Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
File: dNnAc7T3BpfiF1walV9sqMOmJGs.mft (raw, json)
Hash identifier: uqye7QrUASBUhv4WQyhdL5RRS+c9ENgwtdqLAz1MSZ0=
Subject key identifier: 24:D0:67:A0:C4:39:88:73:CD:B5:97:65:FC:53:D6:17:71:23:C9:7C
Authority key identifier: 74:D9:C0:73:B4:F7:06:97:E2:17:5C:1A:95:5F:6C:A8:C3:A6:24:6B
Certificate issuer: /CN=74d9c073b4f70697e2175c1a955f6ca8c3a6246b
Certificate serial: 019DA2D34A0EC796CEAA60E14BF8D579ABEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
Manifest number: 1232
Signing time: Sat 18 Apr 2026 23:00:49 +0000
Manifest this update: Sat 18 Apr 2026 23:00:49 +0000
Manifest next update: Sun 19 Apr 2026 23:00:49 +0000
Files and hashes: 1: WXwPoRCbPqeE9PVP8z3V258rpMo.roa (hash: plbJpqwh1XwCDwZThguZTHp1pk+o9N71tabRf4ITG0w=)
2: dNnAc7T3BpfiF1walV9sqMOmJGs.crl (hash: n6tMjImyDeXLATO3bxqN7ST/FbLV89tNjA8HmLqlK9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:d3:4a:0e:c7:96:ce:aa:60:e1:4b:f8:d5:79:ab:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d9c073b4f70697e2175c1a955f6ca8c3a6246b
Validity
Not Before: Apr 18 23:00:49 2026 GMT
Not After : Apr 19 23:00:49 2026 GMT
Subject: CN=24d067a0c4398873cdb59765fc53d6177123c97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:52:87:18:09:56:f5:d6:d4:cc:da:af:96:2d:
26:f6:cb:8c:71:da:a7:24:5b:18:a1:0c:cb:f8:e4:
28:de:c3:8d:32:7e:3a:d3:f7:a3:5c:6b:8f:95:a6:
9e:e7:15:73:a4:fc:60:68:43:2b:9f:1f:3b:bf:77:
17:4a:52:aa:70:1e:02:89:10:0d:75:3b:92:8d:54:
d6:c8:24:72:2f:72:9e:6e:f8:ae:61:72:dc:4b:64:
f6:69:2d:98:fc:9b:89:8f:40:90:76:e8:e2:09:15:
3a:2d:6d:c4:25:5d:eb:23:10:12:ee:7d:10:4a:95:
3c:7d:56:5f:d6:51:5d:ee:8e:bd:7e:30:38:fd:17:
61:dc:d7:4b:c3:5c:47:8c:b6:75:b7:5e:92:53:8e:
1a:dd:b9:23:f5:e6:8f:8f:c9:44:e5:6c:59:e6:6e:
7b:1c:c7:d1:c6:10:da:d5:fd:e1:e5:38:14:aa:58:
c4:5e:fa:80:c2:82:a8:d5:cd:1b:9d:94:68:b4:1a:
17:93:bd:62:1a:47:d2:25:6b:63:a9:d2:52:4f:a8:
9f:a9:9f:30:40:dc:b6:08:c5:37:10:c4:9f:92:e2:
5a:fd:6b:f8:85:91:26:8d:e7:f4:d8:6f:76:70:37:
61:9b:b9:aa:0b:e1:20:73:e7:a1:f9:c7:d8:a8:3c:
dd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D0:67:A0:C4:39:88:73:CD:B5:97:65:FC:53:D6:17:71:23:C9:7C
X509v3 Authority Key Identifier:
keyid:74:D9:C0:73:B4:F7:06:97:E2:17:5C:1A:95:5F:6C:A8:C3:A6:24:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ea:1c:b5:68:e6:a9:04:15:99:90:f9:46:fb:3f:4a:f1:1a:
2e:23:70:c5:04:aa:23:e6:97:4b:b0:00:e8:fd:2b:3c:cb:70:
4c:b2:6b:01:17:df:49:c4:de:9d:e6:ee:5a:90:d5:f9:ea:08:
9f:32:7a:9b:61:1f:14:07:5b:ba:31:38:cd:87:3a:0d:6d:9d:
a8:70:33:86:49:42:34:e3:10:2d:ed:8c:0b:1c:e2:fb:62:a0:
9f:8d:e1:d1:0c:2c:ec:e9:a4:e9:02:b8:a2:16:69:1d:3a:47:
89:dc:2d:75:c1:02:83:86:09:ac:2b:dd:84:73:fb:8c:30:30:
cb:2e:b1:c9:7c:3a:ae:c9:2c:21:a5:90:6b:6d:be:8c:2a:72:
ff:e0:24:90:57:4a:18:d3:26:9b:2c:af:e2:a3:84:5b:83:3f:
35:4f:93:1c:4c:c0:1f:c8:68:88:09:d5:ad:31:9f:87:d5:ad:
37:da:b6:e2:57:70:a6:03:0f:b0:e2:a8:c5:fa:4b:cb:37:d0:
88:65:e9:96:16:45:70:fd:91:0a:bf:11:4c:79:d8:91:2b:98:
18:3c:da:77:d0:f4:b4:fc:db:6d:ad:8c:a9:0c:e2:3f:d7:cc:
3c:34:b5:71:51:6f:c4:03:f5:c0:e8:42:89:73:e4:32:0d:e9:
c8:ea:fa:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:22:49 2026 by rpki-client