Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft
File: 74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft (raw, json)
Hash identifier: jZq+volRGYRQtN8ZiR8fwFvI3g2ocH4xlJy7v5BescA=
Subject key identifier: 9C:9B:24:3A:DC:2D:CF:B8:47:F0:6B:20:AB:25:54:A9:39:8B:EE:6D
Authority key identifier: EF:80:3A:49:0F:D6:20:35:18:BB:E6:44:BC:72:09:AF:B7:7E:C7:B4
Certificate issuer: /CN=ef803a490fd6203518bbe644bc7209afb77ec7b4
Certificate serial: 019D39776C361ED4F661C771B079D996A074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft
Manifest number: 0A2A
Signing time: Sun 29 Mar 2026 12:00:20 +0000
Manifest this update: Sun 29 Mar 2026 12:00:20 +0000
Manifest next update: Mon 30 Mar 2026 12:00:20 +0000
Files and hashes: 1: 3nO3Eu2HYNgfsHOzOD5IS3szUzQ.roa (hash: CLkZIvvir/OJbbrzSfgsy0YtbLrBe518P4dyR0joX20=)
2: 74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.crl (hash: B9oivZ42ohbAI5ztmrfZ7EErq6BGbIKtCeZ7NqtGD6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:6c:36:1e:d4:f6:61:c7:71:b0:79:d9:96:a0:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef803a490fd6203518bbe644bc7209afb77ec7b4
Validity
Not Before: Mar 29 12:00:20 2026 GMT
Not After : Mar 30 12:00:20 2026 GMT
Subject: CN=9c9b243adc2dcfb847f06b20ab2554a9398bee6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6c:63:41:62:e3:50:9e:58:52:ea:21:4e:88:
98:5d:cf:b9:45:9f:d8:70:0d:94:76:3b:63:6e:29:
9c:53:91:c0:f0:30:fb:2a:5b:be:e0:62:bc:11:6a:
11:56:7c:31:a8:b7:43:97:8c:00:66:5d:42:76:bf:
70:9a:36:1f:64:4c:b7:96:09:0c:ba:66:b8:9b:45:
af:6f:cb:6f:10:3a:bc:ef:6e:4a:5d:f4:12:97:c4:
ab:ca:20:bb:37:3e:eb:58:1d:bb:00:a0:79:bc:b1:
6d:44:a2:a4:a8:51:a4:f6:a9:68:ee:13:0b:7f:17:
2e:01:9c:bc:33:8c:c6:b2:37:f6:c0:ee:b1:c3:07:
28:1d:dc:30:ba:3e:98:31:e9:9c:20:cf:04:a8:67:
07:73:00:37:9a:01:03:55:4d:d8:d1:67:f6:df:c6:
33:83:cc:3f:05:90:b7:5d:91:f0:2a:17:93:15:54:
58:bc:c4:2e:b8:53:bf:50:a8:9f:30:43:53:24:2b:
a1:c5:e3:c8:e3:e1:5a:da:9b:d5:a9:ff:72:3f:15:
2d:8a:52:0f:7a:b7:a0:b1:61:d9:76:8d:16:b0:e3:
27:fe:a9:7a:0d:a1:ef:72:95:8f:05:55:9b:68:0a:
6e:1f:26:99:75:c8:04:6d:a8:2f:c9:b0:f0:6c:5c:
88:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:9B:24:3A:DC:2D:CF:B8:47:F0:6B:20:AB:25:54:A9:39:8B:EE:6D
X509v3 Authority Key Identifier:
keyid:EF:80:3A:49:0F:D6:20:35:18:BB:E6:44:BC:72:09:AF:B7:7E:C7:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:10:57:7c:be:33:41:59:10:9c:37:5b:17:5f:a9:80:84:33:
46:c2:3d:e8:db:44:64:54:02:5c:30:d9:84:fb:95:8d:05:83:
4e:63:cb:57:f3:ce:de:b5:73:31:36:4d:07:30:c9:95:75:7b:
f4:62:43:13:34:0e:e2:b0:74:52:02:a9:1f:fb:cc:e4:94:1e:
89:7d:6c:29:a8:db:7f:07:e0:df:3c:b6:b4:f8:af:0c:b2:15:
b1:07:09:8c:cd:cb:e0:45:b6:70:e0:74:30:6f:36:5b:8b:03:
7e:0f:78:cc:eb:5c:6a:ff:7a:9e:95:e3:e3:8a:51:7f:bc:75:
67:07:ce:3c:d1:21:6e:a2:9f:08:cf:7c:d6:06:6d:54:cd:ff:
27:a4:f2:8b:cf:a2:a4:3d:0b:92:37:85:ba:1e:7b:a0:af:67:
aa:4f:7b:ac:97:c3:bc:40:e1:f4:e4:31:07:53:24:ab:b4:1a:
80:af:48:27:8c:a7:71:77:6f:e2:e3:48:d2:9d:b1:02:6e:84:
08:7a:9f:c8:3e:59:e6:8e:2f:f0:f9:56:aa:1e:b9:03:4a:32:
58:db:56:6b:63:88:e9:f9:39:76:f6:9a:fb:6b:02:d2:bf:b5:
94:8b:c6:75:5d:52:8f:c3:0b:7f:9a:7a:09:87:eb:aa:61:90:
91:25:62:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:33 2026 by rpki-client