Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
File: dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft (raw, json)
Hash identifier: MTUj62Qh9H1sc6sMIOm98IwBjeiKNAVBmS+r/fUnN6I=
Subject key identifier: 6C:FE:52:3E:D0:3F:E9:DA:FB:04:5C:40:EF:22:B0:94:B1:CF:96:80
Authority key identifier: 74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9
Certificate issuer: /CN=74d7da63929999603395877448ce50ac6e0213a9
Certificate serial: 019EC1B685BD6ADAFA28D529FE7674562682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
Manifest number: 11C2
Signing time: Sat 13 Jun 2026 16:00:24 +0000
Manifest this update: Sat 13 Jun 2026 16:00:24 +0000
Manifest next update: Sun 14 Jun 2026 16:00:24 +0000
Files and hashes: 1: SwOC6LWRUnc-Ogb7u3vxF_0mea4.roa (hash: /q8N1XNG3IXyW6BA6haLHv1Ug3hcBfXRJEVoULv8zlE=)
2: dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl (hash: SkuMb3FSwO1YVViTyJPjKgaJhQyvAkIU8EMU2aBhLfQ=)
3: iGjEi-RetR317ng4nZLQERiyp5Y.roa (hash: VlJirjJKzaqO+FqHC1L2a0e5Ten97AODI8Xgtdno6FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b6:85:bd:6a:da:fa:28:d5:29:fe:76:74:56:26:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d7da63929999603395877448ce50ac6e0213a9
Validity
Not Before: Jun 13 16:00:24 2026 GMT
Not After : Jun 14 16:00:24 2026 GMT
Subject: CN=6cfe523ed03fe9dafb045c40ef22b094b1cf9680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8b:f2:65:28:98:92:51:4a:9b:83:ed:46:98:
15:70:9f:57:fa:56:96:21:04:3f:43:89:6c:bd:25:
77:06:ad:2b:ba:a7:4a:c5:84:3b:4d:ef:2f:c4:87:
f1:c6:ca:db:db:ea:ad:f0:1e:9c:a0:fc:13:f7:89:
c7:4d:73:8f:78:ba:66:4c:00:3e:b2:22:88:b8:f5:
f2:62:4f:de:7c:1d:46:91:00:39:31:09:cf:cb:42:
4c:f7:a9:2c:a5:74:1e:bc:e4:0e:e4:79:ad:ef:f5:
7d:67:f9:22:33:39:9b:1c:a8:a8:9c:ae:09:8d:86:
76:1b:df:bb:d0:35:ac:7f:1e:c2:8f:97:e3:c5:89:
ab:e4:86:00:bb:9b:89:36:b7:24:29:69:6b:66:7c:
19:fe:fa:e3:7e:ec:86:80:ba:db:38:98:28:16:39:
3d:9c:fe:7a:9f:d6:d4:54:ca:e9:e1:89:72:bb:ae:
62:38:f0:c7:db:fe:5a:38:e0:89:68:ed:36:31:1f:
d4:d9:be:a2:7f:c4:00:2d:8a:02:9c:60:69:40:61:
1e:52:74:a9:13:89:fc:52:44:06:6d:b3:1d:8b:9d:
33:d6:1c:9d:b6:63:f7:04:4f:3d:09:df:f3:19:69:
06:8e:72:8c:4e:dc:3d:cc:ad:40:0a:8b:c7:e3:b7:
52:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FE:52:3E:D0:3F:E9:DA:FB:04:5C:40:EF:22:B0:94:B1:CF:96:80
X509v3 Authority Key Identifier:
keyid:74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:fa:7c:88:99:20:f7:7c:95:19:69:4c:af:32:52:6c:d7:5f:
30:c6:e0:e4:06:0b:dc:d6:53:cf:1f:91:aa:b6:ca:cf:20:d2:
33:37:1c:00:de:00:a5:e9:79:7f:26:78:c2:3c:46:40:7d:74:
bb:ea:f7:6d:40:ff:7c:59:ef:8c:50:fc:30:6e:3c:1e:ee:8a:
82:8a:4b:84:80:3a:fc:c8:61:32:9a:db:4b:44:f7:cf:e5:8a:
62:5b:4b:31:71:f1:f0:c5:67:27:e2:67:4f:65:c3:63:99:0e:
d6:2d:3b:d6:12:65:dd:d7:02:57:1f:6d:61:62:76:5e:ca:33:
df:53:6b:c8:7f:50:dd:26:66:c4:84:b0:cc:f8:41:5c:64:be:
a1:37:6f:a8:96:6b:ae:42:91:46:62:cf:5d:68:99:d5:6a:d1:
e7:68:8d:0a:a2:82:f9:6b:30:e6:ce:18:a1:00:5b:96:5f:ab:
cc:46:78:b4:20:06:e2:cc:0b:56:10:ef:a6:74:af:ae:03:a9:
7b:df:92:f7:8f:2d:c4:19:4d:46:0c:49:19:0c:f0:94:bb:68:
3b:e5:b1:3c:82:d8:0e:83:2b:89:de:51:25:74:9c:a2:8e:da:
4e:0a:5f:8a:5f:76:a3:35:f6:0e:c1:b1:f6:05:82:0c:ea:46:
f6:eb:59:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:58:16 2026 by rpki-client