Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
File: dNAyUoux0Vl2bNed5HhtzZYqH7s.mft (raw, json)
Hash identifier: e695d52WIxYsBsXfYF+2LnSE4JEFpzfHfJvQARonuuA=
Subject key identifier: 2B:B1:5B:60:9E:97:3E:34:0E:0C:E9:CA:2A:D4:08:00:F4:96:3C:17
Authority key identifier: 74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB
Certificate issuer: /CN=74d032528bb1d159766cd79de4786dcd962a1fbb
Certificate serial: 01A1539BFEB4551529F7571D934C10DDEF7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
Manifest number: 1871
Signing time: Mon 19 Oct 2026 10:01:34 +0000
Manifest this update: Mon 19 Oct 2026 10:01:34 +0000
Manifest next update: Tue 20 Oct 2026 10:01:34 +0000
Files and hashes: 1: _rWJNNnmk3R1x9pU0oYdGau3c7M.roa (hash: IHOPlEpatbDJApch2mWBilUmuofV8Wjb6ufkWpEothw=)
2: dNAyUoux0Vl2bNed5HhtzZYqH7s.crl (hash: XqK+vBEQUEIDTmmHUCWWzwXfplHoy9AzYOmu50e7Dt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 10:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:9b:fe:b4:55:15:29:f7:57:1d:93:4c:10:dd:ef:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d032528bb1d159766cd79de4786dcd962a1fbb
Validity
Not Before: Oct 19 10:01:34 2026 GMT
Not After : Oct 20 10:01:34 2026 GMT
Subject: CN=2bb15b609e973e340e0ce9ca2ad40800f4963c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a3:64:05:bd:c1:24:2d:8b:9e:be:d3:99:d2:
96:b1:d0:7e:a9:29:89:81:62:7c:f3:5f:88:75:c4:
2d:ce:31:59:0a:58:a1:ec:8b:88:bd:03:69:08:ea:
36:50:24:eb:ec:ac:85:a9:bd:b2:b3:1d:35:f4:10:
34:a8:18:29:64:5b:bf:a5:79:28:65:83:9b:fe:d5:
0d:ff:e6:da:fc:86:7a:26:2f:aa:7e:8e:56:4a:5b:
94:7b:3d:72:0c:1e:d7:bd:17:9f:1d:19:30:a2:a6:
07:d3:79:05:09:b9:73:a6:de:75:a9:91:9b:dc:c1:
ac:2b:1c:de:41:2d:72:75:d3:1a:be:2f:62:44:f9:
08:19:2b:7b:c0:75:45:85:8d:43:81:4a:09:50:8c:
16:f0:52:4a:67:f9:c5:15:1a:8f:be:39:8d:0a:ce:
d6:53:39:14:18:92:cf:22:46:c5:44:52:8f:2e:5c:
47:9c:28:65:e5:d5:88:6e:56:fb:0c:fc:f1:d3:e7:
ca:66:d8:1d:64:37:73:f6:4a:4b:63:1b:8e:c5:55:
c1:66:b4:40:09:b4:ed:94:d9:01:d8:f4:96:d1:70:
35:e8:1a:a5:d2:9a:2c:c8:ec:d3:28:ce:51:28:a6:
0e:69:6b:78:e6:62:b4:88:f3:29:4f:69:ed:d7:39:
c4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B1:5B:60:9E:97:3E:34:0E:0C:E9:CA:2A:D4:08:00:F4:96:3C:17
X509v3 Authority Key Identifier:
keyid:74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:f1:ff:90:bf:96:05:25:98:bc:3d:d5:a2:96:5f:c0:b9:2a:
f1:75:b7:bd:31:70:d2:8e:5c:7a:84:4c:ed:21:3a:dd:8d:e0:
5a:71:f4:d3:d4:98:a0:e4:01:a1:2b:7e:c1:ba:97:d3:11:34:
da:a9:c7:3d:3b:ac:f0:11:2e:48:ef:29:6e:55:15:93:19:cb:
f7:03:c2:e7:2b:18:de:cd:92:e1:3a:69:46:69:cc:ef:63:d6:
fe:4b:8f:1d:13:f2:76:b5:c0:ec:37:33:f5:f8:6a:21:52:aa:
b9:5a:d1:c6:04:d4:e1:e9:4e:37:18:e1:64:8a:b9:79:4a:50:
e2:ea:17:34:dc:65:0d:81:b4:4f:dc:ad:e0:38:4d:ea:e9:e7:
47:f4:da:bc:79:e5:25:24:32:89:f4:f6:71:3a:12:17:ae:a5:
12:a3:fe:20:76:41:2c:fc:33:26:d7:a8:ca:56:fe:b1:c3:6b:
d9:f2:8f:17:19:c5:ff:8c:b8:ba:cd:77:80:b4:93:b9:87:58:
99:86:0c:95:c4:65:45:23:0e:96:0c:e8:37:3c:2c:1a:d1:a4:
02:95:e8:43:f9:8d:40:cd:35:63:62:55:4e:28:a3:cf:ad:90:
21:05:db:9c:f6:b4:d7:39:04:83:9e:bf:94:ec:3f:b6:eb:f6:
25:a4:67:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 19:44:08 2026 by rpki-client