Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
File: dNAyUoux0Vl2bNed5HhtzZYqH7s.mft (raw, json)
Hash identifier: yv8pHDIDU+Nu6ItFRoi1QNK0lsiczRc9ddoIhEgeWxc=
Subject key identifier: 6C:FD:12:38:0E:B7:D5:FD:0D:C1:CE:04:6A:D0:D3:15:16:5E:6F:F3
Authority key identifier: 74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB
Certificate issuer: /CN=74d032528bb1d159766cd79de4786dcd962a1fbb
Certificate serial: 01A12CFC05D75C21EE41A17A565A78B73720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
Manifest number: 185D
Signing time: Sun 11 Oct 2026 22:01:16 +0000
Manifest this update: Sun 11 Oct 2026 22:01:16 +0000
Manifest next update: Mon 12 Oct 2026 22:01:16 +0000
Files and hashes: 1: _rWJNNnmk3R1x9pU0oYdGau3c7M.roa (hash: IHOPlEpatbDJApch2mWBilUmuofV8Wjb6ufkWpEothw=)
2: dNAyUoux0Vl2bNed5HhtzZYqH7s.crl (hash: yBxThaaFe/DMx/D8SIUBiOEaaVKbe78fHZFFWAFF+mI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:fc:05:d7:5c:21:ee:41:a1:7a:56:5a:78:b7:37:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d032528bb1d159766cd79de4786dcd962a1fbb
Validity
Not Before: Oct 11 22:01:16 2026 GMT
Not After : Oct 12 22:01:16 2026 GMT
Subject: CN=6cfd12380eb7d5fd0dc1ce046ad0d315165e6ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9d:9f:c7:0b:a2:47:9e:36:09:0a:7e:55:49:
5d:f8:50:15:a9:1c:5e:5c:af:84:1f:44:0a:b9:b3:
76:8a:13:fd:23:41:f5:86:31:ad:48:0d:6a:d2:7b:
68:c3:db:7f:8f:75:88:74:df:a5:af:42:57:94:98:
fb:f3:c8:01:ba:db:93:a2:e0:86:2e:51:50:a7:fb:
7f:68:39:fa:99:d6:8e:9e:60:35:c4:2a:8d:8e:5a:
fd:93:53:f7:3b:9c:79:b9:33:35:63:62:25:2e:b8:
c3:72:1c:0a:d5:b7:2d:03:59:d6:4c:9d:12:de:85:
9d:7e:79:50:a3:08:aa:0f:7a:34:f3:36:1b:54:08:
d7:32:7b:b4:66:27:3f:8b:f0:ce:09:b0:74:9d:5a:
3e:23:77:1a:48:8f:60:c1:7c:52:4b:3b:cc:9e:52:
b3:a3:55:7d:fe:36:68:77:c9:f3:49:60:1c:d2:4b:
c0:71:5a:63:d5:56:f9:54:8f:32:4e:4f:c7:00:e0:
7e:d3:2e:9a:aa:29:06:ea:30:7a:c4:26:cb:f5:e5:
84:e2:1b:63:d5:f3:92:88:b8:74:c1:c9:e9:3e:af:
c5:56:3d:32:be:b8:f5:cc:cc:91:69:f3:81:90:66:
7a:9a:72:6c:1a:a6:5b:de:d9:bd:0f:7a:b9:2e:6d:
79:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FD:12:38:0E:B7:D5:FD:0D:C1:CE:04:6A:D0:D3:15:16:5E:6F:F3
X509v3 Authority Key Identifier:
keyid:74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:c0:65:d9:6e:c2:b4:f9:d1:8d:ac:9f:bb:26:c5:b1:2d:2f:
fd:f9:bc:8a:00:94:2a:69:2d:ee:a7:54:af:98:b1:69:c0:57:
41:d7:4e:11:9c:83:db:66:5d:08:98:1a:a5:57:b0:82:71:9a:
97:01:39:44:88:bf:aa:07:92:71:5c:de:ef:c5:d1:c0:d3:59:
75:34:36:e0:d2:08:43:95:ab:15:c0:db:cb:77:7b:0d:0b:be:
22:5b:89:7a:b8:ad:99:ba:e7:84:4e:bd:53:f9:bc:33:7d:dd:
99:ee:ab:1e:3b:66:d9:dd:ad:70:7b:e3:d0:66:03:11:4c:27:
90:e8:09:c5:7c:eb:d6:9d:95:a8:cd:1d:25:0e:17:88:90:9a:
2d:0a:c5:7d:d3:0d:7d:3a:18:30:d8:37:90:18:b1:25:9a:d4:
90:bd:ba:40:48:a5:dc:5b:cf:4f:17:99:ff:62:e3:9e:73:2c:
c7:3c:11:1c:0d:d8:85:bb:f3:52:ec:84:6e:eb:16:04:58:5e:
40:f4:8e:54:c2:e6:c7:12:23:b0:eb:f3:2e:22:7e:ae:0a:3b:
aa:fb:14:ce:c9:f2:9f:f1:43:c7:61:fb:d6:f2:65:f4:f0:de:
b6:d0:e9:17:33:26:66:6f:b9:19:4f:e7:92:3e:2c:a0:9f:0f:
54:09:cf:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 01:23:15 2026 by rpki-client