Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
File: dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft (raw, json)
Hash identifier: 0tGWWc5C1iYllZsCqnqky+Vrq3H4PYDeWQpwUByjtdw=
Subject key identifier: 93:5D:92:5F:E9:C1:5F:8A:B3:5C:5F:7A:DB:F6:F5:A2:99:AE:7A:16
Authority key identifier: 74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9
Certificate issuer: /CN=74d7da63929999603395877448ce50ac6e0213a9
Certificate serial: 019FA975BCB474E2C45F36D1CE03D7065317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
Manifest number: 123A
Signing time: Tue 28 Jul 2026 16:01:33 +0000
Manifest this update: Tue 28 Jul 2026 16:01:33 +0000
Manifest next update: Wed 29 Jul 2026 16:01:33 +0000
Files and hashes: 1: SwOC6LWRUnc-Ogb7u3vxF_0mea4.roa (hash: /q8N1XNG3IXyW6BA6haLHv1Ug3hcBfXRJEVoULv8zlE=)
2: dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl (hash: rXqy5MpepTrnTuDgMJPDI9RkCWwLPeO8iBs5YsyGUio=)
3: iGjEi-RetR317ng4nZLQERiyp5Y.roa (hash: VlJirjJKzaqO+FqHC1L2a0e5Ten97AODI8Xgtdno6FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:bc:b4:74:e2:c4:5f:36:d1:ce:03:d7:06:53:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d7da63929999603395877448ce50ac6e0213a9
Validity
Not Before: Jul 28 16:01:33 2026 GMT
Not After : Jul 29 16:01:33 2026 GMT
Subject: CN=935d925fe9c15f8ab35c5f7adbf6f5a299ae7a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fe:f5:48:41:70:2e:5b:bc:bd:69:8a:8d:e1:
5b:ad:1f:ef:0f:92:51:f8:91:7c:5b:e9:be:e1:df:
ef:9b:92:37:5b:ca:7d:a6:95:dd:26:26:de:22:2b:
e5:a9:af:57:8f:9f:ae:79:b9:44:39:28:7c:8f:ba:
c0:2a:44:24:a2:19:72:f1:62:94:0c:8b:de:98:71:
23:4e:75:fe:8c:30:5a:5d:c4:82:ed:17:f3:0d:f9:
f1:00:b1:a0:1c:ea:26:b1:b6:c0:62:32:83:61:6d:
8a:1a:74:1f:e0:d6:fd:a5:7d:18:3e:37:09:f2:82:
21:cc:a2:73:e1:b1:91:e2:46:cc:74:a4:27:7c:41:
af:32:2d:42:e3:ac:44:67:d3:17:c6:63:3f:63:ef:
79:16:9a:a6:b1:b9:e0:e9:27:47:98:fc:a7:17:69:
db:ab:e5:aa:92:5b:08:38:97:cd:91:70:56:3f:32:
37:93:68:ff:5b:11:f1:3b:48:a4:c5:bd:af:f4:75:
7d:76:11:c3:21:d4:b4:ab:b2:a9:b1:ef:fb:3f:a8:
7c:14:58:26:c6:d5:8a:10:5d:0c:f8:2d:64:72:e7:
3a:bd:3b:73:f7:ed:e5:a9:a1:87:ca:27:56:67:20:
31:28:45:a9:36:15:a1:e1:4b:3e:fd:8b:a9:91:9e:
66:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5D:92:5F:E9:C1:5F:8A:B3:5C:5F:7A:DB:F6:F5:A2:99:AE:7A:16
X509v3 Authority Key Identifier:
keyid:74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:78:9c:b8:1e:20:58:4d:a5:6e:94:c5:ef:29:bc:92:9f:ce:
71:d9:d0:16:a8:7f:06:6a:e4:62:f4:00:84:80:10:c1:7b:8e:
34:f6:ca:0f:7d:82:7b:1b:98:7e:09:b2:9a:23:84:82:54:9f:
f9:31:cd:f9:5d:0c:a8:de:ce:da:08:21:04:76:70:4c:20:20:
dd:9d:08:1f:51:0d:5a:69:ee:93:23:ce:7a:c6:69:8f:e5:81:
3d:49:73:8b:dd:a1:fd:a0:f3:5e:51:ab:10:14:3e:2d:6c:a8:
33:44:c5:dd:f2:5d:48:8d:08:d3:ab:e4:54:20:05:19:35:4d:
59:79:94:2d:77:6e:47:72:68:8d:af:3d:15:cd:ee:b3:75:13:
7e:cc:65:31:10:25:0b:d0:75:f6:f9:e2:4c:91:34:5c:bc:e0:
b3:75:fd:e8:5d:44:5c:11:c1:af:84:04:ec:62:ed:40:c5:4b:
e0:c9:9b:89:32:41:fb:61:d3:9b:0e:a9:0c:5f:e8:ae:b2:22:
fd:04:84:82:e7:36:4a:d0:07:09:5d:10:22:f7:00:f8:b1:40:
c8:f4:34:22:40:19:74:87:d7:b2:de:74:61:dc:19:08:7e:12:
09:3e:b0:91:15:66:7e:65:be:f0:34:e0:e8:2a:f7:0b:e0:5b:
af:35:df:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:44:47 2026 by rpki-client