Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
File: dNAyUoux0Vl2bNed5HhtzZYqH7s.mft (raw, json)
Hash identifier: zHm7Kth5dIOWWK+EbEV7f11Ae1NxVX/C0JuYRWE6nxE=
Subject key identifier: 09:11:FE:68:16:61:3A:AE:76:73:4E:3A:BE:70:32:5E:B0:A4:FC:BA
Authority key identifier: 74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB
Certificate issuer: /CN=74d032528bb1d159766cd79de4786dcd962a1fbb
Certificate serial: 019DDE0C7031797B221D0DFDFA06FB6226BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
Manifest number: 16A6
Signing time: Thu 30 Apr 2026 11:00:50 +0000
Manifest this update: Thu 30 Apr 2026 11:00:50 +0000
Manifest next update: Fri 01 May 2026 11:00:50 +0000
Files and hashes: 1: UWc6YQjM9t1ffmI-LVxAUT_OwbI.roa (hash: 6Dahf9gKo3spL66J3FQf4jt5WqJRr1c/pSpOxLB19HE=)
2: _rWJNNnmk3R1x9pU0oYdGau3c7M.roa (hash: IHOPlEpatbDJApch2mWBilUmuofV8Wjb6ufkWpEothw=)
3: dNAyUoux0Vl2bNed5HhtzZYqH7s.crl (hash: MqSrtHo0Ea1sB5/thfKp9lhqhhf4ZQUMx1QrmTGxqVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:0c:70:31:79:7b:22:1d:0d:fd:fa:06:fb:62:26:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d032528bb1d159766cd79de4786dcd962a1fbb
Validity
Not Before: Apr 30 11:00:50 2026 GMT
Not After : May 1 11:00:50 2026 GMT
Subject: CN=0911fe6816613aae76734e3abe70325eb0a4fcba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2e:ab:c3:c4:8f:6a:03:7c:28:34:87:14:30:
9f:e1:c4:3f:83:fb:bf:c7:e3:b1:a0:e4:63:62:52:
48:e7:b1:86:8c:ae:e1:84:13:3b:23:4b:bf:ba:10:
3f:04:a1:ab:b8:d9:c0:a3:60:47:b1:40:9c:07:06:
4e:79:a5:59:05:d8:f8:85:c4:ed:70:3c:dc:87:cc:
24:7e:81:ee:c6:53:ce:0a:9f:4a:b1:5c:6b:3c:77:
74:04:ec:1f:1c:c0:2b:94:a2:69:53:5e:dc:b2:34:
41:09:64:a9:d6:8f:d2:07:f4:37:fb:8d:48:80:a4:
ce:09:f4:d6:3c:49:6f:be:32:48:e1:1e:dd:ce:4f:
86:96:d2:d4:fb:67:76:5f:6b:74:c4:30:cb:60:5f:
cc:41:7f:6f:ad:ca:c5:e6:ac:1b:06:cd:91:c3:c3:
54:a6:08:0f:ff:c6:d1:0e:5e:3f:01:72:4c:81:e8:
72:ba:8a:44:2c:d7:d9:5a:0c:f6:9b:c5:c7:18:50:
05:0b:a9:32:23:3d:d3:69:ac:e4:48:5c:dc:70:49:
e4:98:34:d6:93:02:97:ba:02:87:f6:d4:26:c1:e0:
d7:d5:00:e3:05:16:81:0b:72:bc:4f:55:8d:d1:48:
30:72:e0:86:67:c5:39:d9:5c:0d:fc:7a:e2:05:b3:
98:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:11:FE:68:16:61:3A:AE:76:73:4E:3A:BE:70:32:5E:B0:A4:FC:BA
X509v3 Authority Key Identifier:
keyid:74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:56:08:b7:aa:24:9c:16:13:a4:2d:0e:45:bb:26:b8:0b:1b:
d4:ba:1b:23:7e:1a:3b:96:1c:a7:b4:17:1e:95:16:ee:aa:37:
0c:8b:30:30:95:f4:cf:86:ce:64:87:c4:9a:0f:2f:a1:b4:82:
ab:07:63:29:7b:00:47:88:74:47:ff:86:df:92:e7:22:e3:71:
6f:7e:e9:a9:0b:5f:24:0d:30:bf:e3:fa:87:0f:f2:fa:10:09:
e6:50:1e:58:6e:27:32:71:ec:82:5c:d7:50:33:a5:34:81:e7:
17:b7:ff:40:88:c6:f2:ba:cb:3a:56:bd:4f:5b:f8:e9:84:07:
09:80:7b:b8:10:52:45:61:47:79:d0:ec:ae:13:00:29:77:7f:
27:ff:0e:ec:10:b3:27:62:1b:6c:70:70:90:84:1c:38:dd:63:
f7:c3:59:68:ae:cf:f5:90:3b:1e:bb:24:99:2d:c5:54:33:37:
2b:d6:a9:d7:04:47:ec:c8:3a:8f:e6:2b:98:31:f4:5e:2e:6d:
b8:21:f1:aa:e1:a9:d4:2b:68:88:eb:4d:ee:ff:34:6c:5e:e6:
24:26:af:91:6e:f4:e0:42:47:c3:61:8e:59:d0:b0:78:28:bc:
77:a3:db:08:10:30:35:4a:c3:1a:db:31:d0:4e:00:3f:82:de:
42:6b:5d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 17:30:25 2026 by rpki-client