Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
File: dn871L-9MHHDjNTXCSvTSQkgw9k.mft (raw, json)
Hash identifier: krI/wFCVlvWnVGdO9tXv8G5TQMJQyiLKQ0CL9TWiU0s=
Subject key identifier: D9:90:C3:37:BB:F8:A0:00:FF:33:88:6E:51:BD:DA:8E:C1:3C:79:F9
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 019D992B622313E2A35029A46DC742524C44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
Manifest number: 12B1
Signing time: Fri 17 Apr 2026 02:00:50 +0000
Manifest this update: Fri 17 Apr 2026 02:00:50 +0000
Manifest next update: Sat 18 Apr 2026 02:00:50 +0000
Files and hashes: 1: 2_M3hjSd7CTsmWcIflPRCb5WQkA.roa (hash: lb+AroYfcHpsLjtLQUflH3VlWHXn0bD5oDoLv70oXjU=)
2: GApNKBWC5Ue-NAU5Sg1EwP8MY6k.roa (hash: 2tMBvhTBaG9FOblLPHKcO+h2HyVM2AobojKlvW5vzV0=)
3: S_cMNHwGmO53SbTaPSTvEUZSyO4.roa (hash: VJ2mNoR51FwtQFNmuZTNPyshVFI+sQ6fyBXwc1Q4lR4=)
4: TpDZ8IP6rdDoqNG2faUZ93mOnhY.roa (hash: WauO2SokhDFlsHFeFhypHeCTlK3wDUgWAzshLZtKSQg=)
5: dn871L-9MHHDjNTXCSvTSQkgw9k.crl (hash: IR/5Im26lOz4B03H0F9qh9VD8XO1zkoj5n5+0b8gb8Q=)
6: dwc98g5fGUgPAWxFG8AQgkdTGUE.roa (hash: r33CVUyGl3+7P6ErqgK1Pc1v2YLarpkrErbsExQx0So=)
7: ocHcLPqIiXs39TMNmLocr_HH0to.roa (hash: 2m7W1dsOxKOHHVh+M6gzZPsYBZCOmqgU0+hBomALNJM=)
8: yrbB1vsBIjdbUaylEPRfMMB-k3g.roa (hash: uUmid3sXY3uL8GFqpHsIlPFVeU82iqmCl12sBdQU42s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:62:23:13:e2:a3:50:29:a4:6d:c7:42:52:4c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Apr 17 02:00:50 2026 GMT
Not After : Apr 18 02:00:50 2026 GMT
Subject: CN=d990c337bbf8a000ff33886e51bdda8ec13c79f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:18:47:d4:d2:13:e7:6c:73:b8:92:d0:58:2a:
b7:c5:2f:b4:95:d2:f7:88:20:ba:3f:27:67:77:ed:
9f:31:9c:d2:b1:da:02:d2:09:9a:59:e4:d0:f2:6f:
38:11:9e:01:cb:5e:a8:f1:23:cf:62:88:44:ed:69:
d2:88:5a:26:4d:d2:ec:97:43:d4:15:4c:2a:8d:65:
b2:9c:7d:fc:a1:91:69:38:a2:e9:91:c7:6f:b9:85:
b2:02:f8:28:e1:ad:14:a3:7f:16:08:da:93:37:06:
ad:67:af:00:1f:47:df:98:43:f5:58:54:00:90:5f:
48:1d:fd:40:5b:b9:13:61:0f:a2:1d:02:ec:10:f4:
42:42:c2:68:0b:2d:ea:eb:c3:38:80:07:a3:66:43:
d6:3e:bb:f4:a0:1a:e3:d4:55:6f:af:d2:cc:d4:da:
01:40:32:eb:69:fb:ee:ef:bf:73:4c:64:7b:ee:09:
63:93:e4:e7:af:aa:00:f7:9a:06:9c:f4:4b:21:70:
9a:be:24:66:bf:78:d3:05:c8:d7:1e:3f:f2:cc:70:
98:5b:37:21:99:7a:08:b2:a2:d0:0b:0f:c7:b8:da:
41:17:1d:85:05:81:bc:1a:a8:e1:ab:3c:91:ea:8d:
12:0a:39:a6:80:7e:63:e6:91:a1:5d:c1:e6:c0:dd:
be:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:90:C3:37:BB:F8:A0:00:FF:33:88:6E:51:BD:DA:8E:C1:3C:79:F9
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:7e:f8:8c:0b:f1:50:83:58:77:ae:49:3e:24:e1:7d:81:0e:
31:79:1a:53:31:0f:91:6c:df:b9:d5:f0:93:54:60:e2:10:51:
73:5d:41:6a:be:b8:4b:31:da:c5:fc:e7:9c:ac:85:83:e2:92:
62:3f:c1:f0:af:9c:c1:8c:9c:96:24:8d:55:bb:a2:f9:cc:4e:
28:42:b2:e9:e3:60:bf:87:58:4a:ca:04:0e:b1:4e:b3:c3:db:
25:57:16:27:d0:7c:88:d8:64:d4:27:32:89:d5:e2:33:f2:a5:
f4:5a:f1:43:ea:ab:07:68:35:48:f5:41:10:2c:2b:6d:96:98:
ae:51:e5:a9:ef:cf:7a:bc:e3:4b:61:fe:b4:d5:c6:71:9c:ca:
4a:75:a1:9c:27:ef:5d:d3:de:4d:a7:be:c9:68:8b:7b:1c:75:
99:fc:64:03:a3:14:87:42:0f:09:31:94:7b:30:50:53:f5:80:
4b:db:3e:3e:f2:e1:24:b7:45:a9:7a:34:51:c7:76:1c:b9:77:
6d:45:06:a3:f8:1a:a2:f3:b0:c2:c1:92:33:fc:d8:f8:e2:13:
ee:d8:eb:da:3a:70:2b:48:1c:7b:2d:48:9e:ca:5c:a5:99:7e:
bd:52:66:d7:5f:9a:83:45:2f:58:5c:9c:c5:94:ee:a4:d3:9e:
05:37:69:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:36:55 2026 by rpki-client