Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
File: dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft (raw, json)
Hash identifier: VkSixzJG4Qwil5JeAZzZY7+lRYrDo/I6ukZJa16tj3g=
Subject key identifier: 6F:C0:B4:1B:A2:C8:1A:B0:6C:D1:F5:AD:90:ED:35:0B:CA:E8:B2:E6
Authority key identifier: 74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9
Certificate issuer: /CN=74d7da63929999603395877448ce50ac6e0213a9
Certificate serial: 01A06E70E27660B6AEB0F85D60D24B2A8C3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
Manifest number: 12A0
Signing time: Fri 04 Sep 2026 22:01:26 +0000
Manifest this update: Fri 04 Sep 2026 22:01:26 +0000
Manifest next update: Sat 05 Sep 2026 22:01:26 +0000
Files and hashes: 1: SwOC6LWRUnc-Ogb7u3vxF_0mea4.roa (hash: /q8N1XNG3IXyW6BA6haLHv1Ug3hcBfXRJEVoULv8zlE=)
2: dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl (hash: hD5DlurvrnE2LnwzxYiBwH0BR/+r+EXWqgGaXhmymQ8=)
3: iGjEi-RetR317ng4nZLQERiyp5Y.roa (hash: VlJirjJKzaqO+FqHC1L2a0e5Ten97AODI8Xgtdno6FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:70:e2:76:60:b6:ae:b0:f8:5d:60:d2:4b:2a:8c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d7da63929999603395877448ce50ac6e0213a9
Validity
Not Before: Sep 4 22:01:26 2026 GMT
Not After : Sep 5 22:01:26 2026 GMT
Subject: CN=6fc0b41ba2c81ab06cd1f5ad90ed350bcae8b2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:5a:82:4c:83:4e:72:5e:51:b0:57:d1:d8:66:
51:c1:62:08:73:57:6a:19:bb:f6:58:93:3b:92:b3:
d1:63:63:22:c8:d8:0c:2d:6d:2f:ca:f8:b9:82:79:
5e:3f:2b:7c:8b:16:5b:ca:e4:37:eb:9e:6e:12:68:
64:7b:7f:32:ce:3a:e3:7e:74:53:2e:93:94:ed:52:
e7:b9:94:ce:63:66:be:17:89:46:da:50:00:7f:78:
dc:b2:cf:f4:5c:2d:1a:06:1a:ed:39:30:c9:95:c0:
f5:68:32:1f:5c:a2:e9:42:ea:5e:aa:bf:2b:f0:3e:
c1:62:10:cc:bf:e7:d8:a6:2e:3f:95:d2:56:80:71:
7b:9d:ab:8b:e6:a7:98:f6:5e:50:96:6d:dc:50:0f:
ed:61:9a:d3:d7:b6:e6:f2:89:c6:e5:99:1b:04:20:
1c:a6:6e:82:84:ff:cd:48:2f:80:20:c8:d4:a6:da:
e6:4e:ac:96:d3:85:0d:a8:5c:c6:0f:d4:8e:93:b6:
e2:67:b1:0f:81:fb:4e:9c:ba:74:c1:38:8d:db:bd:
fb:7e:04:ec:9c:80:75:70:50:00:44:05:d0:d7:12:
f3:15:3c:47:ec:48:a9:7f:02:c9:1c:1c:29:d0:35:
1c:d1:0f:60:d8:69:9e:38:b6:cc:0e:cf:df:64:78:
ab:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C0:B4:1B:A2:C8:1A:B0:6C:D1:F5:AD:90:ED:35:0B:CA:E8:B2:E6
X509v3 Authority Key Identifier:
keyid:74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:4c:be:12:1e:d0:96:c3:6a:bc:8c:94:4a:44:d9:eb:2b:42:
3c:5c:1c:33:f4:72:4b:39:69:d1:4b:ab:9a:f7:64:e4:73:5b:
d9:37:01:b4:29:99:09:c7:38:f1:1b:b4:9c:1e:2b:30:e9:13:
66:2d:b7:33:c3:fd:c9:6d:46:c9:0d:93:64:69:de:67:8c:7d:
fc:ac:af:11:4a:86:bb:e5:76:3c:19:de:0e:d3:40:01:4f:77:
42:58:bf:da:8b:78:2b:a1:ff:27:2c:29:07:88:fa:8e:ed:78:
4a:c6:9b:1c:d5:25:7a:5c:2a:30:27:9d:20:ea:12:b8:a2:95:
21:ab:0c:4e:25:71:0d:32:89:c2:fe:41:ec:cb:78:7c:d8:62:
f3:01:a9:fc:3e:ec:dd:f6:b8:f0:60:a5:51:f5:93:ff:10:82:
68:b4:3f:e5:c9:dc:f0:8b:63:a8:97:ee:a0:7c:ea:b2:b1:7b:
2c:5b:17:e4:9e:49:81:d4:b0:4a:86:f0:20:31:93:c0:be:e4:
4b:d3:08:80:c8:c2:4f:ba:4f:2f:3b:42:75:56:46:ae:d5:79:
06:99:33:7c:e6:67:d7:ec:8c:cb:e0:ba:61:d6:3c:6c:43:2a:
51:73:e2:48:80:ab:02:7f:99:cf:b7:dd:27:55:1b:f3:5e:01:
50:15:69:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:56:24 2026 by rpki-client