Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
File: dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft (raw, json)
Hash identifier: 4B9+/iUK+4/chbZ6wqxsrvTftHFOMMIIklCMTfttgZQ=
Subject key identifier: 5E:CB:D4:67:72:E5:FE:D1:18:81:B0:2B:7B:B4:8A:20:9F:67:71:9D
Authority key identifier: 74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9
Certificate issuer: /CN=74d7da63929999603395877448ce50ac6e0213a9
Certificate serial: 01A0C17B1DBA843C6D98399200197B458447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
Manifest number: 12CB
Signing time: Mon 21 Sep 2026 01:01:06 +0000
Manifest this update: Mon 21 Sep 2026 01:01:06 +0000
Manifest next update: Tue 22 Sep 2026 01:01:06 +0000
Files and hashes: 1: SwOC6LWRUnc-Ogb7u3vxF_0mea4.roa (hash: /q8N1XNG3IXyW6BA6haLHv1Ug3hcBfXRJEVoULv8zlE=)
2: dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl (hash: 9l9vWpZHdYnKiH829C3DCynWrhtxp+la6djQ2UG4iII=)
3: iGjEi-RetR317ng4nZLQERiyp5Y.roa (hash: VlJirjJKzaqO+FqHC1L2a0e5Ten97AODI8Xgtdno6FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 01:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:7b:1d:ba:84:3c:6d:98:39:92:00:19:7b:45:84:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d7da63929999603395877448ce50ac6e0213a9
Validity
Not Before: Sep 21 01:01:06 2026 GMT
Not After : Sep 22 01:01:06 2026 GMT
Subject: CN=5ecbd46772e5fed11881b02b7bb48a209f67719d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b5:e4:0c:a4:06:7b:4d:1f:1a:d9:6e:c6:77:
92:9d:77:57:cc:b0:1d:ec:b6:19:c0:b2:77:3d:5d:
25:5e:26:d9:3f:19:a2:65:1d:d2:20:c9:fe:2d:ba:
3c:47:f1:08:56:eb:79:5f:e1:39:c2:09:d9:8e:53:
4c:6b:85:4c:a7:60:9d:00:9a:93:b1:b6:a6:3d:79:
45:a6:92:0f:1f:78:25:8e:fb:98:2b:f2:e0:d6:66:
a1:ef:a3:11:24:85:a6:b1:c5:df:38:41:38:92:64:
3a:f0:05:d8:98:f3:59:b8:8f:7b:80:26:c9:b2:8f:
f9:ce:d9:8e:76:f0:1c:4e:f8:af:8d:69:80:d1:d1:
58:3e:9e:0d:2c:2d:a5:cf:d6:47:f3:47:9b:f3:25:
58:24:50:9d:c8:83:76:24:9d:4d:89:f1:6d:d3:d4:
da:b7:a3:33:b3:e6:67:29:d1:95:6b:1a:aa:23:f1:
12:48:12:4d:7e:6a:a9:ef:5a:40:b8:9d:f4:d6:c9:
58:6d:14:9f:fa:af:9c:1b:21:c3:eb:b6:34:06:b6:
8e:4f:5c:b2:06:a6:3a:63:a6:52:e5:5c:56:a9:0e:
2b:34:fd:cf:79:0e:ff:cc:62:ae:a3:6e:bd:c2:d6:
72:23:65:f7:ed:ac:44:74:0e:01:62:58:ca:42:32:
46:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CB:D4:67:72:E5:FE:D1:18:81:B0:2B:7B:B4:8A:20:9F:67:71:9D
X509v3 Authority Key Identifier:
keyid:74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:03:5e:d9:c6:f4:f3:93:0f:21:0a:5f:68:6e:bc:90:4c:8b:
4d:ff:7a:e4:0a:f4:d2:5d:94:e7:5d:07:3f:7d:6a:35:ad:4c:
81:15:81:13:e8:1a:95:c5:6d:36:93:b8:c1:a4:89:b6:cd:b3:
74:50:25:50:bb:ce:8d:38:a6:04:ad:8c:9e:27:7e:3b:01:43:
3f:ca:6d:47:29:78:49:c0:f9:9b:a4:83:2b:50:33:16:81:d6:
12:77:99:99:92:cd:e0:87:04:06:6b:f9:3a:08:ea:29:ae:11:
d4:0c:f0:86:41:3b:95:bb:bd:43:cd:9c:64:44:8e:a8:c9:74:
6a:ec:65:a9:31:c6:44:76:05:45:8b:09:ca:a3:38:9e:80:2f:
42:df:94:02:6a:96:2c:c3:e0:5e:aa:c2:8d:e9:53:7d:28:0e:
38:f4:ff:8a:f5:2a:b2:25:85:b1:da:6f:a0:8f:48:01:da:50:
60:ac:fc:29:d3:42:91:c2:ab:0d:83:3e:61:c3:3e:7b:8a:aa:
41:80:af:82:ad:f1:3b:b3:0e:38:bc:5e:75:df:a9:b0:a0:3d:
87:c5:fc:2d:0f:b5:90:c6:4f:ba:e9:17:09:1c:cd:a3:d2:ff:
28:e4:f4:f0:1a:80:c5:10:5c:fc:34:b0:50:56:4c:df:55:c3:
55:b7:a8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:53:45 2026 by rpki-client