Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
File: _Dq1XVdQnL-ueYvXGqojs0RNjlo.mft (raw, json)
Hash identifier: tn0/nd2kRA8IHnSN6npPBup3aZItTWR4LV/759ncWg8=
Subject key identifier: 68:74:EC:4C:EA:DE:11:8F:34:60:40:CE:96:F0:2A:32:5E:B5:5C:01
Authority key identifier: FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
Certificate issuer: /CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Certificate serial: 019E886BF66AB0D851650178597A6EE3EF92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
Manifest number: 09A5
Signing time: Tue 02 Jun 2026 13:00:37 +0000
Manifest this update: Tue 02 Jun 2026 13:00:37 +0000
Manifest next update: Wed 03 Jun 2026 13:00:37 +0000
Files and hashes: 1: _Dq1XVdQnL-ueYvXGqojs0RNjlo.crl (hash: sL7OB4DA9tCZLPsdaPtEKFmi1kkTVEIyzX0+vU+HbME=)
2: bdFa7noc5JULgEIUUp2O_nnsfX8.roa (hash: oE4E3OOq0qDI/T3VHEtrFh4lpygnjYYLcPsEtbasbyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:88:6b:f6:6a:b0:d8:51:65:01:78:59:7a:6e:e3:ef:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Validity
Not Before: Jun 2 13:00:37 2026 GMT
Not After : Jun 3 13:00:37 2026 GMT
Subject: CN=6874ec4ceade118f346040ce96f02a325eb55c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7a:96:4a:38:77:be:2e:59:b0:5b:b0:56:fd:
16:66:96:4b:a8:60:4f:08:d9:03:36:75:bd:a7:f5:
92:e0:28:98:a0:26:96:b3:d1:7f:75:74:04:94:81:
a5:e5:68:01:9b:db:f7:77:ff:d0:47:51:60:66:0c:
a2:5c:3d:ba:03:c8:f4:22:e7:78:25:ce:81:4f:56:
bb:2e:92:e1:ec:eb:fc:9d:48:49:1f:7f:60:f6:b8:
19:cd:ff:4b:53:fe:1b:2e:ee:08:37:f7:40:03:6c:
8b:74:aa:ad:94:e6:73:39:7a:a6:8e:4f:f6:ed:6f:
91:46:72:cf:c2:7f:48:0f:71:47:11:e7:98:ba:44:
1e:5d:f0:2e:f1:26:28:dc:7b:e9:7a:b4:89:16:01:
dc:3f:3b:0e:23:4e:f8:ee:bd:00:83:5f:c6:7f:a2:
1b:12:a6:b4:26:99:49:34:c0:f6:b9:30:48:70:54:
6e:bc:b6:ea:e7:27:1b:d5:13:03:80:84:ce:30:a5:
90:10:06:f2:b4:ee:bf:5b:f1:3f:6f:37:54:41:d4:
dc:6a:85:94:46:20:5d:20:e4:44:89:95:24:83:09:
d3:ee:91:79:d7:bd:88:f9:f0:d8:50:b0:a8:4e:41:
bc:81:c5:58:36:f2:bf:68:3a:b9:bc:67:0d:d7:26:
db:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:74:EC:4C:EA:DE:11:8F:34:60:40:CE:96:F0:2A:32:5E:B5:5C:01
X509v3 Authority Key Identifier:
keyid:FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:2b:3d:e3:f9:40:e4:e6:58:2d:b3:92:1a:04:d3:ef:11:1c:
f5:22:6e:c0:ec:b3:c5:40:9a:35:3b:0a:b3:e0:3a:ec:8e:71:
56:6b:31:1e:ad:8c:9e:65:1a:60:6a:3d:5d:55:75:ca:78:04:
22:7a:5a:85:9b:c7:f8:de:8c:5c:fc:a2:70:6c:0f:06:ca:db:
6d:7b:00:b0:79:e7:2e:2b:c6:66:a2:4c:be:dd:68:f5:9f:a5:
fa:c8:fd:11:b2:44:09:d2:87:0d:fc:a7:4c:45:a7:09:f3:7d:
e1:3f:64:4c:d6:44:e7:8a:2c:84:2d:fe:0d:3e:58:86:d7:11:
83:14:27:e2:55:7b:b7:bb:b2:4a:e6:ab:9a:c0:73:06:83:db:
9a:79:ec:01:40:8c:4f:8a:e4:6c:ff:20:59:a2:ec:c3:fd:40:
1b:5d:cf:07:00:04:3f:4a:f5:98:37:39:85:ad:7e:cd:fe:77:
6e:2b:86:28:6b:eb:a5:02:9d:bd:c3:c8:1d:43:a9:bc:51:36:
94:4a:09:23:9c:f6:5b:7a:0e:73:c7:91:8e:36:53:a3:92:43:
4a:68:2f:8e:45:3d:c8:d9:74:61:53:01:0e:ba:18:1d:11:38:
55:e9:a6:05:2d:ab:d1:4b:52:df:1a:0b:c3:d6:6e:04:3e:70:
51:73:2c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:06:04 2026 by rpki-client