Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
File: dMf46RuB_mSHMHxSJusET5I5bOo.mft (raw, json)
Hash identifier: aCtKeN6WxyYxYrP7YFQAD92mdJNUJ9U0E2PUBfVwsIA=
Subject key identifier: F6:DD:59:13:B3:DA:DB:4A:EC:1D:22:C0:F0:6B:4D:93:DB:C2:BF:AF
Authority key identifier: 74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA
Certificate issuer: /CN=74c7f8e91b81fe6487307c5226eb044f92396cea
Certificate serial: 019DD01A1D07DF3413EB0D87A0A201B089D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
Manifest number: 1871
Signing time: Mon 27 Apr 2026 18:01:05 +0000
Manifest this update: Mon 27 Apr 2026 18:01:05 +0000
Manifest next update: Tue 28 Apr 2026 18:01:05 +0000
Files and hashes: 1: ZMUCUaol16FS16uvGYc5LMi3mms.roa (hash: 1PMSBIos5jL1U1+prZU3noEZyRlQ7CsZEb3CRHH/Kmg=)
2: dMf46RuB_mSHMHxSJusET5I5bOo.crl (hash: +ELWo6CcUznM1lNAqKiWBJsXxfPfOLKeyH1HWeavmEk=)
3: tTSdWCx25FCn0IY4HobZWct52gk.roa (hash: fHmHb3pigGy4UNI0P79QY+ZoI7ILqOgBSDwz0m8aRvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:1a:1d:07:df:34:13:eb:0d:87:a0:a2:01:b0:89:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74c7f8e91b81fe6487307c5226eb044f92396cea
Validity
Not Before: Apr 27 18:01:05 2026 GMT
Not After : Apr 28 18:01:05 2026 GMT
Subject: CN=f6dd5913b3dadb4aec1d22c0f06b4d93dbc2bfaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6f:14:28:1c:31:65:20:03:0c:00:df:9f:b3:
d8:be:f3:0e:1c:f5:91:aa:0a:b4:a7:33:87:44:23:
a3:05:01:b8:46:4e:0a:b7:dd:1f:d6:ab:f9:7b:07:
4e:21:ef:24:4f:b8:f2:08:24:85:ea:94:e3:6b:d9:
0a:fb:2a:e4:75:a0:91:64:04:91:0c:70:db:00:cf:
35:13:02:69:89:87:5a:01:d2:30:44:fa:f1:a8:2e:
a0:c6:71:64:c6:c9:b2:1e:57:b6:23:36:cd:fc:aa:
11:40:02:4b:a3:cf:9b:fa:8a:84:e0:50:79:f9:91:
19:e1:63:0d:9e:07:c6:30:3d:8f:6f:ef:b4:9f:f5:
f0:65:e7:2b:f7:25:79:73:45:c3:91:3a:26:43:dc:
d9:63:60:78:28:bb:35:74:ca:25:3e:98:89:58:67:
11:da:5c:24:64:44:0f:eb:ed:c9:2e:ff:c3:70:03:
2f:b0:dd:d2:50:4b:f5:a1:f1:9a:c8:5a:b1:09:45:
2b:03:e6:5a:73:c7:69:a6:d6:67:7c:02:f1:ab:3c:
b8:56:90:de:70:82:24:39:ab:2e:13:c4:58:bb:28:
f8:28:43:b0:97:fb:35:3a:94:06:cf:1d:50:cc:c4:
4d:45:15:7f:fb:68:5d:62:72:f7:91:d4:50:ae:b3:
db:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:DD:59:13:B3:DA:DB:4A:EC:1D:22:C0:F0:6B:4D:93:DB:C2:BF:AF
X509v3 Authority Key Identifier:
keyid:74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:a0:52:79:16:15:6b:24:d6:f3:83:f1:71:9b:38:05:69:ec:
4d:7a:0b:61:62:2c:86:61:7b:9d:1c:a6:9b:da:f7:a9:e1:cb:
07:ee:19:2a:c8:48:dd:4b:f2:eb:a7:82:f1:32:91:27:5a:a4:
87:bb:f7:a6:ac:40:30:2f:21:a7:15:80:86:46:1c:1d:aa:01:
ba:ce:6c:ec:9c:f9:43:02:16:00:33:65:f8:38:f1:b2:59:f7:
87:e0:81:c0:81:25:9d:0a:5f:4b:3a:85:e9:d7:dc:fd:c2:8a:
8d:f0:04:57:bb:19:d8:bd:e7:33:33:6f:20:83:55:9f:f2:f6:
23:09:b0:79:07:51:39:c5:55:ad:90:7c:4c:b0:81:8b:90:c8:
68:fe:0a:fd:dd:23:c4:eb:91:80:37:d3:6f:d3:9f:72:ad:e8:
75:ac:5f:2a:31:78:1a:51:88:d6:24:53:c1:62:59:87:89:c2:
9e:88:43:70:6f:8e:8f:f8:2d:1d:7b:42:cc:2f:e1:da:a0:7f:
5b:19:95:d0:02:9f:fc:fe:e0:17:54:dd:8c:29:34:36:67:9e:
66:b7:1f:06:5b:5c:8c:03:17:4f:7b:f0:55:59:d3:56:cb:d0:
7b:c6:90:45:d2:42:46:f8:08:88:f2:93:3d:0d:77:89:8e:5d:
20:44:97:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:23:30 2026 by rpki-client