Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
File: dNnAc7T3BpfiF1walV9sqMOmJGs.mft (raw, json)
Hash identifier: 7PXb2F4viZc0/fYItxgC88TC96d0zj/5ptT5468Gt3w=
Subject key identifier: E3:DF:68:09:89:2D:27:95:F9:A0:97:02:07:38:3B:41:E5:6B:41:27
Authority key identifier: 74:D9:C0:73:B4:F7:06:97:E2:17:5C:1A:95:5F:6C:A8:C3:A6:24:6B
Certificate issuer: /CN=74d9c073b4f70697e2175c1a955f6ca8c3a6246b
Certificate serial: 019D389C198E3719FC32F9F67F2DEA9747F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
Manifest number: 11FB
Signing time: Sun 29 Mar 2026 08:00:47 +0000
Manifest this update: Sun 29 Mar 2026 08:00:47 +0000
Manifest next update: Mon 30 Mar 2026 08:00:47 +0000
Files and hashes: 1: WXwPoRCbPqeE9PVP8z3V258rpMo.roa (hash: plbJpqwh1XwCDwZThguZTHp1pk+o9N71tabRf4ITG0w=)
2: dNnAc7T3BpfiF1walV9sqMOmJGs.crl (hash: A44L2LBVxYYFZKSXrKCOCYgUAvSWatN92xG/TdbgZuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:19:8e:37:19:fc:32:f9:f6:7f:2d:ea:97:47:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d9c073b4f70697e2175c1a955f6ca8c3a6246b
Validity
Not Before: Mar 29 08:00:47 2026 GMT
Not After : Mar 30 08:00:47 2026 GMT
Subject: CN=e3df6809892d2795f9a0970207383b41e56b4127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:57:7b:03:89:b8:cc:c6:d6:6f:49:67:0c:21:
be:24:0c:9e:d2:9b:08:ed:dc:95:17:d9:12:5b:0e:
ce:83:4c:ce:35:c8:26:19:51:3a:96:6b:d6:56:6c:
b6:bf:0c:01:5f:3b:dd:d5:db:03:fa:9e:3e:ee:d2:
2c:b7:6b:f0:36:ba:78:ba:43:3c:21:7e:47:96:4e:
a1:1f:87:5a:76:4b:2b:9e:1e:6c:3a:e7:38:d4:85:
84:d0:8d:87:27:84:a0:a6:6f:1f:fa:29:df:c9:3f:
68:4f:66:aa:8a:98:de:37:0d:ae:4a:fe:da:9e:06:
fc:6e:06:fa:bc:8a:5e:8b:46:5c:92:20:98:ac:6b:
64:10:24:a6:b8:cf:13:14:01:c6:79:8b:9f:16:0f:
21:ac:87:3e:1a:0e:1e:2b:c3:d8:08:a9:d1:c3:74:
fa:e4:19:91:99:3f:f0:3b:85:c0:f5:c4:7d:c3:91:
14:a0:4c:96:05:ea:e1:b4:4d:28:b1:33:93:61:f8:
63:75:34:c8:38:10:d0:fc:33:64:60:59:be:97:9c:
54:dc:30:29:e2:db:f3:18:ad:a7:1a:36:66:bd:26:
11:e6:95:3c:74:b7:a5:92:f8:c9:f1:c2:af:d4:4c:
40:c2:f6:dc:4e:b8:ce:59:bc:c4:6e:71:6d:72:e6:
8f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:DF:68:09:89:2D:27:95:F9:A0:97:02:07:38:3B:41:E5:6B:41:27
X509v3 Authority Key Identifier:
keyid:74:D9:C0:73:B4:F7:06:97:E2:17:5C:1A:95:5F:6C:A8:C3:A6:24:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:5a:50:d9:9f:5e:ff:48:94:f3:31:8c:2d:01:77:63:41:52:
47:43:68:6c:a0:d9:8b:16:ae:e6:b9:a4:b9:d4:c1:c3:73:c5:
6a:87:63:40:15:5e:e6:9b:3a:ee:cc:06:68:b2:70:ff:a5:99:
c5:45:df:d5:d5:8c:98:b2:7e:51:23:bf:c6:97:ce:39:27:12:
fe:a5:5f:45:aa:57:ed:98:c0:d0:09:1f:31:c5:e0:01:ee:57:
84:8d:b5:3f:b5:1b:66:65:be:d2:fc:d8:a9:6d:67:da:43:5e:
4d:af:79:65:a2:71:da:b6:56:cd:1b:47:f5:91:0b:ec:79:ba:
1f:b2:84:1e:e0:1d:3e:50:b0:36:27:9d:a6:a3:16:19:40:ab:
07:66:4f:ad:ed:ca:b2:48:62:36:d1:40:7e:76:ef:ae:59:91:
dc:23:cf:07:ae:7f:6d:f9:04:e3:28:55:f1:fa:cc:de:ca:fa:
19:8c:c4:ac:86:00:7a:3e:eb:11:8a:f8:c0:52:c8:9b:cf:64:
f9:79:54:6b:eb:09:f1:ad:f6:42:b5:1e:10:dc:a3:27:d6:ce:
21:7e:60:97:86:14:be:83:c3:41:dd:9d:11:a7:45:4a:b7:1c:
e4:e4:85:f6:08:1e:ab:22:14:83:2d:90:25:bc:5f:88:03:e5:
45:56:79:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:17 2026 by rpki-client