Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
File: dNAyUoux0Vl2bNed5HhtzZYqH7s.mft (raw, json)
Hash identifier: GMXXi/D4ke64iH3D9CxpVIyKeHG3iOR3XtxOdfJRnUw=
Subject key identifier: 29:B7:8F:C5:E6:B3:14:7D:B0:97:13:31:C7:2E:C8:D0:52:86:99:51
Authority key identifier: 74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB
Certificate issuer: /CN=74d032528bb1d159766cd79de4786dcd962a1fbb
Certificate serial: 019D9A74B573E52929B3C60F7BA63853D894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
Manifest number: 1683
Signing time: Fri 17 Apr 2026 08:00:32 +0000
Manifest this update: Fri 17 Apr 2026 08:00:32 +0000
Manifest next update: Sat 18 Apr 2026 08:00:32 +0000
Files and hashes: 1: UWc6YQjM9t1ffmI-LVxAUT_OwbI.roa (hash: 6Dahf9gKo3spL66J3FQf4jt5WqJRr1c/pSpOxLB19HE=)
2: _rWJNNnmk3R1x9pU0oYdGau3c7M.roa (hash: IHOPlEpatbDJApch2mWBilUmuofV8Wjb6ufkWpEothw=)
3: dNAyUoux0Vl2bNed5HhtzZYqH7s.crl (hash: aOh2+xhMXYIKxI5RQ+ElSE3Bm9DNrtFBRqcl/LfGews=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:b5:73:e5:29:29:b3:c6:0f:7b:a6:38:53:d8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d032528bb1d159766cd79de4786dcd962a1fbb
Validity
Not Before: Apr 17 08:00:32 2026 GMT
Not After : Apr 18 08:00:32 2026 GMT
Subject: CN=29b78fc5e6b3147db0971331c72ec8d052869951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1a:aa:b7:80:84:84:30:cf:fe:0c:b2:1f:4b:
a1:4f:51:04:2f:ab:44:e5:90:bf:da:db:91:e8:88:
42:be:0b:59:a3:f0:dc:d7:39:45:d3:6d:54:17:31:
6e:41:ed:b2:77:92:e3:08:dd:cc:70:5c:17:60:57:
43:a2:6a:60:1a:a7:49:c6:54:7c:ee:81:be:be:45:
80:ed:3e:25:25:41:a1:f3:d5:47:7c:a5:86:97:17:
a5:6f:9c:bc:59:82:b9:e1:45:12:b6:ce:a8:13:42:
11:28:29:bb:c6:6e:22:c6:03:3a:b3:76:cf:90:9d:
d5:8b:4f:de:ed:44:a3:fe:ab:a0:ba:f7:4b:cd:f6:
e1:98:40:a2:ea:ce:49:2f:49:0e:88:60:07:4b:8e:
08:c1:fe:95:21:02:76:73:fe:a1:a5:4a:8c:51:3e:
32:e7:1c:84:22:7b:87:17:63:c4:76:79:65:7f:7b:
52:89:0b:be:20:2f:2b:54:c0:97:aa:c9:38:97:d8:
57:51:af:d4:98:df:40:d8:68:49:96:6b:d2:63:33:
33:10:ea:6e:e5:31:b2:64:cd:e3:23:94:cb:05:f0:
53:f8:b1:a0:81:4f:ea:00:a8:78:c4:d0:64:8d:ee:
d2:8a:65:76:2d:ad:f5:9f:eb:b1:f6:39:a7:74:26:
33:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B7:8F:C5:E6:B3:14:7D:B0:97:13:31:C7:2E:C8:D0:52:86:99:51
X509v3 Authority Key Identifier:
keyid:74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ec:2c:30:46:d0:8d:75:9c:65:ea:a9:85:b3:8e:f3:be:61:f5:
a0:76:a7:c1:70:97:60:43:0a:8e:24:e8:2d:e4:c9:9b:9c:3c:
0f:2d:f1:76:98:ec:d7:24:a5:fa:0f:be:df:69:7a:6b:58:da:
db:09:c5:55:27:4f:ad:06:c4:62:7b:99:90:ed:83:1d:7e:3a:
c4:2e:01:1a:01:f9:1b:1a:89:9d:4c:b9:15:ac:e0:1d:50:56:
ea:87:5c:16:a8:58:44:52:a1:df:52:7e:13:a0:bc:c0:92:6d:
3e:e6:a9:d7:b0:28:28:3c:cf:7a:86:cb:1c:47:04:d4:28:e2:
82:90:4a:db:17:b7:ea:0d:5a:0f:d5:8c:fa:b2:a6:87:13:2c:
aa:1e:45:ad:20:98:d0:d9:21:71:1c:4a:8f:c9:0e:a1:fa:be:
eb:85:d6:87:6d:5c:fb:25:ff:b8:f6:ac:77:b9:26:01:51:d6:
43:49:83:22:d2:5c:70:cd:8d:2b:69:02:58:71:ec:01:85:7a:
32:37:42:ab:18:e4:0c:ff:ac:f7:6b:73:c2:e5:f9:86:31:eb:
ff:03:54:f5:41:58:59:a7:b2:fd:5e:72:aa:3c:a4:40:d6:d6:
dc:7e:b6:a9:e3:ac:16:ba:e1:58:f3:b8:1d:dc:0e:15:86:6d:
4d:ee:23:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:33:39 2026 by rpki-client