Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
File: dNYxjajSNXnE9zi26OVcxf8n5bE.mft (raw, json)
Hash identifier: FzECfD9Z2qh7ybhnmkvv8Mt7vFFLrzt2jgjgHNXCK6o=
Subject key identifier: E5:7D:65:85:00:2C:54:AC:02:57:86:8B:E7:4C:07:2A:15:A3:04:67
Authority key identifier: 74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1
Certificate issuer: /CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1
Certificate serial: 019CAEDA06B9C6306F2EE47CBEDECBE9E556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
Manifest number: 0E49
Signing time: Mon 02 Mar 2026 14:00:49 +0000
Manifest this update: Mon 02 Mar 2026 14:00:49 +0000
Manifest next update: Tue 03 Mar 2026 14:00:49 +0000
Files and hashes: 1: dNYxjajSNXnE9zi26OVcxf8n5bE.crl (hash: jGQ2pIeQ7g2XbYKfOpWrrsrJTdASXDTXJORUcbQZwdg=)
2: yrIjpEKkjVBO_-j8mIxwX1lzZOY.roa (hash: FAr4hIEw59FiwSEosrYa4XkBS1NGFvpwv+TK+Np3XXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:06:b9:c6:30:6f:2e:e4:7c:be:de:cb:e9:e5:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1
Validity
Not Before: Mar 2 14:00:49 2026 GMT
Not After : Mar 3 14:00:49 2026 GMT
Subject: CN=e57d6585002c54ac0257868be74c072a15a30467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:59:dd:12:2f:9a:50:4f:ff:14:4f:13:1d:34:
8f:80:c4:a7:fc:44:69:ca:83:4e:c6:5c:d0:ce:97:
7c:1e:a5:d3:90:28:d3:82:29:fd:de:14:46:1e:37:
e4:f1:da:21:ed:24:78:c0:d5:e6:1d:7f:56:fc:2f:
ec:47:3a:7d:a8:de:03:25:b3:46:a0:6d:d7:91:52:
5f:ed:3a:b3:7d:3d:8a:a5:99:35:5d:2e:26:93:5b:
c3:b0:b5:0c:10:fd:ba:ae:df:b6:91:c5:23:05:3b:
fa:83:c3:18:d4:80:c2:6c:ec:6a:ef:67:10:08:19:
23:87:67:c5:7d:29:80:5a:09:12:62:13:7a:d5:cc:
59:40:22:49:91:de:b9:53:1b:a9:a5:d4:33:db:2b:
76:e9:90:89:2d:93:df:a1:0f:ca:39:4a:35:5e:6e:
43:90:1d:d4:3a:0d:e6:e3:2f:e6:54:02:42:87:06:
2d:35:5b:01:59:9b:b3:92:82:72:89:1e:d2:3b:c3:
f5:bf:fc:92:a5:4b:94:a4:70:c0:fa:5f:69:99:1d:
09:8a:e0:97:b1:71:f3:54:33:50:05:cf:fc:cc:48:
dd:64:80:e5:9d:ad:3a:8c:7f:c7:85:b8:28:71:7c:
c5:7f:49:63:18:ec:5d:36:4a:e2:ce:91:f9:9b:02:
09:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7D:65:85:00:2C:54:AC:02:57:86:8B:E7:4C:07:2A:15:A3:04:67
X509v3 Authority Key Identifier:
keyid:74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:de:9e:e2:7f:24:8b:a2:5a:88:be:ab:57:71:ec:3f:d1:d2:
65:2f:7c:b1:c8:65:ed:d8:e9:7a:e6:06:4a:f9:ff:b2:d0:39:
75:58:24:34:da:c2:e2:5f:23:12:f6:d6:43:0d:3e:5a:5e:d7:
a5:c1:00:37:a4:68:d9:b9:68:5c:b6:22:9c:8e:af:dd:95:08:
0c:fe:2c:8c:6f:c4:f8:ea:14:81:a6:3b:5d:59:ad:a7:8a:33:
a8:6e:b6:0a:89:2e:ae:ed:24:b9:a8:2d:9d:ae:bd:8a:2a:be:
5c:db:72:54:0c:42:02:5e:5a:e5:c5:de:e3:7c:4d:e9:e8:8b:
6c:94:dd:8e:ca:51:80:66:de:0f:39:48:6e:5c:bf:65:8e:3f:
34:bc:62:a9:be:0f:2c:94:46:ca:5c:50:c3:ff:be:f6:45:73:
79:f5:7c:8c:62:f6:2b:57:3b:45:84:68:13:78:ce:02:43:3f:
f3:c3:2e:18:bb:7f:cc:e6:97:7e:6b:77:2e:17:f3:87:72:c8:
6e:6f:47:27:2f:3a:dc:46:b8:d5:6d:6f:c1:28:ae:b1:fc:82:
d0:31:4d:42:c5:08:66:29:a3:cd:6a:59:8f:8e:87:7c:d1:17:
27:01:8e:e6:c5:b9:7a:2e:dc:05:b5:6f:98:f5:76:ae:5b:e4:
96:11:9f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:20:47 2026 by rpki-client