Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
File: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft (raw, json)
Hash identifier: z4/FcgSW7b55jpS8xwru8zeRqaY6WWF6SEhFZXpwAu4=
Subject key identifier: B5:41:35:D5:EE:6F:BE:67:65:38:E8:AF:55:C1:A0:D7:58:33:12:5B
Authority key identifier: 74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
Certificate issuer: /CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Certificate serial: 019DDF56042EF9CACB76EEBDCBA8D6B79E36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
Manifest number: 13AF
Signing time: Thu 30 Apr 2026 17:00:49 +0000
Manifest this update: Thu 30 Apr 2026 17:00:49 +0000
Manifest next update: Fri 01 May 2026 17:00:49 +0000
Files and hashes: 1: PeJEMtupept21vf-rfjqUX1mldY.roa (hash: L3Vq59CQQkeuB9Tb5q+mJV+IQYi3JZHbF6U8aJ9gFYU=)
2: aD0lsDcoNGKfxZpDG-OdR_bzMnU.roa (hash: bvoZBbd9QoLZ+N5I+xfKDL3PeYR6CygFLOwHX1oAOxI=)
3: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl (hash: xIo15HT7wRdmeYNakJT/JAOHOOgZSw++3qVAcgx7Uk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 14:07:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:df:56:04:2e:f9:ca:cb:76:ee:bd:cb:a8:d6:b7:9e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Validity
Not Before: Apr 30 17:00:49 2026 GMT
Not After : May 1 17:00:49 2026 GMT
Subject: CN=b54135d5ee6fbe676538e8af55c1a0d75833125b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a8:e5:7a:9b:08:bb:29:83:e7:f3:63:73:6c:
b4:9f:34:a9:c8:6c:40:e3:d1:1c:63:2c:99:e9:63:
93:6e:e6:98:53:47:89:91:1c:8b:97:79:be:2e:69:
47:23:c6:38:7e:c7:cf:c9:2a:04:ba:e3:c7:eb:9b:
62:7e:b4:d9:22:4e:22:01:da:6a:05:1f:0e:08:db:
d2:d1:05:2b:c7:26:25:36:30:d8:b6:8a:59:da:14:
b3:9d:89:eb:72:aa:48:39:22:6f:62:8c:75:be:8d:
5e:d0:1b:e2:c7:b6:38:72:0f:9b:82:da:30:3d:aa:
3d:77:97:48:12:4e:aa:b2:11:28:1c:f9:79:16:86:
e0:28:37:c4:a0:d1:4a:dd:a5:27:aa:fd:a7:6f:ea:
95:a7:4a:15:b6:ce:b2:8f:93:0b:4d:cf:1b:8d:92:
2c:1c:7e:90:a4:0b:d8:d0:8e:1a:af:b2:12:1b:57:
a1:75:7b:0a:e4:12:36:5f:cb:88:f7:83:47:dd:66:
c6:5e:a0:88:94:9c:f5:cf:eb:7e:b6:9f:32:d8:e1:
78:9d:8b:db:f7:d6:8b:8b:6f:16:ba:87:39:7b:ce:
bd:5c:ff:9c:ce:05:05:d7:a9:87:61:4d:71:ff:51:
64:64:78:b0:97:dc:3f:70:f7:d7:af:5e:b6:bc:25:
95:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:41:35:D5:EE:6F:BE:67:65:38:E8:AF:55:C1:A0:D7:58:33:12:5B
X509v3 Authority Key Identifier:
keyid:74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:48:fc:09:55:c5:37:47:74:e2:78:21:3f:52:d6:33:02:dc:
e8:bc:8e:df:45:bc:db:2f:3e:64:e0:d3:9c:ef:e7:a8:50:63:
cc:33:b0:af:88:31:a0:1c:23:d4:a4:0a:e5:6a:4a:80:2f:c0:
83:17:c7:53:f4:fb:a7:10:10:8b:5b:48:22:6c:8f:64:6e:0a:
f6:dc:bc:0a:e4:b6:c4:36:bb:c3:84:c1:cb:31:32:eb:6e:dc:
fe:0e:fb:cf:a3:ba:94:7d:fc:42:a1:b4:3a:69:57:89:a8:8f:
ef:d2:7b:c9:16:1f:f2:16:27:ae:45:88:ac:d2:99:b5:88:b1:
54:c5:7e:db:78:30:65:cd:f6:89:01:ca:51:e3:4a:69:90:70:
69:22:cb:d1:f6:b8:ff:50:b5:e2:a4:ca:40:e3:ba:ee:b0:fe:
f1:61:6e:fb:93:1c:c8:b7:77:14:23:ff:3f:95:3a:ec:f7:90:
60:3c:a4:ff:a6:f5:e0:7a:00:35:2f:d5:6b:a8:85:d6:b1:16:
b3:ee:f7:0e:16:27:d8:4a:01:2c:ed:84:90:a4:2b:50:83:99:
ec:84:e3:3f:f9:6a:89:5c:7e:80:c9:77:70:3d:ea:c4:d4:37:
39:f8:a0:d2:51:38:b8:89:4f:6c:72:91:79:ec:70:da:7c:a2:
02:8d:20:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 21:20:22 2026 by rpki-client