Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
File: dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft (raw, json)
Hash identifier: duFxHr5dgeIomtRVs+SIP64WqDaVO0q1ULAX+cPt3ls=
Subject key identifier: D3:A7:E9:89:F8:39:BE:0C:A1:83:58:A6:E4:F6:B1:D6:A4:6F:95:DD
Authority key identifier: 74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9
Certificate issuer: /CN=74d7da63929999603395877448ce50ac6e0213a9
Certificate serial: 01A17ADFEFCB4839114320D02D4EEDF5B19C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
Manifest number: 132B
Signing time: Tue 27 Oct 2026 01:00:58 +0000
Manifest this update: Tue 27 Oct 2026 01:00:58 +0000
Manifest next update: Wed 28 Oct 2026 01:00:58 +0000
Files and hashes: 1: SwOC6LWRUnc-Ogb7u3vxF_0mea4.roa (hash: /q8N1XNG3IXyW6BA6haLHv1Ug3hcBfXRJEVoULv8zlE=)
2: dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl (hash: qiLDM5LcWRUC/4CN/IPC/acHznwjkcElqn4g3+uJiMM=)
3: iGjEi-RetR317ng4nZLQERiyp5Y.roa (hash: VlJirjJKzaqO+FqHC1L2a0e5Ten97AODI8Xgtdno6FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 01:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:df:ef:cb:48:39:11:43:20:d0:2d:4e:ed:f5:b1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d7da63929999603395877448ce50ac6e0213a9
Validity
Not Before: Oct 27 01:00:58 2026 GMT
Not After : Oct 28 01:00:58 2026 GMT
Subject: CN=d3a7e989f839be0ca18358a6e4f6b1d6a46f95dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:94:31:c4:db:d7:94:28:21:10:8f:cf:10:36:
57:b6:6d:df:f1:07:6b:29:3c:06:62:25:77:c7:17:
4a:00:a5:47:af:82:1a:51:a3:4b:a3:ef:88:88:42:
b7:d3:29:0e:73:36:3e:76:a3:bb:32:dc:b6:4b:a2:
c4:3a:67:d6:1a:67:c1:4f:3b:36:92:84:b8:3d:16:
ed:f0:a1:b0:e2:47:ec:b3:dd:50:d4:4a:00:1d:c5:
fa:4b:ad:f9:fc:1e:db:ca:c7:52:e1:fd:62:9d:a1:
14:2c:96:03:80:4e:07:60:78:b4:ee:24:a9:e2:cd:
58:6a:09:35:ea:99:24:21:20:d7:ba:ec:d9:3f:31:
90:b3:44:c9:ce:77:d3:87:91:05:44:70:b9:3d:9b:
76:3e:ab:62:cf:d9:59:ba:12:8b:c7:5d:43:45:db:
ac:38:3d:dd:46:4a:2f:c5:f7:88:bd:b2:2e:11:d6:
aa:27:2b:91:e1:74:e6:36:68:81:01:2f:57:54:f3:
9c:08:7e:5e:d8:96:e3:1e:91:45:be:35:05:ec:81:
a8:ed:52:53:14:33:91:66:30:82:6b:c8:ac:40:99:
ae:33:e0:30:5f:1c:11:ed:ec:34:1b:fb:bb:ba:ae:
c4:be:07:e7:18:59:aa:b5:db:e9:d0:b9:1d:05:b5:
83:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A7:E9:89:F8:39:BE:0C:A1:83:58:A6:E4:F6:B1:D6:A4:6F:95:DD
X509v3 Authority Key Identifier:
keyid:74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:96:82:ad:35:db:40:9b:2d:c4:f2:3d:25:f7:bf:c4:84:d1:
08:bf:d5:34:6c:9c:80:05:37:20:1a:e0:f8:94:6d:c9:94:ca:
a0:63:6e:cc:dc:13:13:47:47:c7:2b:4c:3b:af:6e:74:78:f2:
ed:6f:82:9a:d2:dc:54:27:d5:b9:b2:88:1b:30:cd:cf:1f:ea:
bd:5e:d9:5a:b7:b5:d5:6d:c2:f7:da:fe:9f:37:cb:92:03:7a:
a5:f2:f9:c0:c0:d7:3c:92:69:86:67:ba:bc:16:d9:39:27:40:
86:29:87:36:a0:6f:50:d5:1f:eb:6e:83:9e:c7:ba:c2:50:f6:
1f:6c:f4:79:f5:01:2d:9c:c0:e2:f1:f2:5b:55:48:1c:58:78:
a5:ff:71:17:f5:04:82:7e:fc:0b:67:7f:00:36:df:0a:5d:27:
52:2b:cc:ac:2d:cf:9c:d0:ed:8f:5f:25:3c:9d:68:68:8b:cd:
a4:df:5a:b1:9d:f7:8e:39:8a:62:15:7c:5a:84:5c:4d:93:5b:
f6:a0:d1:35:0b:8f:07:e5:68:cc:3f:91:91:f2:37:4f:97:4b:
57:a4:b4:7e:29:f4:4b:4a:50:7f:d3:6c:c9:c1:af:12:8a:66:
b7:55:0b:c4:ce:d3:ef:81:1f:1a:54:98:1d:ee:40:80:c3:2c:
a0:5e:28:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:23:11 2026 by rpki-client