Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
File: dMf46RuB_mSHMHxSJusET5I5bOo.mft (raw, json)
Hash identifier: wynD7e3LuFlpcsH4vea3Qgp15NetUnrPFJ/A9G0aMg4=
Subject key identifier: 4B:91:3D:04:BB:EC:47:C1:6F:0B:37:DC:52:64:48:EA:C4:C0:3F:72
Authority key identifier: 74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA
Certificate issuer: /CN=74c7f8e91b81fe6487307c5226eb044f92396cea
Certificate serial: 019DD20869B0CBD3DD3D94135EFD7CB54BC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
Manifest number: 1872
Signing time: Tue 28 Apr 2026 03:00:59 +0000
Manifest this update: Tue 28 Apr 2026 03:00:59 +0000
Manifest next update: Wed 29 Apr 2026 03:00:59 +0000
Files and hashes: 1: ZMUCUaol16FS16uvGYc5LMi3mms.roa (hash: 1PMSBIos5jL1U1+prZU3noEZyRlQ7CsZEb3CRHH/Kmg=)
2: dMf46RuB_mSHMHxSJusET5I5bOo.crl (hash: 6x2q3Lq3pjk8IzCrd+zFEgS3ZYHXT935byOpd17C8gI=)
3: tTSdWCx25FCn0IY4HobZWct52gk.roa (hash: fHmHb3pigGy4UNI0P79QY+ZoI7ILqOgBSDwz0m8aRvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d2:08:69:b0:cb:d3:dd:3d:94:13:5e:fd:7c:b5:4b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74c7f8e91b81fe6487307c5226eb044f92396cea
Validity
Not Before: Apr 28 03:00:59 2026 GMT
Not After : Apr 29 03:00:59 2026 GMT
Subject: CN=4b913d04bbec47c16f0b37dc526448eac4c03f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a2:00:10:6b:f6:27:12:d8:f9:59:7c:f8:67:
af:1d:a9:dd:a7:bb:5f:55:66:e0:d5:b0:2a:f6:fc:
a3:1a:0b:54:58:63:19:63:5a:e1:c5:36:6e:43:49:
ba:48:c4:ed:64:08:e4:0e:4f:f1:09:9a:f3:e6:00:
5a:36:79:39:18:82:c5:6f:3d:54:9b:ed:69:f3:f9:
f9:83:29:9e:7c:28:79:59:63:58:f0:ae:a9:5e:47:
9d:33:c1:0d:db:6c:dd:a4:4f:7e:19:28:00:45:ab:
e7:e1:9f:8c:9b:f7:f8:55:14:cf:63:18:10:5e:d2:
51:d9:54:a5:87:9b:34:87:98:2f:a1:31:bb:14:46:
0d:25:03:8d:95:17:90:35:86:ff:24:b4:c2:1a:34:
46:77:70:ab:73:a9:d5:bc:d6:55:9f:6b:49:6d:4e:
62:64:e2:fe:32:08:4b:bf:da:b1:57:93:e0:20:f1:
3f:e1:88:98:f6:c5:34:d6:6c:fe:14:52:d6:3d:de:
c8:22:61:2c:da:a9:3e:ab:d9:14:84:2e:77:33:a5:
24:cc:c8:22:e6:1f:27:c5:de:ec:f3:14:a6:b9:f1:
ae:d0:c6:7b:96:fa:1e:a5:84:14:e5:29:38:49:92:
dc:55:d0:77:0f:95:75:7e:a9:b0:98:7d:5e:f2:77:
62:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:91:3D:04:BB:EC:47:C1:6F:0B:37:DC:52:64:48:EA:C4:C0:3F:72
X509v3 Authority Key Identifier:
keyid:74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:b9:20:ad:57:c3:36:a4:a5:b8:a1:f8:7a:b8:fa:df:16:01:
ad:6a:96:eb:b2:c2:56:27:d3:ca:14:1f:96:20:a9:a6:8b:18:
6a:94:64:fc:c0:bc:b4:90:c4:59:41:b4:bf:09:b0:55:5b:e6:
f3:fd:d9:75:df:5c:b2:68:29:75:18:0b:5f:14:1f:b2:16:fd:
65:d3:b2:2a:10:74:b7:71:0f:2f:bf:8f:6e:c9:69:18:9c:3d:
dd:b5:2b:c9:fa:4c:33:44:4e:51:5c:91:f3:fa:56:c3:5c:81:
a6:7c:89:6e:be:06:0d:07:f4:cb:1e:8c:51:5a:0c:ef:09:c1:
0c:5f:4c:18:d1:e9:23:98:86:d3:c5:5f:0d:f9:22:43:a9:16:
66:bc:4c:f7:d0:d4:ab:25:70:f7:fd:f4:50:dd:dd:76:3c:93:
f0:0c:af:f4:84:24:c5:50:12:00:f7:2d:1f:02:be:e0:7f:57:
5d:e3:c9:ac:05:a0:2d:8d:e3:0f:30:c7:d0:22:60:d5:0e:6d:
84:79:33:06:78:94:1d:8c:39:8e:72:10:16:62:f2:1b:c1:e7:
48:d9:b5:86:4a:5f:e3:1e:28:74:4f:83:a8:f2:82:44:bf:dc:
bb:ed:59:18:f4:ec:21:2e:d0:4c:da:35:4d:49:24:64:29:e6:
74:d3:aa:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 04:45:58 2026 by rpki-client