Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
File: dMf46RuB_mSHMHxSJusET5I5bOo.mft (raw, json)
Hash identifier: pY4G8lHbEP7ofjogtPU50rvD7KVdTR9eoejA9AaeLhs=
Subject key identifier: 56:A4:E5:8C:BB:68:88:D8:C0:C9:14:49:67:51:B0:E7:FC:AF:8A:84
Authority key identifier: 74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA
Certificate issuer: /CN=74c7f8e91b81fe6487307c5226eb044f92396cea
Certificate serial: 019FA3732AB06E7434C7D50463071E7F1EC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
Manifest number: 1963
Signing time: Mon 27 Jul 2026 12:01:01 +0000
Manifest this update: Mon 27 Jul 2026 12:01:01 +0000
Manifest next update: Tue 28 Jul 2026 12:01:01 +0000
Files and hashes: 1: ZMUCUaol16FS16uvGYc5LMi3mms.roa (hash: 1PMSBIos5jL1U1+prZU3noEZyRlQ7CsZEb3CRHH/Kmg=)
2: dMf46RuB_mSHMHxSJusET5I5bOo.crl (hash: PW3XKwJ8+4grVGeba2+bksPc+zxCKDJacwNLyHemUcA=)
3: tTSdWCx25FCn0IY4HobZWct52gk.roa (hash: fHmHb3pigGy4UNI0P79QY+ZoI7ILqOgBSDwz0m8aRvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:73:2a:b0:6e:74:34:c7:d5:04:63:07:1e:7f:1e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74c7f8e91b81fe6487307c5226eb044f92396cea
Validity
Not Before: Jul 27 12:01:01 2026 GMT
Not After : Jul 28 12:01:01 2026 GMT
Subject: CN=56a4e58cbb6888d8c0c914496751b0e7fcaf8a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:44:23:42:a9:f1:03:b5:50:26:b7:dd:9b:1f:
87:c7:8c:a9:bc:1a:62:ff:4d:43:6e:e3:a6:30:d2:
8c:2f:bb:0d:de:f0:ce:fd:34:08:8a:37:d9:64:8f:
37:b7:e0:6a:fe:46:c6:9c:b0:ec:19:13:42:46:df:
10:67:36:ff:d5:17:e5:1d:1b:91:48:c4:1f:c6:90:
e5:50:d3:7a:8c:04:3d:44:1e:e1:86:1f:f6:24:ac:
96:89:21:e6:23:56:41:f3:28:c5:c4:22:e1:72:a3:
40:af:fc:3e:80:b2:a3:25:19:d5:a5:cc:e0:1e:aa:
d5:47:7c:25:6f:a2:77:e7:66:d9:a5:22:45:c8:45:
08:9b:bc:a3:e7:97:51:c8:8b:d4:4b:ce:dd:63:26:
99:c9:d5:8b:91:f1:ad:cf:b5:fe:91:e6:cc:08:c2:
2a:bc:9b:cb:47:1c:e1:d7:c4:c5:8c:8a:fc:9a:96:
d6:19:50:a3:90:f1:78:ef:3d:e1:9f:fd:5d:68:1e:
4c:43:a0:8c:be:b7:22:fe:5a:cc:e4:56:76:c9:b6:
60:ef:bf:aa:1f:b7:a3:b4:f7:63:dd:77:67:0e:17:
d2:50:56:b1:b3:ad:a7:7f:04:4f:ac:29:97:85:23:
df:b6:d4:66:22:33:a7:d2:cd:83:f4:8b:da:bb:e3:
2a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A4:E5:8C:BB:68:88:D8:C0:C9:14:49:67:51:B0:E7:FC:AF:8A:84
X509v3 Authority Key Identifier:
keyid:74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:af:36:c2:a9:e3:85:7f:35:4f:b3:ea:e8:f1:8e:a7:a7:6f:
58:c0:57:52:b7:7d:37:85:61:65:15:98:b8:2c:97:5b:6a:fc:
2c:72:6e:74:24:45:0b:56:cb:70:17:a2:8c:d8:b7:bd:74:b6:
43:e0:82:1c:a3:93:3a:bf:8e:ea:f4:9e:a6:a0:bb:57:bb:af:
57:b0:64:b0:68:90:4d:fa:a6:15:26:64:04:21:c5:9c:12:51:
c7:16:f1:09:58:5d:48:da:fb:6f:4b:7b:55:0e:94:26:4f:2d:
2c:09:e6:c0:3a:7c:d6:40:ac:4a:d3:9f:78:7a:91:d3:7b:c8:
13:31:c9:9b:29:55:44:74:03:8f:3c:ec:fa:9c:25:5d:1a:a4:
dd:74:51:91:46:29:04:1c:0b:b7:72:ab:51:e8:c5:93:3e:85:
29:5b:d7:4b:bc:3e:5b:d7:41:19:c0:ab:d6:93:2c:7a:68:0a:
84:78:40:e4:46:c5:60:32:8f:37:54:74:7a:44:4c:35:8c:fc:
82:01:ef:55:65:15:54:27:d8:a8:11:d7:03:c7:7f:aa:fb:00:
61:0e:17:45:8c:ec:c6:75:68:f2:33:6c:54:76:0d:ea:45:c3:
bc:f5:05:4d:48:69:12:16:26:e1:dd:ea:9a:03:e6:df:86:ba:
49:3a:93:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:57:34 2026 by rpki-client