Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
File: dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft (raw, json)
Hash identifier: JBz1FCeyJSpRkBZ6vPGFrSvlvj6SWnZUGGoFeMEFxKc=
Subject key identifier: F3:ED:16:96:D4:3F:59:F1:90:AE:D0:05:DB:96:4F:1B:CB:46:CB:3D
Authority key identifier: 74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9
Certificate issuer: /CN=74d7da63929999603395877448ce50ac6e0213a9
Certificate serial: 019F84C3D59420FBF80BF52BC851B3DE33E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
Manifest number: 1227
Signing time: Tue 21 Jul 2026 13:00:54 +0000
Manifest this update: Tue 21 Jul 2026 13:00:54 +0000
Manifest next update: Wed 22 Jul 2026 13:00:54 +0000
Files and hashes: 1: SwOC6LWRUnc-Ogb7u3vxF_0mea4.roa (hash: /q8N1XNG3IXyW6BA6haLHv1Ug3hcBfXRJEVoULv8zlE=)
2: dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl (hash: l5J1r/YeDNWrRLoMN87C19bruyMFqmZwECsfYDRi/pc=)
3: iGjEi-RetR317ng4nZLQERiyp5Y.roa (hash: VlJirjJKzaqO+FqHC1L2a0e5Ten97AODI8Xgtdno6FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:c3:d5:94:20:fb:f8:0b:f5:2b:c8:51:b3:de:33:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d7da63929999603395877448ce50ac6e0213a9
Validity
Not Before: Jul 21 13:00:54 2026 GMT
Not After : Jul 22 13:00:54 2026 GMT
Subject: CN=f3ed1696d43f59f190aed005db964f1bcb46cb3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4d:02:e2:31:c3:12:9b:74:0f:9c:8c:91:0a:
7d:f7:50:2c:96:46:3b:77:cb:53:f4:f4:c4:b3:5a:
d4:57:65:81:c5:a9:b2:6b:c3:1d:13:d0:26:32:dd:
7b:3d:8f:a4:e0:c5:52:98:fa:ae:d8:ce:1e:9b:da:
76:c2:df:cf:c3:ac:7d:47:ff:4d:48:12:e6:4b:0b:
e9:4f:b7:fd:91:72:06:79:a7:0a:8b:18:67:a8:83:
75:77:04:c2:22:67:15:e2:d5:f7:4a:10:4a:67:c3:
b7:28:c2:6a:fd:3e:a8:7d:ed:8b:d9:e6:80:b9:12:
c6:29:ba:e7:74:e9:b6:bf:b8:5c:70:1f:53:f0:2f:
25:b5:88:4f:71:fb:85:6a:52:06:2d:60:1a:19:48:
ab:a0:e1:f8:4f:5f:ad:65:3f:e1:42:70:d1:ab:e0:
8d:a2:6c:30:6a:89:1c:69:a8:43:a9:29:02:5e:00:
2c:b1:86:c9:53:c0:f6:e3:0f:38:57:af:4f:f2:bd:
ba:e5:01:66:33:9f:07:5d:3a:82:97:da:b5:0c:6a:
33:97:00:08:58:c0:1b:ce:fe:8f:f9:a7:4d:6f:72:
43:fb:d7:b4:2e:79:a2:78:00:d4:e3:59:75:72:9b:
d1:ad:18:6e:11:81:b2:e3:3f:9a:b7:60:38:25:26:
29:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:ED:16:96:D4:3F:59:F1:90:AE:D0:05:DB:96:4F:1B:CB:46:CB:3D
X509v3 Authority Key Identifier:
keyid:74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e7:da:5e:7e:07:ea:e8:08:aa:5e:83:36:e9:69:12:e5:88:
7d:0d:79:16:59:b3:f9:4c:d4:ad:42:e2:37:10:ae:7e:b0:d5:
60:c1:a3:cd:ca:1d:d9:e5:dd:9d:b4:de:9b:0a:7a:43:d9:ce:
54:82:4a:11:51:b4:6a:c5:ab:4a:45:e3:cf:7f:ed:41:2a:d3:
3a:cd:0b:ef:03:1c:3e:bc:e1:16:2b:84:f5:80:17:4c:bc:9e:
5d:09:5c:ec:3a:f1:21:cf:07:a1:94:e9:d5:fb:95:b0:3e:24:
50:4c:4c:58:dd:82:e7:3e:c0:01:ef:b8:21:61:25:00:f1:61:
e1:7f:84:c7:65:3f:8e:4c:77:c9:9c:57:ac:e2:c9:a5:75:01:
38:a6:c1:bd:e3:53:8c:de:1d:15:cb:9b:e5:2b:41:e8:97:1e:
58:16:65:75:a8:3e:28:73:36:8a:78:df:57:fb:d1:56:11:ca:
20:13:07:31:ca:41:0c:95:6d:dd:9a:fa:59:3c:2c:16:b2:bd:
ba:a3:35:ff:6d:2a:07:73:fc:94:a8:09:f2:ad:d0:71:ed:c9:
c7:9c:31:bf:2e:fb:91:40:33:cb:a5:df:84:3d:8a:51:ff:c2:
db:ce:24:ce:ca:04:2b:2f:ff:e6:bf:06:3a:4c:1f:af:98:d4:
bb:de:70:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:55:05 2026 by rpki-client