Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
File: dPEFnCc8UO3PPc7fxYABUuyR26I.mft (raw, json)
Hash identifier: F8tMlvOdVnfBAfX/rGAe/0rmzN35f7jc7ZpEG7MvR/U=
Subject key identifier: 47:19:46:E1:85:56:F1:A5:77:47:36:AF:DA:CD:8B:5D:C7:FE:5D:9F
Authority key identifier: 74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
Certificate issuer: /CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Certificate serial: 01A0DC4D9674C75AB750CF3C8680E509A3C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
Manifest number: 1A70
Signing time: Sat 26 Sep 2026 06:01:07 +0000
Manifest this update: Sat 26 Sep 2026 06:01:07 +0000
Manifest next update: Sun 27 Sep 2026 06:01:07 +0000
Files and hashes: 1: 4zHqkXwTdPpErUuwool8-zX-SB4.roa (hash: LHnM5v5Sz1IzlHeFp2joapwPeszU3VAj2kHXfdYdwu4=)
2: dPEFnCc8UO3PPc7fxYABUuyR26I.crl (hash: hrRyPvOCoA/dbdszTUJb1V/prN4XxtziqcGbUcMg8i4=)
3: f_myMJMSIIWO9m-PmHiygg0XXSs.roa (hash: 3LE3GccOE6KqVlj9DZ+EFPId6e66LFjW7NsGN3ZdmPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:4d:96:74:c7:5a:b7:50:cf:3c:86:80:e5:09:a3:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Validity
Not Before: Sep 26 06:01:07 2026 GMT
Not After : Sep 27 06:01:07 2026 GMT
Subject: CN=471946e18556f1a5774736afdacd8b5dc7fe5d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9e:71:b8:76:0d:64:02:f9:ff:78:ee:77:7f:
ab:5f:2e:0e:36:ff:b3:08:c2:6f:1a:13:0f:e7:bf:
bd:9a:bf:a8:6f:f0:67:d6:39:8c:49:d4:d7:8c:71:
0b:a2:1a:2e:e6:ea:25:c3:57:93:f0:f1:ff:76:d9:
aa:33:9f:72:3e:45:4b:3c:a8:8f:d2:94:16:5a:0c:
24:86:f0:c4:ac:64:58:0b:80:98:a3:2e:61:4d:8d:
62:a4:ac:d5:c9:67:4c:fe:7b:ce:da:74:00:20:ab:
50:56:2c:ea:df:65:e3:c9:36:01:9a:3e:57:66:d1:
10:6a:69:f4:d9:b4:f7:75:0d:3d:47:87:c3:c0:dd:
0d:28:36:63:6e:78:07:a1:8f:3c:29:48:ca:4d:81:
87:9a:75:3f:7e:44:f3:a1:ff:46:9b:c7:4f:83:0f:
0a:93:97:7f:94:bc:80:5b:c3:bf:4a:ee:e7:e2:5b:
f5:01:6a:47:3e:34:d7:d7:53:d7:b2:a4:80:45:31:
59:aa:84:8f:df:81:1c:c1:5b:c2:2f:02:b5:22:6a:
39:02:08:db:4a:51:4f:1b:8d:90:20:68:3c:e4:0d:
28:78:af:46:a1:c3:74:f4:ae:05:f7:7b:d4:13:e7:
d2:af:20:84:8d:f2:f7:77:67:3d:75:aa:1c:6c:13:
91:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:19:46:E1:85:56:F1:A5:77:47:36:AF:DA:CD:8B:5D:C7:FE:5D:9F
X509v3 Authority Key Identifier:
keyid:74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:9f:65:fe:5b:df:04:91:a8:31:ad:fc:30:17:07:66:d3:d9:
e5:99:90:f9:d8:49:92:e7:c8:ee:47:01:3e:16:be:3b:09:1b:
63:a6:49:2b:ff:91:cf:2b:60:63:e6:0e:d7:aa:ff:50:39:ca:
4b:a8:57:ef:84:bd:c7:98:80:69:32:7c:99:d3:25:9f:81:26:
ca:89:d2:a7:83:96:02:2e:8c:42:e1:a7:9f:cf:c1:2b:ec:9c:
d7:df:19:40:5c:e6:50:2a:2f:47:17:5e:09:de:a7:ff:08:e8:
23:87:f9:c3:a3:d2:51:b3:64:90:42:bd:de:c2:fe:ef:ea:02:
04:35:c5:55:9d:df:dd:49:20:1f:71:05:da:24:8d:f7:2f:18:
ad:0b:24:a5:01:c0:f3:2b:f4:47:7f:ce:1b:a8:b7:12:41:ea:
1b:11:fe:76:08:16:2f:60:62:67:bc:7a:aa:4f:74:44:d2:93:
6e:d1:2b:da:0e:dc:9f:0b:d9:68:0e:73:3e:1c:13:9b:af:ab:
9e:7d:16:67:6f:13:80:b7:d0:95:ae:63:e7:ef:a2:72:52:66:
b7:db:3d:8d:cd:b4:a9:05:62:41:01:7b:af:da:0a:4c:bb:77:
47:b8:8b:47:7c:cb:92:e1:b1:04:b0:98:d0:2a:9f:24:e8:fe:
0f:8a:f6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:46:53 2026 by rpki-client