Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
File: dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft (raw, json)
Hash identifier: pukxJC7EkRb0fF0OMJKLQUuwlzUyUD4vaZwJbWldZME=
Subject key identifier: CF:95:E7:28:1D:81:D8:A9:FF:23:B7:35:79:67:1D:25:A3:23:0F:7B
Authority key identifier: 74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9
Certificate issuer: /CN=74d7da63929999603395877448ce50ac6e0213a9
Certificate serial: 019D9A3EC142F23A9AAAA0868CB6BCD1D872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
Manifest number: 1129
Signing time: Fri 17 Apr 2026 07:01:36 +0000
Manifest this update: Fri 17 Apr 2026 07:01:36 +0000
Manifest next update: Sat 18 Apr 2026 07:01:36 +0000
Files and hashes: 1: SwOC6LWRUnc-Ogb7u3vxF_0mea4.roa (hash: /q8N1XNG3IXyW6BA6haLHv1Ug3hcBfXRJEVoULv8zlE=)
2: dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl (hash: fbN/739TJ1vxTEcbcHubti279F7U3vJHm0+9+aomd48=)
3: iGjEi-RetR317ng4nZLQERiyp5Y.roa (hash: VlJirjJKzaqO+FqHC1L2a0e5Ten97AODI8Xgtdno6FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:c1:42:f2:3a:9a:aa:a0:86:8c:b6:bc:d1:d8:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d7da63929999603395877448ce50ac6e0213a9
Validity
Not Before: Apr 17 07:01:36 2026 GMT
Not After : Apr 18 07:01:36 2026 GMT
Subject: CN=cf95e7281d81d8a9ff23b73579671d25a3230f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:65:9f:6d:ea:93:d4:46:b5:e4:d6:19:ec:09:
ea:66:6f:d5:5b:3c:b7:87:e3:c4:c4:71:f3:a0:77:
bc:f9:62:1e:2b:a0:c4:05:6a:00:34:1d:d6:25:ab:
19:dd:33:5b:08:0c:04:e9:ed:b2:76:a9:74:1a:bf:
ae:cb:be:04:61:1a:52:e3:2c:51:f3:0b:c5:ee:16:
e7:2d:d5:20:07:db:9d:55:e2:d0:83:d8:d1:f2:5b:
dc:13:88:b4:74:23:76:1c:cf:45:68:9a:fd:bb:91:
aa:6c:a2:e9:66:87:90:cb:0b:7d:24:f3:92:b0:1e:
f9:58:02:7b:bd:19:06:4d:0e:04:02:d3:21:e4:fd:
a2:e6:03:c9:17:d7:13:c1:8e:09:b3:62:bd:d2:25:
cf:f5:09:dc:69:47:00:38:b5:69:38:9a:a8:39:8b:
e3:fd:99:33:52:97:a7:98:2e:cd:0d:14:53:d3:fb:
b8:92:f9:c3:13:01:80:69:77:ef:c0:9d:02:3e:ca:
c3:51:ec:5d:24:c1:40:11:53:35:57:19:cc:89:fd:
b0:ac:3b:43:47:74:48:56:6f:85:ea:7e:92:e0:16:
6b:e3:e7:df:ae:e5:1e:05:71:59:f5:2b:82:ca:cd:
1d:a6:f8:60:09:99:ac:2a:b4:f7:72:a3:cd:f1:7b:
b8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:95:E7:28:1D:81:D8:A9:FF:23:B7:35:79:67:1D:25:A3:23:0F:7B
X509v3 Authority Key Identifier:
keyid:74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:80:18:19:27:8e:dc:b0:f5:82:15:8b:27:e6:73:26:22:9f:
0d:e8:1a:5d:9a:7f:29:95:43:6e:61:88:c1:4e:37:da:ec:70:
95:b3:2d:45:53:6d:c8:3e:ea:79:02:80:74:24:6f:a3:73:7c:
85:c3:d2:ad:48:73:ce:42:55:19:70:0c:9f:a3:3c:56:63:38:
ab:b4:d4:17:33:6f:83:1c:a7:b7:fa:34:67:b2:e6:ce:e2:c5:
86:a0:f9:8c:6c:7b:0b:d7:9f:f6:13:2d:be:36:02:a2:18:de:
80:e4:7a:5b:5f:3e:8a:9f:9d:00:7b:9e:70:87:e1:3e:dc:05:
ad:fb:dc:88:14:5f:5f:5f:71:0f:bd:85:24:68:b3:23:bc:9b:
21:2b:49:ff:15:10:79:b4:6e:f0:80:a7:4f:82:06:a9:36:fd:
41:33:3d:3a:a7:b0:c7:84:ee:71:02:09:11:05:b7:e0:ac:1d:
8c:91:51:7f:bf:b1:c0:ac:b2:dd:57:6b:d2:e6:59:52:d0:66:
c3:53:1c:e7:94:02:68:8f:88:0e:8a:df:6e:d3:fe:2d:32:bb:
45:83:84:53:95:0f:6b:14:85:ba:7a:28:d4:37:c3:32:8e:15:
67:4e:59:87:15:c1:4e:ae:93:d3:50:4f:e6:d5:83:43:31:62:
be:06:49:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:44:12 2026 by rpki-client