Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
File: dNYxjajSNXnE9zi26OVcxf8n5bE.mft (raw, json)
Hash identifier: lD39VcuI+DPpbPtYiuNDqb38/OXcKl0/fat94Qk2F+4=
Subject key identifier: 0A:AF:49:89:20:30:90:54:D8:C5:1A:28:FC:14:F0:1B:A5:93:80:B8
Authority key identifier: 74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1
Certificate issuer: /CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1
Certificate serial: 019D9A74CCB1C66AC5332A93AC0F1F7F739E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
Manifest number: 0EC3
Signing time: Fri 17 Apr 2026 08:00:38 +0000
Manifest this update: Fri 17 Apr 2026 08:00:38 +0000
Manifest next update: Sat 18 Apr 2026 08:00:38 +0000
Files and hashes: 1: dNYxjajSNXnE9zi26OVcxf8n5bE.crl (hash: Ek0PKTHY0Uvm3dCwIkFJl5DCjb47i6QSTRgmcIL/g24=)
2: yrIjpEKkjVBO_-j8mIxwX1lzZOY.roa (hash: FAr4hIEw59FiwSEosrYa4XkBS1NGFvpwv+TK+Np3XXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:cc:b1:c6:6a:c5:33:2a:93:ac:0f:1f:7f:73:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1
Validity
Not Before: Apr 17 08:00:38 2026 GMT
Not After : Apr 18 08:00:38 2026 GMT
Subject: CN=0aaf498920309054d8c51a28fc14f01ba59380b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:28:5b:6a:37:45:0c:09:b5:c7:f2:88:43:c7:
ab:6a:34:6d:e5:9d:7c:4f:a0:c8:5d:23:34:d9:d5:
85:92:da:b7:2e:85:1e:43:76:1b:34:90:2a:ec:43:
e8:a3:9a:76:b2:2e:5d:8a:c6:78:e2:b0:99:45:1b:
d4:26:08:72:c0:c4:60:d5:dd:74:fe:97:f1:98:2e:
13:7a:5b:99:5a:6c:8c:88:a2:ee:fa:f6:69:43:09:
6b:57:7d:c1:c9:c8:31:63:77:a5:ab:4c:6f:63:7b:
ae:43:e0:89:fd:27:76:da:6a:29:7e:2c:3b:e6:a4:
f7:cd:18:e5:4e:e6:16:0d:3c:1e:c2:02:f0:aa:46:
dd:17:69:d6:ac:53:7e:ed:f3:3c:ae:d5:ba:f4:a2:
50:ed:a1:42:c5:24:85:4f:da:e3:61:64:01:a9:a4:
53:d3:6f:c7:4f:2b:c5:b2:11:8e:8b:74:da:b5:e6:
96:de:33:5b:df:d1:1d:dc:d2:c4:39:b8:69:44:6c:
b6:d9:9c:0f:ab:5b:49:44:f7:f2:6b:2e:08:f8:a1:
65:4a:63:71:59:6b:de:8c:8f:ee:b9:fd:44:da:98:
72:23:a0:54:c0:57:ae:e4:66:42:4b:0e:17:77:27:
b5:da:cf:59:58:e0:34:28:87:54:0a:96:24:f7:19:
06:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:AF:49:89:20:30:90:54:D8:C5:1A:28:FC:14:F0:1B:A5:93:80:B8
X509v3 Authority Key Identifier:
keyid:74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:9e:9a:67:7d:32:9c:d5:3f:41:bf:70:01:66:77:38:ea:69:
9f:1d:fa:63:bb:a0:da:ec:fa:9e:50:9d:0e:86:a7:9d:41:16:
55:83:fb:c3:00:62:1d:26:b1:24:72:31:b3:3e:8b:cb:6f:14:
ba:08:63:c9:a0:4f:cd:53:cd:f6:8e:08:06:48:7f:98:fe:74:
04:a6:c8:13:5a:14:d5:05:85:0a:70:d3:f9:12:29:1e:d8:b0:
d7:82:d0:a5:0d:49:96:82:75:5e:ca:70:69:74:16:8a:79:c9:
6a:65:83:4c:50:64:3e:ea:b6:b6:0c:4f:30:d7:5a:3a:8b:51:
01:f5:b6:3f:cc:a3:b3:eb:c5:79:ef:aa:5d:89:14:0f:d4:d1:
b7:12:fa:e9:37:79:a2:15:2a:12:78:8d:ca:3f:c6:ab:0a:aa:
5a:82:41:31:7d:08:2f:84:cb:0c:07:dc:79:56:97:c1:37:f6:
b5:32:9a:99:db:0f:67:6e:b5:bc:12:12:91:36:9d:d0:2f:43:
1d:b6:10:fa:38:79:04:24:79:23:b0:1e:71:00:c5:51:18:f7:
10:81:c1:d8:af:e9:b8:84:62:64:7c:f6:29:f5:3c:bd:ad:f8:
a5:2e:5b:e9:f5:60:8a:62:83:fd:ec:48:d2:62:4a:6f:74:ec:
b8:b6:33:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:24:01 2026 by rpki-client