Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
File: dn871L-9MHHDjNTXCSvTSQkgw9k.mft (raw, json)
Hash identifier: yayW7ZPPdbY4qIei0+H/sX0WqbBZ0cnjfVsxwoea0k4=
Subject key identifier: 93:EA:61:46:D3:4D:3E:E1:6B:C7:80:9A:89:FC:0C:AF:2E:63:44:C5
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 019DF9BB1B073E4C7FC8EF0FE719E9D9EBD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
Manifest number: 12E3
Signing time: Tue 05 May 2026 20:01:22 +0000
Manifest this update: Tue 05 May 2026 20:01:22 +0000
Manifest next update: Wed 06 May 2026 20:01:22 +0000
Files and hashes: 1: 2_M3hjSd7CTsmWcIflPRCb5WQkA.roa (hash: lb+AroYfcHpsLjtLQUflH3VlWHXn0bD5oDoLv70oXjU=)
2: GApNKBWC5Ue-NAU5Sg1EwP8MY6k.roa (hash: 2tMBvhTBaG9FOblLPHKcO+h2HyVM2AobojKlvW5vzV0=)
3: S_cMNHwGmO53SbTaPSTvEUZSyO4.roa (hash: VJ2mNoR51FwtQFNmuZTNPyshVFI+sQ6fyBXwc1Q4lR4=)
4: TpDZ8IP6rdDoqNG2faUZ93mOnhY.roa (hash: WauO2SokhDFlsHFeFhypHeCTlK3wDUgWAzshLZtKSQg=)
5: dn871L-9MHHDjNTXCSvTSQkgw9k.crl (hash: VM3wSSTb994T/dcUrC54bEKBwRemodyVm5SivyD3Ga4=)
6: dwc98g5fGUgPAWxFG8AQgkdTGUE.roa (hash: r33CVUyGl3+7P6ErqgK1Pc1v2YLarpkrErbsExQx0So=)
7: ocHcLPqIiXs39TMNmLocr_HH0to.roa (hash: 2m7W1dsOxKOHHVh+M6gzZPsYBZCOmqgU0+hBomALNJM=)
8: yrbB1vsBIjdbUaylEPRfMMB-k3g.roa (hash: uUmid3sXY3uL8GFqpHsIlPFVeU82iqmCl12sBdQU42s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f9:bb:1b:07:3e:4c:7f:c8:ef:0f:e7:19:e9:d9:eb:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: May 5 20:01:22 2026 GMT
Not After : May 6 20:01:22 2026 GMT
Subject: CN=93ea6146d34d3ee16bc7809a89fc0caf2e6344c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f4:23:79:00:fe:5e:66:4b:80:eb:f8:de:89:
6a:ec:54:a1:64:52:dc:45:37:84:a3:af:79:90:f0:
97:41:21:df:f3:8c:2a:92:99:9b:7b:be:2b:f0:9a:
cf:b6:69:c9:fc:ff:1e:bb:01:75:7f:61:eb:69:6c:
e7:61:37:b9:17:a8:6f:04:32:68:51:21:d3:70:74:
c8:7c:47:7f:36:4f:a0:39:53:05:86:a4:e6:38:b0:
e3:3e:79:c3:74:e0:5b:12:9f:d9:f7:28:81:91:de:
8c:6d:f9:11:a5:23:c4:c5:47:bd:67:e5:d3:52:db:
a0:f2:14:f9:1f:8c:0c:60:5a:7f:ff:ea:fc:fd:cf:
eb:3e:60:fd:d4:2b:83:83:e8:bd:78:4e:c7:8d:4d:
1c:7c:f5:8f:33:7e:c4:b6:1d:69:a1:d6:fa:cf:5b:
04:d3:73:e7:5b:1e:27:28:f5:f5:6c:7a:fc:2e:ca:
ff:9a:1d:60:b8:58:be:7c:b4:b0:1a:16:e0:1c:60:
fd:3e:df:d1:b8:e5:be:bd:26:3a:74:00:48:a5:1c:
c2:da:27:63:1a:61:d6:74:b8:23:87:d9:94:0d:ca:
6c:9e:49:13:db:2a:b6:c5:77:a8:0e:6a:42:6d:0a:
34:42:b3:02:ae:fb:b2:53:83:84:ba:cd:d0:64:cf:
ea:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:EA:61:46:D3:4D:3E:E1:6B:C7:80:9A:89:FC:0C:AF:2E:63:44:C5
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b5:92:e1:79:7e:9a:a4:a4:3f:ae:23:a4:a9:17:21:47:20:
41:94:1f:d2:03:f6:fd:dd:11:49:c4:ac:01:a5:f1:3b:45:a9:
d8:7d:33:24:8e:a0:17:63:30:38:7e:df:ce:73:91:be:2e:4c:
03:b4:c0:99:e5:d8:c3:5e:0c:1b:1b:d8:fd:5d:08:f5:c9:a3:
3b:d5:66:c1:09:57:1a:38:64:63:3a:d4:01:1f:53:1e:59:11:
06:6b:37:5d:ff:4a:6a:20:0f:cf:51:82:63:15:eb:29:b2:7c:
06:fc:83:ab:f9:01:60:4a:65:0a:f6:12:8a:78:27:75:e5:b2:
02:40:c5:d1:fc:78:50:6b:21:1b:87:cf:58:a9:64:5e:6c:51:
55:12:69:98:16:e3:64:de:e1:2b:61:52:9a:9b:cc:c8:78:64:
a7:43:76:bb:67:8e:23:ac:7a:5f:42:2e:bd:5a:4a:c7:2f:5d:
be:96:f4:7e:ea:35:b2:4b:35:18:f3:9d:a9:2e:7c:57:2f:b5:
52:69:ca:0b:88:c1:aa:e1:a4:6d:65:36:cd:3a:0f:28:dc:31:
a4:57:c5:01:2b:69:7c:81:e5:d5:22:1b:e5:5a:53:0b:34:29:
71:84:1d:aa:28:7c:48:a0:a9:08:bb:00:ef:31:fc:cd:6c:93:
7d:79:c9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 00:20:06 2026 by rpki-client