Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
File: dNAyUoux0Vl2bNed5HhtzZYqH7s.mft (raw, json)
Hash identifier: vAxLiT26+cMcOr/IWg2yS5jflo5ieggZUs/MP1kKKAg=
Subject key identifier: 3D:AE:BA:A0:28:E1:D0:57:B5:DE:FE:A1:5D:84:33:BB:7E:63:55:6E
Authority key identifier: 74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB
Certificate issuer: /CN=74d032528bb1d159766cd79de4786dcd962a1fbb
Certificate serial: 019CAAFD026730360FDA0D602B3FC37AC2A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
Manifest number: 1607
Signing time: Sun 01 Mar 2026 20:00:33 +0000
Manifest this update: Sun 01 Mar 2026 20:00:33 +0000
Manifest next update: Mon 02 Mar 2026 20:00:33 +0000
Files and hashes: 1: UWc6YQjM9t1ffmI-LVxAUT_OwbI.roa (hash: 6Dahf9gKo3spL66J3FQf4jt5WqJRr1c/pSpOxLB19HE=)
2: _rWJNNnmk3R1x9pU0oYdGau3c7M.roa (hash: IHOPlEpatbDJApch2mWBilUmuofV8Wjb6ufkWpEothw=)
3: dNAyUoux0Vl2bNed5HhtzZYqH7s.crl (hash: W/4Wog9RG9O1zQQmwv0583N8bueVrWlP2Hrfoo0V0uo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:02:67:30:36:0f:da:0d:60:2b:3f:c3:7a:c2:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d032528bb1d159766cd79de4786dcd962a1fbb
Validity
Not Before: Mar 1 20:00:33 2026 GMT
Not After : Mar 2 20:00:33 2026 GMT
Subject: CN=3daebaa028e1d057b5defea15d8433bb7e63556e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:78:24:5e:e7:dd:06:09:f7:17:a2:6e:f0:30:
a5:a3:62:c5:d0:ce:f6:cc:72:63:6d:22:0e:0d:03:
ba:fc:22:71:74:f9:11:e3:cb:d9:74:37:96:13:9c:
b9:b4:ad:6d:b7:cb:f2:ed:f3:8d:b2:10:48:a4:f2:
56:97:8e:c8:b9:06:8b:bd:ae:54:2c:a3:62:da:9e:
a3:da:9e:74:a8:05:53:ec:9c:0e:5f:3e:9b:d3:ed:
5b:b8:b4:a5:9b:38:50:b7:f8:ed:63:c9:f6:01:31:
77:31:6d:e1:56:cd:e2:e6:fd:71:d7:6f:98:39:22:
56:d5:55:08:a3:90:e1:4c:0e:09:4b:7f:b4:67:26:
42:87:3b:ac:21:08:ac:41:fc:78:c2:d5:18:0f:8d:
14:62:b6:14:ab:6c:9b:aa:c6:70:32:0b:77:29:45:
fc:49:95:11:25:6b:62:cf:de:34:3f:3f:c5:53:72:
a9:3d:7a:8c:00:6c:7f:df:3c:90:3c:bf:b6:4a:0e:
f6:70:bb:45:0c:d6:50:1d:db:55:86:8d:3b:e0:6c:
70:5f:d5:a2:6d:77:e4:08:db:0b:8d:36:0a:3d:c8:
28:81:1b:59:f3:fa:9f:6c:06:68:9b:0e:ff:bd:ff:
93:f8:b7:b6:b9:45:21:03:1e:56:a7:0a:c8:9c:34:
cf:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:AE:BA:A0:28:E1:D0:57:B5:DE:FE:A1:5D:84:33:BB:7E:63:55:6E
X509v3 Authority Key Identifier:
keyid:74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:3b:5a:55:33:25:c6:cc:fe:af:b0:39:54:cd:3b:9f:52:9a:
cd:40:cd:be:16:9d:f3:74:01:61:83:9a:9a:58:12:24:95:6e:
41:15:77:8f:be:5c:cd:52:68:59:ca:0f:67:26:04:b7:2a:46:
c3:e6:9f:52:30:ad:2f:c6:23:d6:d1:39:67:48:fa:d2:e8:b8:
7f:d7:65:23:8b:7f:e6:bf:e3:8d:93:55:4c:08:c9:22:09:a8:
39:02:25:f0:3a:38:7f:87:d0:b4:b0:ba:f6:48:9b:35:13:c7:
37:ae:00:00:14:d7:2c:84:90:8d:0a:3f:05:6c:e7:34:b1:49:
10:a7:06:4d:5e:59:ec:c3:a0:90:7b:e0:2e:18:88:6c:22:5f:
30:ec:dc:81:c9:84:f4:ad:c0:49:12:8d:42:c3:e3:31:7d:62:
7d:0f:73:91:40:e4:d0:0a:25:c2:77:bb:af:cc:3b:6a:4a:b4:
b6:a6:b7:41:31:b4:c0:e2:67:2f:55:01:ac:7e:e6:e2:8c:25:
82:85:99:4b:db:ee:e6:3b:ca:4c:c2:54:4c:69:f0:64:1e:08:
de:cf:e2:40:6c:45:da:9d:2c:fa:db:22:f4:f3:47:18:57:5e:
bd:2d:a5:11:2b:2b:18:83:9a:d3:60:72:ac:94:fa:81:8d:72:
b3:fa:95:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:44:55 2026 by rpki-client