Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
File: dxvOKaNsveiYrABwfblRQ_hqeSI.mft (raw, json)
Hash identifier: zqKx1ScWFK+rttCsK97ztvAMuWaTI/tx84EHTpjJ1q8=
Subject key identifier: B6:C1:E2:75:32:27:EC:F7:0F:B7:7E:07:76:6C:D3:D6:D8:71:1E:3F
Authority key identifier: 77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22
Certificate issuer: /CN=771bce29a36cbde898ac00707db95143f86a7922
Certificate serial: 019F19B12D4A6E24CF83EC2B50313576B28C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
Manifest number: 1167
Signing time: Tue 30 Jun 2026 18:01:09 +0000
Manifest this update: Tue 30 Jun 2026 18:01:09 +0000
Manifest next update: Wed 01 Jul 2026 18:01:09 +0000
Files and hashes: 1: dxvOKaNsveiYrABwfblRQ_hqeSI.crl (hash: v5eQyeGQekpnmBGAV6jfnADeQhI8mC5xQFOzF3P5f0w=)
2: qZ8aQgjdabGbDv-i6H620T5YhwY.roa (hash: UdXrLbOlQenxMN6hG/0L/eJWuifEwthlbNrK+9DhFyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:b1:2d:4a:6e:24:cf:83:ec:2b:50:31:35:76:b2:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771bce29a36cbde898ac00707db95143f86a7922
Validity
Not Before: Jun 30 18:01:09 2026 GMT
Not After : Jul 1 18:01:09 2026 GMT
Subject: CN=b6c1e2753227ecf70fb77e07766cd3d6d8711e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b8:c3:81:19:53:33:90:7b:37:67:24:2e:0c:
a8:96:96:66:68:61:d4:f1:e2:4f:53:1e:1b:6a:84:
94:09:38:ca:fc:7c:24:e6:f7:bd:02:01:a6:b6:10:
78:74:27:85:49:27:61:fb:58:82:81:2b:c3:40:c5:
bb:49:f2:a8:dd:c3:5e:48:98:df:dc:ae:33:bb:3b:
37:95:cb:13:db:3d:40:55:d5:d1:5b:49:4a:66:85:
f9:88:5e:73:75:67:c0:28:68:77:49:5a:9d:b2:b4:
95:67:8d:44:03:a8:3d:1d:09:e3:69:e7:98:b9:63:
6f:02:e4:02:ed:40:c3:74:0a:b6:c9:70:6a:c7:07:
da:f6:40:12:38:c0:53:e0:c3:3b:03:c7:d5:60:90:
bd:ec:ae:d0:b7:85:b2:68:1b:3e:f0:34:31:25:85:
31:75:05:eb:4c:c3:3f:1d:9a:6a:f3:92:a0:bf:9d:
07:93:31:06:3b:9e:d0:6c:aa:33:3d:90:a7:dc:09:
d3:58:5c:fc:25:78:e8:0f:2d:2d:38:34:de:6d:3f:
70:f1:f8:5e:73:a1:38:8c:0c:c5:46:45:50:a6:aa:
a8:d4:ae:5e:2a:2f:2f:c6:98:fa:12:17:40:6c:7b:
39:48:8d:f9:46:5a:fe:53:66:27:43:4c:04:21:1d:
9a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C1:E2:75:32:27:EC:F7:0F:B7:7E:07:76:6C:D3:D6:D8:71:1E:3F
X509v3 Authority Key Identifier:
keyid:77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c2:f5:e0:d7:16:8f:ed:47:80:a2:f2:6a:84:88:30:42:d1:
f7:1d:8d:a5:4d:e3:a4:9a:4b:c4:ed:38:33:c6:e3:52:f7:8f:
34:53:bd:d1:10:c5:3b:85:bf:05:94:68:72:d0:ed:de:fc:a4:
4e:00:c7:1c:ad:0f:c3:05:26:25:0f:90:67:80:3d:75:9a:c2:
b7:0d:a3:b4:13:3c:30:fa:a6:70:96:3f:69:2b:a5:fd:e3:6b:
e1:05:1d:05:3d:f6:6e:6c:a1:30:83:23:71:57:d5:2c:31:1d:
c0:42:c3:59:78:88:9e:09:bf:d5:95:3e:3c:3f:90:09:75:b3:
f6:d3:ef:67:5e:e1:d9:30:5f:ab:3c:3f:39:75:47:f4:e7:75:
00:8b:48:dc:e1:e2:d3:48:54:c5:b4:7b:a7:d7:be:4e:1e:ed:
1a:f1:4a:e7:9f:85:b6:d4:57:35:c5:b2:dd:f6:4b:73:46:a3:
37:74:93:53:d6:45:6f:ee:b3:8d:2c:64:eb:02:0e:a3:5c:21:
32:c2:40:aa:cf:b5:80:c4:54:2b:5b:03:40:77:cf:1d:25:0e:
3d:6d:b8:1e:5f:f5:1f:99:39:bf:0c:56:b8:a9:f2:62:80:a3:
d2:c1:3a:46:1a:25:60:37:d7:56:85:8e:04:ba:04:88:06:3f:
fc:9e:b9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:18:30 2026 by rpki-client