Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
File: DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft (raw, json)
Hash identifier: nY6tW5/UDm5m7dGbdt6t7EGnFk8JRsu4K9oDAD9CBbU=
Subject key identifier: A7:8B:16:75:7C:8D:97:D1:C1:2E:17:C9:91:B5:7D:97:F3:89:B7:C8
Authority key identifier: 0E:D9:51:B4:3A:B9:71:FD:92:EB:63:EC:26:A5:B2:26:ED:13:C7:52
Certificate issuer: /CN=0ed951b43ab971fd92eb63ec26a5b226ed13c752
Certificate serial: 019F1943F7DDB688E7370615E357B4DAB5BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
Manifest number: 0769
Signing time: Tue 30 Jun 2026 16:01:52 +0000
Manifest this update: Tue 30 Jun 2026 16:01:52 +0000
Manifest next update: Wed 01 Jul 2026 16:01:52 +0000
Files and hashes: 1: DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl (hash: UBLoB/WgJgYc/BXaDyLDNxGKkZLvIoRLWaxJmgdTUsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:f7:dd:b6:88:e7:37:06:15:e3:57:b4:da:b5:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ed951b43ab971fd92eb63ec26a5b226ed13c752
Validity
Not Before: Jun 30 16:01:52 2026 GMT
Not After : Jul 1 16:01:52 2026 GMT
Subject: CN=a78b16757c8d97d1c12e17c991b57d97f389b7c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:42:43:a1:20:ba:96:10:e0:92:2a:be:a0:5c:
60:4c:7c:57:7d:40:5a:6d:83:ec:30:7a:32:2c:32:
90:78:41:4c:8c:8a:8f:34:f5:a1:89:c9:70:16:b4:
c6:a4:c7:0d:70:3a:60:af:ab:e0:f3:97:7d:81:64:
df:d6:f3:cb:6b:b3:44:54:6b:9b:c4:cc:92:ea:bd:
ac:df:a1:4b:5b:ec:8f:75:5f:a6:0e:40:30:9e:89:
f6:f7:e2:eb:9d:c3:20:4c:f3:b3:e9:fc:0f:d5:67:
dd:25:be:5e:ce:fe:5b:26:f1:cb:c6:64:61:ef:b3:
1b:c9:3c:0c:59:16:0f:2a:1f:b3:d1:03:61:4d:88:
ed:11:13:4f:a2:11:86:14:51:db:f9:3b:6f:12:36:
90:ba:13:95:69:1e:2a:80:04:44:60:62:a2:91:3b:
76:69:da:ec:78:29:5d:ce:92:c6:ae:ae:48:3a:a7:
23:ae:1d:da:78:63:a3:68:ff:2e:01:04:1e:d5:c2:
b0:7b:d9:8e:dd:34:67:a1:a7:f9:25:d4:29:b3:97:
db:82:67:61:fc:6f:35:a1:c4:fa:fd:4b:84:36:88:
44:e3:9a:e3:f7:07:00:7c:2a:ef:86:0f:99:3c:44:
e2:e0:9f:f2:cd:11:11:30:24:ff:a2:d8:1f:74:9a:
64:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:8B:16:75:7C:8D:97:D1:C1:2E:17:C9:91:B5:7D:97:F3:89:B7:C8
X509v3 Authority Key Identifier:
keyid:0E:D9:51:B4:3A:B9:71:FD:92:EB:63:EC:26:A5:B2:26:ED:13:C7:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:7d:0e:d4:6e:8d:e2:34:e3:42:50:47:88:9a:b2:14:7d:9a:
d9:75:fc:18:ea:c0:5d:c9:36:a9:6e:11:eb:d2:13:c8:3c:f5:
f9:47:bb:bb:a3:0e:b2:88:20:83:30:7a:30:0f:45:e6:6f:37:
5a:f8:71:4c:03:a4:75:d7:bb:d7:50:f1:16:84:00:c4:0a:15:
68:5d:7d:7a:6b:23:63:22:91:8e:bd:ef:ec:c2:eb:5d:a9:c8:
b8:86:37:eb:fd:3e:82:da:8c:ad:b8:b6:4e:42:d4:50:20:5d:
86:37:f4:64:04:3e:8b:76:83:a3:76:46:cb:e8:5b:17:4e:77:
69:82:8c:a6:92:9a:45:d0:04:4b:e5:18:07:71:38:03:ef:0d:
21:ab:ad:25:c4:9a:ae:30:7d:90:6c:f7:fa:85:97:66:1b:66:
9e:30:49:4c:2c:da:34:e5:55:c3:16:91:f8:24:63:52:0d:7d:
ff:8c:e7:6a:05:06:bf:d0:7c:bc:3e:20:e1:fc:ec:74:fe:62:
ee:1b:d2:ec:07:eb:ec:79:0d:91:b7:61:42:b6:5f:4f:33:45:
53:24:32:6f:11:db:91:05:eb:c3:8b:81:de:4c:40:86:6c:58:
8a:a4:42:a9:96:eb:f9:2c:4c:b9:b2:26:54:b8:d9:f4:7d:24:
05:c2:20:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:26 2026 by rpki-client