Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft
File: 74wzqKYgHUCmAiC9Y5tdNSISZz4.mft (raw, json)
Hash identifier: qnw9HwBdcog39SC6m9YDDVTHWMEgU3hnInoGR3TYn24=
Subject key identifier: D8:A2:44:6C:67:59:A5:0F:D6:06:6F:D5:B4:00:3F:B9:D2:AC:C5:C6
Authority key identifier: EF:8C:33:A8:A6:20:1D:40:A6:02:20:BD:63:9B:5D:35:22:12:67:3E
Certificate issuer: /CN=ef8c33a8a6201d40a60220bd639b5d352212673e
Certificate serial: 019D3977CCF3C99427F0E8ECAFE75C7CFECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft
Manifest number: 16A4
Signing time: Sun 29 Mar 2026 12:00:45 +0000
Manifest this update: Sun 29 Mar 2026 12:00:45 +0000
Manifest next update: Mon 30 Mar 2026 12:00:45 +0000
Files and hashes: 1: 74wzqKYgHUCmAiC9Y5tdNSISZz4.crl (hash: bNM6oppqLqtH/NSgQ63A6aC5m9oYvvsforeLiy4LN2Y=)
2: BcbpeOE1UIMLYcx9_xoYiBz5cII.roa (hash: C/EPAsh6T699gB8fYjC4QQRKH8QFpe67E9wrm8R7nkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:cc:f3:c9:94:27:f0:e8:ec:af:e7:5c:7c:fe:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef8c33a8a6201d40a60220bd639b5d352212673e
Validity
Not Before: Mar 29 12:00:45 2026 GMT
Not After : Mar 30 12:00:45 2026 GMT
Subject: CN=d8a2446c6759a50fd6066fd5b4003fb9d2acc5c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:53:92:5c:43:61:77:43:21:dc:c4:63:86:da:
10:40:eb:4e:64:04:4f:73:ae:70:14:6f:93:69:26:
88:c5:ad:c8:5d:e3:d8:7f:64:7f:25:84:04:89:78:
0b:f4:85:6f:25:33:35:69:9c:e8:d1:5c:20:1b:f8:
71:ff:48:9d:53:02:e4:d5:0f:43:a5:3d:d5:4c:99:
9a:f9:0f:94:41:fe:f1:f0:d4:ec:69:a5:45:d0:5b:
b0:7b:3c:9a:fb:67:b9:42:f3:3f:55:f3:4c:52:54:
6e:28:19:7a:d7:75:1e:00:91:5c:59:42:03:6c:9c:
3a:ef:b9:57:c0:e5:10:c4:63:b0:f5:4b:9c:54:a9:
c4:fa:ad:0e:0f:1c:33:01:9f:49:d6:0a:a2:d1:39:
94:5d:13:71:d9:97:0e:b3:73:77:fd:81:2a:bc:42:
9e:c8:2c:f1:44:c6:66:20:49:a7:13:dd:65:77:b1:
b2:01:c7:1d:88:01:80:20:2a:88:71:09:2a:37:1e:
06:be:8f:3b:70:c7:1a:d1:d5:77:5d:fb:56:ad:a9:
54:72:44:13:29:5c:7d:61:07:6c:59:e8:68:52:d7:
43:60:5b:6c:1f:ae:fc:63:03:49:84:6a:06:36:4b:
ad:79:ee:e7:e8:1c:ff:c6:db:eb:05:4d:ec:64:98:
09:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A2:44:6C:67:59:A5:0F:D6:06:6F:D5:B4:00:3F:B9:D2:AC:C5:C6
X509v3 Authority Key Identifier:
keyid:EF:8C:33:A8:A6:20:1D:40:A6:02:20:BD:63:9B:5D:35:22:12:67:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c1:f2:9a:59:ac:b8:ff:d6:77:d8:1a:4c:68:d9:40:a5:cf:
6c:57:af:db:e8:15:3f:73:d6:14:2e:93:63:74:35:a2:da:15:
5d:93:55:6e:1c:e2:4e:db:e8:ee:c5:5f:34:f0:91:16:8e:b9:
15:88:de:fa:31:2b:ae:a9:48:54:65:93:ad:7e:4e:98:72:bb:
7b:c1:00:ce:07:f6:37:68:bc:7e:b2:d0:a4:43:40:83:6d:0b:
48:d9:90:f5:85:d6:30:90:c4:c6:43:c3:01:a0:9f:6f:62:08:
18:83:91:68:10:a8:c8:71:e4:9b:71:11:2f:1f:03:06:b8:bf:
4a:f8:3b:91:ca:cd:3a:5f:5a:ae:7a:e7:cf:db:04:e0:5b:c7:
ec:7d:9c:0c:21:47:15:c7:30:29:50:ce:df:17:65:cd:eb:05:
d1:04:60:a4:94:e6:18:a3:d3:e2:d2:51:4d:15:ab:6f:e1:34:
ee:4b:c2:69:3d:cd:87:c6:e8:39:9e:44:5e:09:55:4c:d7:fb:
47:54:a4:24:f9:4b:4c:45:39:29:06:5a:b6:8b:d3:cf:af:59:
bd:73:dd:b5:5f:86:f6:1a:80:3f:7a:b7:ae:d5:a6:e4:2c:0f:
0c:f7:4d:1b:8e:c8:74:64:40:09:c7:e0:37:a7:26:92:8c:01:
0a:f4:c8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:34:04 2026 by rpki-client