Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
File: dNAyUoux0Vl2bNed5HhtzZYqH7s.mft (raw, json)
Hash identifier: cwIEXiA/ebpou4prutt9ToUUnkc+HsnKdcTTxZrIteQ=
Subject key identifier: 79:36:EA:A1:BB:6F:87:1F:EE:8C:02:8D:26:FC:90:5B:63:8B:31:7B
Authority key identifier: 74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB
Certificate issuer: /CN=74d032528bb1d159766cd79de4786dcd962a1fbb
Certificate serial: 019EC6DD916D7E96600E7E0282C409386420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
Manifest number: 171F
Signing time: Sun 14 Jun 2026 16:01:09 +0000
Manifest this update: Sun 14 Jun 2026 16:01:09 +0000
Manifest next update: Mon 15 Jun 2026 16:01:09 +0000
Files and hashes: 1: _rWJNNnmk3R1x9pU0oYdGau3c7M.roa (hash: IHOPlEpatbDJApch2mWBilUmuofV8Wjb6ufkWpEothw=)
2: dNAyUoux0Vl2bNed5HhtzZYqH7s.crl (hash: Gmuyd+sT8gKViof/AD5q6+vJmPQz+wQPCWzIpSXydz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 16:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c6:dd:91:6d:7e:96:60:0e:7e:02:82:c4:09:38:64:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d032528bb1d159766cd79de4786dcd962a1fbb
Validity
Not Before: Jun 14 16:01:09 2026 GMT
Not After : Jun 15 16:01:09 2026 GMT
Subject: CN=7936eaa1bb6f871fee8c028d26fc905b638b317b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:06:f0:cb:7f:21:05:9e:de:f9:00:ca:b9:00:
88:5b:53:e1:24:d3:ad:c5:23:ab:89:5b:d9:1b:7b:
cf:64:cd:c9:88:d1:44:8f:bf:98:2f:62:14:34:c7:
06:b9:75:ea:14:a3:a7:1f:55:c9:dc:89:37:44:a6:
9d:f4:85:04:6f:f3:df:da:11:23:0e:01:7f:91:f0:
13:87:80:07:27:60:02:09:88:70:11:db:50:ed:f2:
95:d8:d6:5f:60:0b:a3:36:a8:3e:8a:04:27:67:09:
22:dd:1a:5c:93:21:0d:c8:26:1b:cd:58:a5:c9:e4:
29:72:ef:f0:a6:dc:df:c6:a9:08:cc:f7:11:f7:20:
c8:d5:d3:6b:f3:76:6a:94:2b:e7:d6:09:0d:f0:cc:
38:42:1c:87:7e:13:21:97:4b:ff:1f:c7:e0:a0:6e:
99:85:03:5a:fe:2e:52:7d:98:11:33:7c:da:a9:d7:
b0:8e:f3:f0:9d:c2:3b:91:54:58:45:9c:95:71:0d:
aa:d4:ca:86:7a:3e:a3:df:f3:55:bf:ee:7c:5c:61:
17:3e:58:27:0c:f0:51:49:55:f7:9f:25:b3:75:bc:
73:a3:44:91:53:0a:91:0a:af:42:ec:97:d4:53:f7:
c2:8c:48:64:fc:90:48:32:4e:c1:f3:2d:f3:36:8b:
2b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:36:EA:A1:BB:6F:87:1F:EE:8C:02:8D:26:FC:90:5B:63:8B:31:7B
X509v3 Authority Key Identifier:
keyid:74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:9d:2f:d8:61:a9:5d:9b:c2:e3:91:00:f4:fc:80:d8:4d:0b:
7b:b6:cd:8a:fb:89:f6:42:26:dc:06:e4:f3:d6:d4:d8:69:18:
90:da:2b:19:f0:e1:96:d9:da:03:db:65:ca:68:b9:c2:e3:9d:
6c:62:1a:12:be:00:94:2b:b1:6b:97:f9:e7:23:04:10:7a:75:
ed:ab:5a:6a:6a:c2:79:fa:09:e4:da:a4:96:b5:65:5b:b0:7e:
2e:51:93:f7:60:0f:dd:9d:44:4b:bf:03:03:7b:72:f1:72:8e:
20:3e:25:10:bb:f2:bc:04:27:27:da:75:40:65:8a:fc:f6:86:
3a:bf:5d:46:ae:fe:42:e1:b6:eb:74:ce:53:54:02:71:6f:ea:
17:29:6c:2c:79:55:b8:15:d4:56:3d:74:d8:fb:ef:15:f9:3a:
fa:7d:bd:0e:2c:8c:e6:dd:ae:72:43:d3:de:d2:0b:5f:14:e5:
3a:86:bc:e4:a2:99:85:b8:d3:64:b0:49:26:77:72:af:85:83:
90:88:ee:97:ed:34:4d:05:c5:fe:dd:79:70:ce:1e:da:23:ef:
e1:ad:70:62:b6:1e:2b:04:54:b5:3e:85:96:e5:58:4d:3c:c9:
c3:d7:e1:2a:52:b8:d8:95:1d:b7:0d:8d:79:69:4e:48:bd:7b:
e2:95:5e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 00:25:53 2026 by rpki-client