Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
File: dPEFnCc8UO3PPc7fxYABUuyR26I.mft (raw, json)
Hash identifier: KrO/nupocaFDo5uguctTZAf1PcCbU6uPxKhLLpbf2+U=
Subject key identifier: 7F:31:F5:0D:D7:48:D9:99:E7:FE:11:EC:CA:EE:C2:16:27:DA:61:BE
Authority key identifier: 74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
Certificate issuer: /CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Certificate serial: 019D2816F75FB2254037C2E070E98293D115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 03:01:26 +0000
Manifest this update: Thu 26 Mar 2026 03:01:26 +0000
Manifest next update: Fri 27 Mar 2026 03:01:26 +0000
Files and hashes: 1: 4zHqkXwTdPpErUuwool8-zX-SB4.roa (hash: LHnM5v5Sz1IzlHeFp2joapwPeszU3VAj2kHXfdYdwu4=)
2: dPEFnCc8UO3PPc7fxYABUuyR26I.crl (hash: 7XtScEmRy5a59xHa0Md9ft4VsMSG1qrLouhkcWovmnE=)
3: f_myMJMSIIWO9m-PmHiygg0XXSs.roa (hash: 3LE3GccOE6KqVlj9DZ+EFPId6e66LFjW7NsGN3ZdmPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:f7:5f:b2:25:40:37:c2:e0:70:e9:82:93:d1:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Validity
Not Before: Mar 26 03:01:26 2026 GMT
Not After : Mar 27 03:01:26 2026 GMT
Subject: CN=7f31f50dd748d999e7fe11eccaeec21627da61be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b1:be:ed:90:96:16:bb:ae:30:e5:35:34:65:
0c:e0:c8:83:0e:2c:2c:89:be:53:0b:fd:72:d8:ff:
af:b3:6a:da:25:5a:df:c6:08:7a:5c:80:ff:c4:24:
4e:df:74:5f:dd:6c:15:09:12:09:12:9f:32:e3:eb:
a2:b3:30:4b:87:31:50:9a:46:1f:ad:d0:a8:d5:f8:
16:d4:95:48:a0:0d:6d:20:db:f0:da:e0:60:4d:5a:
54:e4:c3:ab:8c:68:49:af:9a:c4:c1:50:86:53:9a:
38:dd:aa:11:07:71:83:a7:66:93:2c:3c:33:16:f5:
bf:79:16:b8:cc:4f:f9:ec:2e:7f:58:31:ec:cc:95:
f6:63:9f:81:1b:30:70:95:82:68:8a:60:01:68:79:
83:5b:e1:0e:1d:ed:5c:20:45:bf:3f:6f:3b:2b:ca:
86:4a:68:da:fd:57:e8:cc:ef:ca:0b:25:de:a7:44:
fa:a7:8c:0c:a2:99:c2:7f:cf:0e:0f:c2:5e:2d:f2:
e4:5c:56:7a:69:1c:b6:84:b5:99:25:66:49:94:bd:
8d:d5:cf:4f:8e:39:29:e2:4c:10:67:19:72:f5:28:
87:1e:07:f2:3c:31:3f:81:09:f7:17:2d:53:03:90:
4a:42:9a:9a:71:c2:3f:f1:d0:d6:f7:14:fa:fd:56:
31:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:31:F5:0D:D7:48:D9:99:E7:FE:11:EC:CA:EE:C2:16:27:DA:61:BE
X509v3 Authority Key Identifier:
keyid:74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:6d:e4:e1:63:18:b8:fd:3e:0a:fb:2a:af:7c:06:c0:23:b9:
c6:ee:2f:51:7c:91:65:a1:10:0f:33:de:be:c1:b9:fc:c5:93:
9f:5d:e8:21:80:26:1e:a8:33:8a:75:01:6b:40:2e:37:17:0f:
a5:c3:b7:21:22:44:7c:2d:a3:f4:d9:1a:8f:a9:43:ce:c2:2d:
08:af:fc:32:0d:83:97:a1:59:6f:78:05:26:b2:74:98:9c:8f:
87:02:2e:61:6c:b2:48:f2:f4:f3:3a:3e:14:82:ec:37:d9:0b:
f3:24:00:c4:65:08:35:4e:c6:ed:6f:8c:bc:ca:eb:7e:f1:07:
80:61:e2:eb:b4:2b:32:2d:6f:26:ff:d3:d0:3f:a1:6c:c2:d5:
a5:3f:ce:ff:1f:4e:08:5d:b4:b2:18:ad:0c:85:7c:c0:dc:f7:
65:c6:e8:8c:11:0c:a2:a1:d9:55:dd:0e:3e:ff:ab:72:cc:2c:
3b:c3:71:e9:9c:ee:f8:de:1c:9e:22:d4:30:6b:ca:57:de:7b:
11:b6:8d:92:d2:a9:4a:a8:19:2b:0d:89:83:9b:0d:26:62:9e:
6e:2e:94:ce:a5:91:3f:cf:de:ca:24:a5:d2:20:b3:02:76:7e:
65:fb:72:71:1e:69:01:b5:af:ab:45:fa:1e:31:ca:72:72:a5:
84:10:22:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:30 2026 by rpki-client