
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
File: dPEFnCc8UO3PPc7fxYABUuyR26I.mft (raw, json)
Hash identifier: s0fhBEcA/+RGSB7en9qfO/sQ3mc7LLiQD0Xjdr21RZY=
Subject key identifier: 17:A6:D3:BE:F2:5F:75:AE:EE:EB:A5:8E:97:EB:8C:26:A2:0D:98:13
Authority key identifier: 74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
Certificate issuer: /CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Certificate serial: 019EC17FC49328108778D0CFEAA667B65995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
Manifest number: 1959
Signing time: Sat 13 Jun 2026 15:00:36 +0000
Manifest this update: Sat 13 Jun 2026 15:00:36 +0000
Manifest next update: Sun 14 Jun 2026 15:00:36 +0000
Files and hashes: 1: 4zHqkXwTdPpErUuwool8-zX-SB4.roa (hash: LHnM5v5Sz1IzlHeFp2joapwPeszU3VAj2kHXfdYdwu4=)
2: dPEFnCc8UO3PPc7fxYABUuyR26I.crl (hash: qEPdXRM9L55/3GRPcgVldgzks0XCsoeWh3U9UT72xl8=)
3: f_myMJMSIIWO9m-PmHiygg0XXSs.roa (hash: 3LE3GccOE6KqVlj9DZ+EFPId6e66LFjW7NsGN3ZdmPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:7f:c4:93:28:10:87:78:d0:cf:ea:a6:67:b6:59:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Validity
Not Before: Jun 13 15:00:36 2026 GMT
Not After : Jun 14 15:00:36 2026 GMT
Subject: CN=17a6d3bef25f75aeeeeba58e97eb8c26a20d9813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7b:f5:00:06:c0:33:f8:5f:60:f9:dd:a4:5f:
e0:f0:7c:1a:f6:25:2e:9d:2b:b8:96:7f:89:0c:09:
0e:77:0c:c8:d1:e4:ba:95:16:f3:f4:79:c5:6b:71:
43:bf:f3:40:a3:22:cd:1e:ae:b0:46:6d:bc:0b:67:
b9:b5:e6:5d:39:04:bc:13:3b:25:7d:f0:37:d0:fa:
f2:2b:69:ee:27:6f:95:f5:dc:6f:4b:2e:25:69:8a:
63:b6:12:df:01:8a:20:29:16:ee:9a:6b:49:ab:21:
bf:9d:f6:a7:08:4a:e0:69:32:8a:64:a9:54:be:7e:
78:8a:c6:fe:a0:5f:69:76:2c:33:81:6b:60:45:97:
59:07:7d:91:32:7d:91:7a:36:63:ae:8f:f2:7b:07:
e2:de:ae:5a:ab:8a:72:1f:4f:f1:97:64:3c:e9:5c:
29:a5:55:5f:de:a3:ee:cc:d0:e5:53:a5:da:a6:fb:
39:cf:79:bd:45:b4:b4:07:3c:6b:40:ab:a7:df:df:
a1:44:53:fa:7b:2c:e6:c3:5d:80:c4:62:f1:e5:9b:
92:76:89:85:a4:85:9e:5b:9f:a2:a2:9b:c9:fd:59:
7b:15:b5:d4:b1:a0:5c:82:d0:8f:5c:b5:d8:f0:46:
b1:b7:d4:42:81:ed:7e:28:e1:e0:7a:fe:f4:47:42:
ec:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A6:D3:BE:F2:5F:75:AE:EE:EB:A5:8E:97:EB:8C:26:A2:0D:98:13
X509v3 Authority Key Identifier:
keyid:74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c2:35:37:0a:d4:cc:56:fc:ca:f5:44:01:5e:d4:74:77:b0:
16:53:3c:c9:ba:2b:25:9e:24:4b:fc:b7:f6:28:ba:dd:04:27:
4b:ec:df:a7:ce:7f:aa:a2:40:75:00:0c:99:71:7b:ec:e5:1d:
33:cb:39:c5:b4:6a:11:87:59:4b:5b:3c:a5:e6:22:1b:03:86:
48:ec:ee:a2:8b:86:ac:43:c2:08:a9:54:94:2f:ba:ec:64:6f:
e7:28:24:af:f4:a3:48:45:96:ea:7b:8a:f5:8b:76:d9:ae:f0:
91:50:5c:c1:3a:33:ef:64:49:33:89:dc:59:06:8a:63:14:69:
3a:f6:e1:d3:2b:41:44:8d:2a:0c:0c:52:7a:b9:a4:cf:04:c6:
67:6d:30:70:21:73:ac:f5:89:73:78:18:2c:05:f3:68:33:f5:
7a:81:4c:83:33:0d:74:ce:f0:06:c7:5a:eb:17:7d:08:e9:28:
59:26:db:8d:73:7d:2a:7e:33:04:a8:cd:86:58:43:b0:43:c0:
35:b4:a8:d4:70:e2:bc:70:1b:1b:8b:3b:49:68:2d:2b:e2:9c:
bb:70:50:6f:65:67:e4:9b:f9:0e:28:bd:7d:25:00:e2:19:f0:
42:52:ab:9f:e6:35:32:64:3b:34:ce:f9:6d:97:c2:7d:dc:09:
55:24:40:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:56:23 2026 by rpki-client