Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
File: dMf46RuB_mSHMHxSJusET5I5bOo.mft (raw, json)
Hash identifier: 32p9GY+gIDundXw6CoiW+yK0uAUFsnSAvaRRnaMdMTE=
Subject key identifier: 8F:AD:3C:C4:50:4A:6D:78:DB:C2:16:76:15:45:CF:EE:C4:A1:A8:77
Authority key identifier: 74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA
Certificate issuer: /CN=74c7f8e91b81fe6487307c5226eb044f92396cea
Certificate serial: 019CAA8FD1E9344A07A3D89B5F8650FF1CF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
Manifest number: 17D9
Signing time: Sun 01 Mar 2026 18:01:17 +0000
Manifest this update: Sun 01 Mar 2026 18:01:17 +0000
Manifest next update: Mon 02 Mar 2026 18:01:17 +0000
Files and hashes: 1: ZMUCUaol16FS16uvGYc5LMi3mms.roa (hash: 1PMSBIos5jL1U1+prZU3noEZyRlQ7CsZEb3CRHH/Kmg=)
2: dMf46RuB_mSHMHxSJusET5I5bOo.crl (hash: lb/gBchRShgw819XpPmNeziCvVsCffU9cAf4NRN2nho=)
3: tTSdWCx25FCn0IY4HobZWct52gk.roa (hash: fHmHb3pigGy4UNI0P79QY+ZoI7ILqOgBSDwz0m8aRvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:d1:e9:34:4a:07:a3:d8:9b:5f:86:50:ff:1c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74c7f8e91b81fe6487307c5226eb044f92396cea
Validity
Not Before: Mar 1 18:01:17 2026 GMT
Not After : Mar 2 18:01:17 2026 GMT
Subject: CN=8fad3cc4504a6d78dbc216761545cfeec4a1a877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:25:76:95:27:9d:cd:81:57:54:d9:37:17:28:
25:bb:67:5e:9a:45:5c:1a:15:81:9b:43:d7:99:c4:
7f:b8:a7:ae:dc:4b:2c:db:1a:56:19:15:7d:1a:91:
fa:62:ec:7c:33:8d:72:38:7e:a0:66:13:17:50:dd:
74:4b:db:8e:c3:40:d3:99:2c:65:6f:13:7f:b7:ac:
1d:f9:d9:c8:53:fc:79:3e:86:9a:a6:85:16:46:8c:
b8:41:b9:01:e3:87:d5:21:07:64:0e:5e:45:c7:40:
03:15:62:8c:7e:bf:0b:cb:5b:80:61:be:87:06:6d:
b1:cc:09:a7:8f:1a:a4:fd:0f:f2:6e:14:c1:c7:3b:
8a:24:46:c4:45:cf:22:dc:7e:a8:4e:f1:29:fa:f5:
b4:a0:58:19:2c:e9:2f:58:02:b0:e2:c0:20:a3:da:
76:fd:20:90:29:e9:35:d9:3f:be:ee:3c:33:29:72:
dd:9f:ad:22:3f:6c:6c:40:bb:87:d1:dd:94:d9:10:
d0:15:ec:e7:16:e8:a4:23:6b:8b:61:01:46:23:53:
c5:73:69:e0:de:30:b7:d2:87:b6:01:d6:f4:11:86:
2f:56:bd:12:f9:7d:a4:95:67:18:7d:a9:90:6f:0b:
24:30:f6:c3:77:be:5f:af:b4:ed:c1:c2:43:00:f4:
b9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AD:3C:C4:50:4A:6D:78:DB:C2:16:76:15:45:CF:EE:C4:A1:A8:77
X509v3 Authority Key Identifier:
keyid:74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:8d:d5:c2:0a:4d:c4:53:52:60:b6:69:91:43:4a:02:04:37:
20:6f:c7:5e:d1:03:05:86:3b:a2:ea:77:0b:bf:96:50:62:55:
01:d6:e4:c4:ca:2c:f9:62:d2:be:19:27:c1:3a:0e:79:11:4c:
57:13:ae:e3:eb:28:47:a6:27:85:82:90:0f:9d:86:4b:97:61:
d7:64:bb:78:84:f7:d8:f5:6f:db:f2:5b:e6:29:93:55:71:d2:
c6:28:4e:f2:1d:c2:ec:36:4f:a3:1e:f4:c9:20:00:87:5c:96:
ce:15:63:de:de:eb:9d:34:b3:2b:db:19:ec:15:1b:68:8f:7f:
55:af:b7:e1:5b:37:15:30:6c:1f:d7:86:6c:0b:36:03:a3:90:
ca:5b:5f:c7:a0:5f:b3:43:ee:62:79:55:39:70:ad:f7:83:24:
cb:3e:03:11:8f:3f:99:7a:dd:01:3c:15:cf:15:a4:82:f0:78:
a1:82:d2:7e:15:56:5c:94:c7:b0:4f:d0:19:8e:08:fa:a5:d1:
21:72:c9:10:1a:39:74:11:2a:95:1d:83:35:d2:a3:78:ba:46:
c0:df:ba:b4:ce:41:87:71:ae:eb:0b:6f:be:db:4e:e4:ba:65:
cb:36:a9:17:a4:68:50:b3:8e:21:8e:0e:ff:06:9e:ca:54:f4:
9d:0f:03:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:02 2026 by rpki-client