Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
File: _74lZWXhwnxLJlYBkOmXgoaoK1I.mft (raw, json)
Hash identifier: c7N7VfGxvb2y1uYVfNzFKBJ4sBZUgaNdcLJa0BYjt/s=
Subject key identifier: 5C:D2:D2:5C:89:EA:74:AB:37:45:F6:0E:D2:27:5E:27:9F:5B:78:17
Authority key identifier: FF:BE:25:65:65:E1:C2:7C:4B:26:56:01:90:E9:97:82:86:A8:2B:52
Certificate issuer: /CN=ffbe256565e1c27c4b26560190e9978286a82b52
Certificate serial: 019ED57535CBD682982B5BE686F17B24191B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
Manifest number: 1966
Signing time: Wed 17 Jun 2026 12:01:28 +0000
Manifest this update: Wed 17 Jun 2026 12:01:28 +0000
Manifest next update: Thu 18 Jun 2026 12:01:28 +0000
Files and hashes: 1: GvNFYyBUTZVKqfxGJ29AQ8ybUOI.roa (hash: uZnUMOZEaipYyz6w+Q0CeYwOVjF6E1oqOIzqR9nYZ4k=)
2: _74lZWXhwnxLJlYBkOmXgoaoK1I.crl (hash: ZNpEcrNLFu07P+tQ2qFZ99WC9XgPVOar1MojQK3GjY8=)
3: nFyJiI2QEmXq35fuiG_EUZU-0Tw.roa (hash: cLxbEZlxAIqYS86le/aYrGcroGy0E1YAeKBMSi+G8Y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:75:35:cb:d6:82:98:2b:5b:e6:86:f1:7b:24:19:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbe256565e1c27c4b26560190e9978286a82b52
Validity
Not Before: Jun 17 12:01:28 2026 GMT
Not After : Jun 18 12:01:28 2026 GMT
Subject: CN=5cd2d25c89ea74ab3745f60ed2275e279f5b7817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ed:93:ef:6b:35:a5:89:1c:0c:54:d4:a3:69:
00:f2:f5:78:e3:1b:03:4c:80:a2:ce:ca:e7:dd:5c:
06:9b:b6:9f:72:bb:6f:ab:2b:ae:28:94:56:56:84:
6d:71:23:6a:92:b1:3a:c1:32:2c:51:f0:32:79:1f:
21:1b:ad:94:54:e3:3e:9c:ff:49:1e:50:df:d0:5e:
ad:8d:7d:c5:fe:07:43:e1:49:e5:ab:db:7e:04:f9:
6f:08:96:1d:61:a8:65:b6:3c:3e:d6:ec:42:34:69:
f5:36:9f:9d:c5:a4:ba:2e:0c:58:51:77:24:60:55:
2d:77:6f:1f:a4:02:60:36:a4:ec:51:c9:ca:ba:03:
8a:f8:3b:2f:89:e3:ff:2c:86:01:33:84:8b:14:1f:
6f:00:fc:99:28:9d:03:40:8a:4f:8f:37:a7:0c:ab:
e3:88:c6:e3:44:b5:7c:72:7a:9c:db:4f:ff:20:e8:
68:18:60:bb:d1:a9:df:ed:cc:32:88:86:f2:06:2c:
5f:e3:8c:21:1a:48:62:c7:5d:52:bb:80:5e:89:4e:
22:b3:1d:05:04:ea:9f:5c:26:be:2d:34:ed:16:8b:
9d:c5:52:bf:6e:20:95:f4:a2:7e:30:4a:87:3c:e3:
ec:50:46:e0:3b:e4:c9:ef:7a:f1:98:3e:02:27:c5:
0c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D2:D2:5C:89:EA:74:AB:37:45:F6:0E:D2:27:5E:27:9F:5B:78:17
X509v3 Authority Key Identifier:
keyid:FF:BE:25:65:65:E1:C2:7C:4B:26:56:01:90:E9:97:82:86:A8:2B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:59:1d:6f:9f:e2:7d:30:e3:f1:bb:71:7e:e1:4c:e2:05:ad:
04:4b:38:65:de:19:3e:3c:f7:dd:00:4b:4c:8d:28:e2:3e:ec:
0b:0f:90:fc:ef:11:50:6b:3b:08:5f:4a:c4:b2:0c:f0:f7:68:
73:5a:b8:94:45:8a:e1:ca:54:e3:27:09:2a:0b:70:87:99:f4:
b2:78:2e:f7:bf:b5:27:39:cd:47:26:54:6e:32:e9:58:28:84:
a1:9b:31:02:c1:cf:dc:fc:af:6d:b8:77:ca:50:be:5b:c9:67:
1a:92:c1:c5:08:73:89:5c:cb:84:a1:39:9d:af:82:24:d6:5b:
15:e0:8e:08:d4:ba:94:b2:0d:58:c7:85:8d:27:0c:e1:1e:92:
fc:fd:01:40:c4:c2:b1:9e:d1:76:5d:6a:ec:92:80:26:1d:50:
0f:16:e9:48:60:e1:34:ca:b6:73:8b:5c:3a:52:c2:60:3d:c2:
6b:4d:44:ea:c9:17:de:70:c4:f2:34:73:bc:51:5a:12:5e:99:
43:b1:27:58:ee:a0:49:f6:9c:f0:2a:de:24:ae:01:21:62:42:
1f:e7:07:8d:a9:c5:e9:e4:b2:66:86:33:50:97:1a:98:85:1e:
ad:a3:b4:f1:6c:65:35:c7:9f:81:ce:d5:fa:a4:04:94:12:7e:
d9:a2:28:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 14:55:15 2026 by rpki-client