Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
File: dNAyUoux0Vl2bNed5HhtzZYqH7s.mft (raw, json)
Hash identifier: +HKCxnM9/YSuAxIiMlBTbsgrq2iDkKXs1LUYarLwIy4=
Subject key identifier: 5E:2D:63:97:90:64:84:68:65:D0:D9:88:E2:16:BA:0E:1E:88:8B:2D
Authority key identifier: 74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB
Certificate issuer: /CN=74d032528bb1d159766cd79de4786dcd962a1fbb
Certificate serial: 019CECA626CB6FD44CEC118E90BF4AD6E2BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
Manifest number: 1629
Signing time: Sat 14 Mar 2026 14:00:37 +0000
Manifest this update: Sat 14 Mar 2026 14:00:37 +0000
Manifest next update: Sun 15 Mar 2026 14:00:37 +0000
Files and hashes: 1: UWc6YQjM9t1ffmI-LVxAUT_OwbI.roa (hash: 6Dahf9gKo3spL66J3FQf4jt5WqJRr1c/pSpOxLB19HE=)
2: _rWJNNnmk3R1x9pU0oYdGau3c7M.roa (hash: IHOPlEpatbDJApch2mWBilUmuofV8Wjb6ufkWpEothw=)
3: dNAyUoux0Vl2bNed5HhtzZYqH7s.crl (hash: bVrkaSrdElRaqgqetpS/KS7HzWaRlU5bi/h8onV5vWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:a6:26:cb:6f:d4:4c:ec:11:8e:90:bf:4a:d6:e2:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d032528bb1d159766cd79de4786dcd962a1fbb
Validity
Not Before: Mar 14 14:00:37 2026 GMT
Not After : Mar 15 14:00:37 2026 GMT
Subject: CN=5e2d63979064846865d0d988e216ba0e1e888b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e0:a1:55:9c:f7:b1:82:5d:78:fa:63:3f:24:
0d:4f:c2:f0:21:40:4d:bc:0a:d9:12:5e:19:97:2d:
56:d7:33:73:ef:89:6a:b5:70:01:1a:14:4a:9c:71:
9d:87:cf:fb:52:7e:96:ef:19:89:bd:62:99:0b:66:
dc:84:67:84:4d:a4:0f:a5:87:40:76:fa:53:20:ca:
54:de:a7:5d:5b:09:31:24:d3:2f:b0:f7:88:d7:82:
dc:c5:9a:87:04:29:b5:af:85:90:7b:c2:ee:dc:7d:
90:a0:77:91:c9:fe:5f:41:e7:e5:bf:34:67:aa:6c:
3f:87:44:75:58:59:1a:f3:a3:59:40:34:9e:76:26:
7a:87:a2:e2:b5:e6:50:fa:af:ae:59:4d:ed:f7:31:
fd:60:84:3c:21:82:1e:cf:89:59:27:25:9e:48:c2:
e8:d4:e2:4e:33:c5:f0:6e:6c:1a:f9:09:3f:2b:b7:
be:8f:86:16:3c:12:c4:34:f7:e9:1f:f6:ff:d7:cf:
c3:be:e7:05:f1:8b:48:c2:f9:19:b5:50:72:52:d3:
d8:3d:5d:0c:49:53:c8:50:ab:24:87:b5:6f:82:6b:
88:6e:62:ec:c0:d9:b8:01:a4:53:86:5f:83:8f:7c:
f2:84:19:93:8f:2e:d9:a0:ad:74:ed:fb:52:b3:37:
8c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:2D:63:97:90:64:84:68:65:D0:D9:88:E2:16:BA:0E:1E:88:8B:2D
X509v3 Authority Key Identifier:
keyid:74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:92:7b:45:17:be:da:47:35:4d:cf:a1:61:3e:fd:47:3d:7a:
96:c3:15:6b:4d:e2:23:8b:2f:31:b6:41:13:a6:61:6c:28:3a:
01:c9:82:ee:54:fa:06:62:75:9a:74:b1:d6:9f:b8:85:b9:13:
c5:e0:2f:06:8b:df:6f:fb:25:d3:69:23:ed:69:4b:4e:77:7a:
69:0a:05:a4:45:52:d4:af:3e:a5:d7:fe:fd:b4:45:74:f1:95:
d3:ba:e3:b3:2c:8e:1b:eb:8b:ef:25:b8:23:d0:e8:f6:f5:a8:
83:a4:fa:d3:67:f2:3b:6b:b9:50:af:b8:b7:a4:1a:59:d6:56:
4e:4b:f4:1d:6b:8d:c4:96:04:da:2e:09:86:f3:cb:75:4a:71:
76:9b:5a:f3:f2:0c:e6:7b:3f:54:0f:7c:b7:cd:ad:2c:60:32:
50:e7:62:8e:2c:73:c7:81:73:c4:19:2b:39:c9:76:92:44:3b:
81:c0:06:d5:46:70:a5:77:db:90:db:91:8e:1d:dd:26:4c:ba:
47:e0:16:83:76:fd:0e:97:92:16:75:60:43:f8:23:36:fe:e3:
75:15:b8:01:cf:1f:be:c4:6b:8d:7d:64:c8:ee:2d:2d:e1:af:
ad:5c:8c:af:b4:25:49:3b:45:b3:42:c9:61:d6:e9:4b:49:21:
9d:1a:09:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 22:50:25 2026 by rpki-client