Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/fe6f93-b2fc-49e0-be87-34bb710a3478/1/rdPuwzG3AqIGtU3-kGO4wXpCuBw.mft
File: rdPuwzG3AqIGtU3-kGO4wXpCuBw.mft (raw, json)
Hash identifier: XLZX0q3Fho3H2DduTLCs+g5JAN+UGv+st8YWWqjtWhU=
Subject key identifier: DE:F7:4B:E9:35:6C:31:6D:4E:C1:9A:1A:84:D9:16:09:90:B2:50:C5
Authority key identifier: AD:D3:EE:C3:31:B7:02:A2:06:B5:4D:FE:90:63:B8:C1:7A:42:B8:1C
Certificate issuer: /CN=add3eec331b702a206b54dfe9063b8c17a42b81c
Certificate serial: 019FFA5B31FBDBD38BE56FC5AFE2FFEE83F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdPuwzG3AqIGtU3-kGO4wXpCuBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe6f93-b2fc-49e0-be87-34bb710a3478/1/rdPuwzG3AqIGtU3-kGO4wXpCuBw.mft
Manifest number: 0144
Signing time: Thu 13 Aug 2026 09:01:48 +0000
Manifest this update: Thu 13 Aug 2026 09:01:48 +0000
Manifest next update: Fri 14 Aug 2026 09:01:48 +0000
Files and hashes: 1: WgFjeIjodHf0tIFJwgd7qL6VzDY.roa (hash: SbLcaGFtR51gDtKvy7+lV/tvtr//sjAXrktSn3Oq23Q=)
2: rdPuwzG3AqIGtU3-kGO4wXpCuBw.crl (hash: clZs0DIk3eWC0qjy6vwy3HYds4Oi/L5iaFyZg4zEjP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe6f93-b2fc-49e0-be87-34bb710a3478/1/rdPuwzG3AqIGtU3-kGO4wXpCuBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/fe6f93-b2fc-49e0-be87-34bb710a3478/1/rdPuwzG3AqIGtU3-kGO4wXpCuBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rdPuwzG3AqIGtU3-kGO4wXpCuBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 09:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:5b:31:fb:db:d3:8b:e5:6f:c5:af:e2:ff:ee:83:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add3eec331b702a206b54dfe9063b8c17a42b81c
Validity
Not Before: Aug 13 09:01:48 2026 GMT
Not After : Aug 14 09:01:48 2026 GMT
Subject: CN=def74be9356c316d4ec19a1a84d9160990b250c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:35:8a:04:8c:59:a4:c6:f8:10:21:dd:ca:6f:
13:9a:6a:2e:76:3e:e7:a8:7c:86:0f:ac:f5:23:17:
41:9c:02:49:19:92:6c:45:ec:8f:f6:ca:22:8d:19:
9e:98:f4:69:10:4d:50:5d:82:ef:81:94:58:13:88:
29:d9:f3:9c:d5:c0:28:55:62:d0:86:e5:6f:d1:c1:
03:22:fd:91:d1:69:ab:e2:43:2b:0d:44:b0:0a:8a:
64:7c:4c:28:5d:45:03:4d:29:fb:69:15:67:fc:e5:
fd:47:41:45:ac:b0:21:82:cc:cb:a0:91:4a:19:50:
ea:cb:b7:03:fd:7d:6d:cf:25:20:0d:a6:8e:d4:70:
ac:f7:11:b9:8e:6d:56:43:6e:d9:55:28:18:84:9c:
21:9e:3d:95:bc:34:5b:fa:c7:cd:5e:bc:50:f4:b7:
b8:fa:a8:6c:de:92:53:50:66:3a:bd:14:0a:af:25:
57:65:c0:a6:cc:4b:ea:f3:a6:3c:e5:65:3f:ee:d9:
1b:10:62:7d:08:28:e9:e8:2e:27:ff:90:91:23:3a:
57:2c:e4:76:84:e3:d8:70:94:0f:7c:d8:96:3d:33:
d2:49:d9:b6:42:49:a4:ac:06:19:25:a7:b5:12:e4:
a3:b8:4b:1b:02:41:94:66:73:4f:61:06:27:2d:b7:
4a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F7:4B:E9:35:6C:31:6D:4E:C1:9A:1A:84:D9:16:09:90:B2:50:C5
X509v3 Authority Key Identifier:
keyid:AD:D3:EE:C3:31:B7:02:A2:06:B5:4D:FE:90:63:B8:C1:7A:42:B8:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdPuwzG3AqIGtU3-kGO4wXpCuBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe6f93-b2fc-49e0-be87-34bb710a3478/1/rdPuwzG3AqIGtU3-kGO4wXpCuBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe6f93-b2fc-49e0-be87-34bb710a3478/1/rdPuwzG3AqIGtU3-kGO4wXpCuBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:4b:68:3a:73:e0:ed:5e:b5:2e:14:68:f6:00:bc:9f:c4:3c:
ec:36:43:7a:82:5d:66:d9:2a:68:67:ff:7d:76:d1:8a:4d:79:
04:c4:05:de:f4:e8:38:0d:fa:f8:2e:8a:53:c4:18:32:a1:2c:
a4:97:91:4e:61:6d:4c:ac:36:93:1d:8a:db:34:0a:38:d2:b8:
c0:1f:6c:1a:97:56:94:fb:48:a1:5a:3d:80:da:57:d6:82:06:
df:90:61:95:2e:b6:f7:cb:e5:7b:c1:68:cc:b1:5f:36:2b:7a:
30:12:53:85:60:b4:51:05:bf:d8:87:ac:4c:a9:34:00:7a:3c:
22:fc:3c:8c:ba:a0:bd:c1:6c:14:5f:01:34:23:b2:bf:f5:fb:
dd:d1:08:79:bf:5f:63:1c:ed:b6:7d:76:44:ec:8f:33:68:ce:
ee:37:ee:aa:94:48:25:68:c3:83:c5:5f:9a:b1:4e:44:4a:a9:
fa:10:9d:f9:d3:a7:51:89:73:92:1e:10:da:07:3b:a5:3d:d5:
b1:81:fc:b5:bf:79:9d:f6:03:d1:79:fe:64:83:e0:85:6b:ac:
94:6c:c5:9b:f6:dc:0e:80:eb:cd:fe:be:11:f1:bd:04:22:9a:
23:6f:2f:64:b4:54:f6:be:86:1d:50:57:a2:ed:ba:23:62:74:
e1:1d:9c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:16:35 2026 by rpki-client