fe6487307c5226eb044f92396cea
Certificate serial: 01A0CEC8A95224BD811F341FBF7874FECBCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
Manifest number: 19FE
Signing time: Wed 23 Sep 2026 15:00:51 +0000
Manifest this update: Wed 23 Sep 2026 15:00:51 +0000
Manifest next update: Thu 24 Sep 2026 15:00:51 +0000
Files and hashes: 1: ZMUCUaol16FS16uvGYc5LMi3mms.roa (hash: 1PMSBIos5jL1U1+prZU3noEZyRlQ7CsZEb3CRHH/Kmg=)
2: dMf46RuB_mSHMHxSJusET5I5bOo.crl (hash: cKcAsL0GaVqTvw+CgOmgpv7Q3L04XjrfMnx0NvD9AZI=)
3: tTSdWCx25FCn0IY4HobZWct52gk.roa (hash: fHmHb3pigGy4UNI0P79QY+ZoI7ILqOgBSDwz0m8aRvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:a9:52:24:bd:81:1f:34:1f:bf:78:74:fe:cb:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74c7f8e91b81fe6487307c5226eb044f92396cea
Validity
Not Before: Sep 23 15:00:51 2026 GMT
Not After : Sep 24 15:00:51 2026 GMT
Subject: CN=f1124b03b4f589095be084db8c3642f708ac2138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0d:42:79:84:53:51:a5:4d:2a:9c:2a:61:99:
5c:a3:22:85:b9:49:a6:e8:1c:44:36:6b:17:ed:04:
00:0a:c7:34:2b:b0:fd:64:7e:be:a5:43:97:76:3b:
36:0d:21:5a:52:c0:6a:9f:0e:e1:fa:cf:f3:32:4c:
49:e4:73:c2:c3:a6:0c:b0:75:1e:7a:62:02:a9:b9:
6f:6b:62:25:bb:11:51:9a:a0:51:be:9c:eb:87:ed:
20:b4:a1:6d:99:4f:01:39:09:c2:5a:6e:ea:a2:18:
61:36:39:54:6e:93:78:92:de:0d:b0:af:ef:38:b4:
b0:36:34:fd:ca:15:af:5c:8c:2d:05:1a:cf:d0:f0:
44:01:4a:ec:b6:55:1e:80:b6:2a:2a:03:d0:82:62:
33:16:eb:95:04:42:88:33:a5:52:75:a9:37:ee:a3:
2f:6f:92:c4:d9:cd:8a:8f:2c:d3:b5:9e:26:a6:c5:
63:39:45:87:6b:33:69:64:9f:79:7e:eb:79:7e:43:
88:78:e2:2e:3a:dc:1d:2d:ba:a5:7d:3d:e7:86:00:
07:5c:26:c4:cc:ab:1e:38:2e:b9:69:86:46:e3:85:
d7:9f:5a:b0:6e:5f:d0:7b:51:3e:6c:12:81:c7:6d:
08:1a:d3:93:89:48:3e:2b:b8:37:5e:99:ec:35:b6:
7f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:12:4B:03:B4:F5:89:09:5B:E0:84:DB:8C:36:42:F7:08:AC:21:38
X509v3 Authority Key Identifier:
keyid:74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e9:ee:c8:f8:b4:26:72:f6:20:97:86:fe:a7:8f:ec:7d:47:
95:31:c3:e5:1f:e6:97:4a:ce:0d:83:4e:91:29:dc:76:e5:d3:
1d:44:6f:b4:cf:fe:5d:aa:c7:a4:a4:b3:07:f1:93:3c:d9:dd:
68:79:ed:3a:5e:1b:e5:d5:e9:55:94:3d:10:73:88:5c:21:24:
aa:0d:b2:80:9f:1b:62:3d:61:dd:bb:5d:4b:a0:f0:0f:05:5b:
bb:af:1d:cc:1f:94:c5:d0:82:9f:68:12:d0:74:0a:62:d2:3e:
91:a4:2b:d4:fa:c5:f6:26:e6:52:16:ec:2f:27:a4:0c:bf:9c:
db:35:f2:bd:b7:82:93:69:5a:3a:aa:9b:3c:19:c1:20:53:92:
80:ae:9c:22:35:31:b7:d5:90:e2:0d:32:26:f8:98:13:2b:42:
85:93:17:c5:df:31:35:3f:a6:b4:c1:44:d9:d6:f7:58:e7:96:
94:4e:89:09:d5:e1:13:06:54:50:95:48:6e:78:02:e8:61:6b:
c2:1c:95:38:12:37:af:8c:f5:1f:4b:b4:d2:60:b6:3f:d8:c4:
8a:03:50:22:bd:8a:89:78:d6:71:71:7d:4a:3c:85:3d:ed:0e:
c2:fe:0a:78:38:94:ce:97:61:28:db:91:93:9c:04:a9:53:c4:
3a:b8:d4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:50:24 2026 by rpki-client