Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
File: dPEFnCc8UO3PPc7fxYABUuyR26I.mft (raw, json)
Hash identifier: 5jkQc+5lx0QfHYVpoYYdKISTKFJo7DvJna1GdLZ1duI=
Subject key identifier: 34:06:9F:D5:0E:CD:E1:27:4F:7A:93:89:F6:B1:0C:87:3B:AD:C0:66
Authority key identifier: 74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
Certificate issuer: /CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Certificate serial: 01A08B30F44AD6DD6C2BDA7F48B78152E7DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
Manifest number: 1A46
Signing time: Thu 10 Sep 2026 12:00:36 +0000
Manifest this update: Thu 10 Sep 2026 12:00:36 +0000
Manifest next update: Fri 11 Sep 2026 12:00:36 +0000
Files and hashes: 1: 4zHqkXwTdPpErUuwool8-zX-SB4.roa (hash: LHnM5v5Sz1IzlHeFp2joapwPeszU3VAj2kHXfdYdwu4=)
2: dPEFnCc8UO3PPc7fxYABUuyR26I.crl (hash: u7Bd2r+RSjfEUmdnMxEdxYywH+N0QTccaNhMCxm6pQQ=)
3: f_myMJMSIIWO9m-PmHiygg0XXSs.roa (hash: 3LE3GccOE6KqVlj9DZ+EFPId6e66LFjW7NsGN3ZdmPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:30:f4:4a:d6:dd:6c:2b:da:7f:48:b7:81:52:e7:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Validity
Not Before: Sep 10 12:00:36 2026 GMT
Not After : Sep 11 12:00:36 2026 GMT
Subject: CN=34069fd50ecde1274f7a9389f6b10c873badc066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6a:62:58:8f:ad:f8:f7:34:e7:71:af:c0:ae:
da:30:07:95:e7:e7:e1:92:99:05:bf:a3:d9:df:4b:
e2:14:e5:df:46:a4:d3:78:80:07:1a:33:76:f2:c2:
6d:3f:77:3b:aa:63:4c:c6:7b:9d:56:0f:51:86:a9:
cb:4e:05:ab:66:cd:a8:b4:c4:c9:39:b2:43:9a:d7:
e0:f8:45:bb:f8:68:ad:52:19:59:8e:a4:d6:17:16:
bd:8e:d2:77:da:15:99:6a:58:a9:35:9b:a6:26:52:
4c:bf:0c:20:0b:ba:10:bd:0f:e4:ee:2e:ac:50:ad:
13:df:ca:13:82:60:99:b9:70:d5:e2:4e:af:b9:4a:
96:f2:e0:3c:83:71:f3:91:72:56:94:65:51:08:46:
d7:5d:5d:22:87:14:d9:36:b7:e6:35:9d:dd:54:84:
ca:c3:55:d7:3c:fe:84:a0:ce:17:05:9f:c1:33:b6:
d6:8f:54:5d:f4:2a:82:6e:64:1e:c7:f9:1a:30:fb:
cd:2f:74:ec:62:13:43:e9:e9:fd:8c:00:22:85:6b:
fe:ef:ec:f0:13:5f:ee:96:47:17:40:be:bb:b7:aa:
44:9b:48:53:fb:2c:6a:d0:46:8a:2a:81:f6:0d:4f:
6c:a9:93:85:f5:63:21:71:ef:70:75:8d:40:dc:d4:
71:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:06:9F:D5:0E:CD:E1:27:4F:7A:93:89:F6:B1:0C:87:3B:AD:C0:66
X509v3 Authority Key Identifier:
keyid:74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:45:6d:0a:e1:c1:21:25:60:8d:9c:80:25:6c:c3:0b:c3:66:
a7:2e:6b:d5:40:c4:5d:66:8e:1b:68:46:a2:9e:e8:a2:58:02:
1c:74:b4:dc:8f:04:74:e7:b5:1d:ff:35:3c:45:e0:66:06:d4:
71:9d:c6:ae:ee:46:5f:42:93:dd:a0:26:2c:f8:fc:7b:a9:ad:
0d:55:c8:f4:d0:24:03:10:86:90:37:0c:15:0d:c4:61:bc:50:
64:db:45:cc:de:1c:a3:05:56:b5:4b:67:59:95:af:d3:21:9f:
8b:aa:37:33:2b:f5:1b:38:f4:b9:b7:6f:8d:0d:1d:76:ee:9a:
a6:8d:ee:33:44:e2:63:a0:cb:4b:5d:ae:6c:fc:e9:97:28:5f:
07:c4:f8:99:fd:69:2d:a5:ce:20:5c:1a:c1:c4:f0:7f:49:a5:
58:41:d6:b5:4c:73:c1:f4:c4:85:e4:04:5d:27:46:a0:d1:c7:
19:d3:86:77:b1:a8:c1:e2:e8:37:1d:c4:a5:67:c3:e2:a4:b2:
4c:61:8c:7e:95:53:2f:e7:3a:92:fb:21:1b:4b:57:54:20:6d:
7e:e0:7b:16:75:df:a3:a8:76:51:5b:85:81:c0:00:03:4a:a1:
44:0c:e7:ad:d8:5f:7c:d1:03:4a:83:e2:60:73:ab:20:9d:5f:
28:25:b5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:43:02 2026 by rpki-client