Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
File: dPEFnCc8UO3PPc7fxYABUuyR26I.mft (raw, json)
Hash identifier: YI8m7kkFBabUIWi8+aUrWwNTGKcoCdW3oDWOQqgTRAE=
Subject key identifier: 56:7C:E0:80:57:98:FA:84:78:D8:79:EA:CB:A6:0F:56:29:55:4E:75
Authority key identifier: 74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
Certificate issuer: /CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Certificate serial: 019CAA8F9CD3594F16A9D61147379EE635FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 18:01:04 +0000
Manifest this update: Sun 01 Mar 2026 18:01:04 +0000
Manifest next update: Mon 02 Mar 2026 18:01:04 +0000
Files and hashes: 1: 4zHqkXwTdPpErUuwool8-zX-SB4.roa (hash: LHnM5v5Sz1IzlHeFp2joapwPeszU3VAj2kHXfdYdwu4=)
2: dPEFnCc8UO3PPc7fxYABUuyR26I.crl (hash: zc0L8JHkBehc0xGOovlpDRUm25U5jwhAPlLqCosguLc=)
3: f_myMJMSIIWO9m-PmHiygg0XXSs.roa (hash: 3LE3GccOE6KqVlj9DZ+EFPId6e66LFjW7NsGN3ZdmPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:9c:d3:59:4f:16:a9:d6:11:47:37:9e:e6:35:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Validity
Not Before: Mar 1 18:01:04 2026 GMT
Not After : Mar 2 18:01:04 2026 GMT
Subject: CN=567ce0805798fa8478d879eacba60f5629554e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e7:49:45:7f:29:d5:b4:72:62:e1:41:84:bc:
3f:8a:7d:c4:ca:24:1f:9e:8a:59:e5:fc:5f:9a:d9:
81:fd:4b:3f:6c:6e:30:71:ca:4a:e1:77:73:6d:fe:
bc:a9:ce:0d:68:3e:79:e6:08:9f:d8:86:5a:24:17:
cd:f1:d6:87:de:38:17:e9:d0:0f:84:74:e7:d5:49:
90:76:9f:82:41:2c:85:57:d7:23:d7:1e:df:d8:7c:
eb:db:7d:b1:6f:e3:38:b5:5a:66:aa:a9:11:40:54:
24:95:62:29:9f:21:0e:00:3d:6f:6c:62:e4:1c:6f:
7d:43:a9:fc:b6:9a:bd:b8:d9:8b:48:ac:19:a0:f2:
b3:48:cf:76:83:3f:fc:46:74:8a:31:29:52:f2:8c:
bd:23:a7:fc:8c:20:5d:6d:5c:27:c3:1c:3c:75:0f:
4d:b8:21:67:69:da:a5:45:11:ca:1e:23:c0:9c:36:
a3:6e:77:12:e0:ca:20:cd:c3:49:b6:23:63:8d:d0:
2f:ee:1f:fc:cc:e7:be:94:eb:a2:7a:f2:f9:0e:76:
89:53:cd:49:5c:7e:75:23:6d:78:38:70:da:43:34:
9d:8f:90:ba:b3:9c:92:0a:61:e4:f4:84:1d:ca:18:
b3:4a:87:85:b6:da:8c:19:31:9d:a7:5d:ab:3f:d9:
09:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:7C:E0:80:57:98:FA:84:78:D8:79:EA:CB:A6:0F:56:29:55:4E:75
X509v3 Authority Key Identifier:
keyid:74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:64:4f:1d:28:d4:d4:d8:2c:70:ba:25:7c:48:8d:f8:15:0c:
61:0e:93:8b:c8:d7:87:9c:5d:d7:bf:f1:d0:84:d7:2e:25:5d:
61:19:84:20:89:00:e9:06:31:87:23:40:af:a3:34:ac:83:16:
75:8e:74:75:65:e2:5e:88:99:fb:f8:d3:92:43:a9:90:25:c1:
5e:3b:94:6a:56:be:b4:8e:b1:86:50:75:a1:7c:d0:45:ec:1b:
70:ca:63:87:83:78:60:09:0d:78:03:3a:37:60:17:28:a2:56:
38:e2:25:af:62:48:30:5c:82:34:0d:33:1b:a9:c8:1d:d9:d1:
fc:31:dc:07:63:e3:be:57:93:8a:66:18:e0:0e:09:0f:e9:fb:
66:99:ad:19:e8:f5:a2:1a:e2:7b:d1:17:4f:14:bf:8d:b1:e1:
0a:87:45:61:a8:dc:3f:4c:18:97:3d:34:4c:55:c9:b3:7c:ae:
b6:ca:52:0f:44:da:6a:d0:97:dc:bd:5e:9e:cd:61:50:68:23:
4f:de:df:6d:6b:bf:ff:3e:fb:7f:33:38:63:19:ab:80:db:f0:
58:ac:fe:da:02:ad:67:1c:37:da:dd:68:84:6e:ef:e9:5b:ae:
76:f1:74:a7:98:af:89:a5:da:9b:26:98:a5:83:df:2e:0c:ff:
85:a8:97:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:56:34 2026 by rpki-client