Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
File: dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft (raw, json)
Hash identifier: +koxq0tSs4+yaAJy2l3fkAuj/daLYtPY0OHgf65Q/xA=
Subject key identifier: 0D:9D:8F:D5:DC:0E:FC:B8:33:B5:59:C1:65:7B:0A:7A:F4:55:B0:FB
Authority key identifier: 74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9
Certificate issuer: /CN=74d7da63929999603395877448ce50ac6e0213a9
Certificate serial: 019CAAC60EA781213A35685899AA399D8381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
Manifest number: 10AD
Signing time: Sun 01 Mar 2026 19:00:32 +0000
Manifest this update: Sun 01 Mar 2026 19:00:32 +0000
Manifest next update: Mon 02 Mar 2026 19:00:32 +0000
Files and hashes: 1: SwOC6LWRUnc-Ogb7u3vxF_0mea4.roa (hash: /q8N1XNG3IXyW6BA6haLHv1Ug3hcBfXRJEVoULv8zlE=)
2: dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl (hash: yrrY7lL6bDQv0v++DlkwUKL7iDVlEr1bY9kmr1FjtDg=)
3: iGjEi-RetR317ng4nZLQERiyp5Y.roa (hash: VlJirjJKzaqO+FqHC1L2a0e5Ten97AODI8Xgtdno6FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:0e:a7:81:21:3a:35:68:58:99:aa:39:9d:83:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d7da63929999603395877448ce50ac6e0213a9
Validity
Not Before: Mar 1 19:00:32 2026 GMT
Not After : Mar 2 19:00:32 2026 GMT
Subject: CN=0d9d8fd5dc0efcb833b559c1657b0a7af455b0fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f3:dc:13:e4:37:0b:1f:8b:39:b1:08:4b:8c:
7d:89:ce:58:3c:80:de:a5:9b:70:12:3d:1d:a3:c1:
85:b6:6c:73:53:97:92:62:7a:bc:37:50:7a:5d:29:
1e:27:fc:1e:36:49:1b:69:38:51:5b:23:39:4c:6b:
25:9d:83:40:7e:8f:25:a5:42:cb:da:49:a1:1d:23:
94:83:9e:2e:20:f2:d5:21:be:2c:1a:62:e0:d3:eb:
6b:fa:02:7a:e4:80:e7:b4:6b:5e:1e:63:2e:a1:0f:
47:be:73:8b:bb:96:d5:9b:cf:19:49:fe:0f:f3:21:
b5:57:c9:11:8e:61:53:a1:4d:7e:22:33:90:b2:66:
c8:70:03:da:84:40:bd:ce:0c:f9:6f:99:44:e3:c4:
26:1e:74:32:2a:c0:9c:50:ba:d5:9d:2f:64:b1:29:
bd:ab:d1:a3:9f:22:57:1d:81:0e:69:b1:38:81:bd:
26:0b:1c:0b:49:45:7f:bb:26:6b:c4:32:2b:10:29:
af:83:a0:cc:cb:00:07:df:c8:d4:0e:8f:ee:5e:30:
ab:aa:ab:7a:10:60:af:18:a0:06:6c:a6:ec:22:93:
d1:3a:02:17:3e:6b:51:b7:a8:46:6a:8d:db:5b:1d:
2c:9b:02:63:aa:41:69:34:cc:d4:49:b7:36:c5:58:
5b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9D:8F:D5:DC:0E:FC:B8:33:B5:59:C1:65:7B:0A:7A:F4:55:B0:FB
X509v3 Authority Key Identifier:
keyid:74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:2a:d6:f6:f1:c7:37:e0:10:48:a0:01:79:5a:e7:a6:72:4b:
1d:0c:5f:74:b6:f9:55:09:bd:ac:29:dd:03:d4:5b:05:7a:68:
1d:0b:3c:04:99:6d:f3:a5:3a:52:1c:72:10:69:8e:ca:ae:45:
ce:51:59:6b:18:27:10:4a:55:a7:00:ca:ec:75:94:ef:a8:be:
87:c4:9f:00:f9:12:37:1e:5f:40:31:ed:db:da:fb:a3:fa:ce:
9f:49:d9:45:df:fa:7f:4b:96:97:12:53:bb:50:0f:f2:2c:6f:
87:97:8b:4a:5a:71:20:d7:61:4c:80:47:9d:11:b3:7b:59:9d:
b0:f0:09:2c:1d:d1:4d:98:18:48:e7:c7:1d:ce:de:8b:59:18:
78:20:e2:1a:02:ca:98:4d:9a:6b:b8:c0:85:2b:52:12:12:38:
c2:97:0d:71:d2:34:a2:ce:46:7d:b9:c8:19:41:87:9b:32:2b:
0e:74:e1:f3:b6:2d:e6:c5:8c:1e:13:97:88:b1:2e:66:a8:6a:
6d:31:ad:7f:78:13:b8:21:39:49:58:20:79:f3:e7:63:fb:61:
30:60:53:5f:40:3e:52:ab:26:fb:9d:63:64:f8:f0:3d:e9:b5:
d9:85:00:02:e6:55:06:1d:01:c5:3b:7d:f7:59:4e:d9:99:34:
1f:d1:92:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxg6ngSE6NWhYmao5nYOBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZDdkYTYzOTI5OTk5NjAzMzk1ODc3NDQ4Y2U1MGFjNmUw
MjEzYTkwHhcNMjYwMzAxMTkwMDMyWhcNMjYwMzAyMTkwMDMyWjAzMTEwLwYDVQQD
EygwZDlkOGZkNWRjMGVmY2I4MzNiNTU5YzE2NTdiMGE3YWY0NTViMGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPPcE+Q3Cx+LObEIS4x9ic5YPIDe
pZtwEj0do8GFtmxzU5eSYnq8N1B6XSkeJ/weNkkbaThRWyM5TGslnYNAfo8lpULL
2kmhHSOUg54uIPLVIb4sGmLg0+tr+gJ65IDntGteHmMuoQ9HvnOLu5bVm88ZSf4P
8yG1V8kRjmFToU1+IjOQsmbIcAPahEC9zgz5b5lE48QmHnQyKsCcULrVnS9ksSm9
q9GjnyJXHYEOabE4gb0mCxwLSUV/uyZrxDIrECmvg6DMywAH38jUDo/uXjCrqqt6
EGCvGKAGbKbsIpPROgIXPmtRt6hGao3bWx0smwJjqkFpNMzUSbc2xVhbPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2dj9XcDvy4M7VZwWV7Cnr0VbD7MB8GA1UdIwQY
MBaAFHTX2mOSmZlgM5WHdEjOUKxuAhOpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZE5mYVk1S1ptV0F6bFlkMFNNNVFyRzRDRTZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wZWI4NTItYWYzNC00Y2I5LTg3MmUt
NGI1ZDVkNWY4Njk5LzEvZE5mYVk1S1ptV0F6bFlkMFNNNVFyRzRDRTZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8wZWI4NTItYWYzNC00Y2I5LTg3MmUtNGI1ZDVkNWY4Njk5
LzEvZE5mYVk1S1ptV0F6bFlkMFNNNVFyRzRDRTZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqirW9vHH
N+AQSKABeVrnpnJLHQxfdLb5VQm9rCndA9RbBXpoHQs8BJlt86U6UhxyEGmOyq5F
zlFZaxgnEEpVpwDK7HWU76i+h8SfAPkSNx5fQDHt29r7o/rOn0nZRd/6f0uWlxJT
u1AP8ixvh5eLSlpxINdhTIBHnRGze1mdsPAJLB3RTZgYSOfHHc7ei1kYeCDiGgLK
mE2aa7jAhStSEhI4wpcNcdI0os5GfbnIGUGHmzIrDnTh87Yt5sWMHhOXiLEuZqhq
bTGtf3gTuCE5SVggefPnY/thMGBTX0A+Uqsm+51jZPjwPem12YUAAuZVBh0BxTt9
91lO2Zk0H9GS8A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:39:27 2026 by rpki-client