Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
File: dHquXSSwyXpCAx81EKFOL5W72Dg.mft (raw, json)
Hash identifier: KprmdkajIt7AJZqwU38ZvkMG2bF3BtWMwxq7B3f4TzA=
Subject key identifier: E5:4D:4C:B1:D7:23:05:28:6A:37:75:4D:EF:85:2F:FF:3B:73:78:90
Authority key identifier: 74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
Certificate issuer: /CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Certificate serial: 019EB80ED06CD9B4D5E7C0E2BE3AA877A9C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
Manifest number: 0AEC
Signing time: Thu 11 Jun 2026 19:00:39 +0000
Manifest this update: Thu 11 Jun 2026 19:00:39 +0000
Manifest next update: Fri 12 Jun 2026 19:00:39 +0000
Files and hashes: 1: Caiwf_QYVrjuMQk3SKwJbOdkL1I.roa (hash: 5fx/cD2u1bFDALyIAFqy2QpBhB4xdpPsEpLHocGA9Q4=)
2: dHquXSSwyXpCAx81EKFOL5W72Dg.crl (hash: kj5+2/APMh4mCM0HPw3uoNoLHhZAj0skJMoBCjOZFT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0e:d0:6c:d9:b4:d5:e7:c0:e2:be:3a:a8:77:a9:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Validity
Not Before: Jun 11 19:00:39 2026 GMT
Not After : Jun 12 19:00:39 2026 GMT
Subject: CN=e54d4cb1d72305286a37754def852fff3b737890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6e:86:c0:95:f8:3a:7f:09:67:a6:3d:3b:db:
a0:6f:c5:88:55:3b:7e:2e:bc:e6:36:51:f2:97:56:
de:bd:2d:c2:7c:95:f7:88:55:b3:cb:fb:e5:02:ae:
1e:88:57:fe:7f:40:37:f9:e9:49:42:5f:f2:99:63:
34:bc:2d:8e:81:92:c2:53:42:68:7e:b7:7e:d2:5a:
37:88:82:5e:ea:70:7e:89:f2:d4:b8:df:48:7f:db:
cf:38:26:8c:be:ba:d0:59:eb:a4:9a:d8:1f:7c:cc:
65:18:d4:1c:73:47:40:07:41:80:11:65:e8:ca:41:
fd:32:d7:fd:76:29:cb:3d:d7:95:15:a0:eb:09:af:
f0:6a:11:ae:e3:1d:85:94:61:e0:fa:1e:46:24:16:
21:e1:8c:e4:fd:87:11:d2:d8:aa:a3:3a:e4:54:1e:
fe:17:83:33:4f:4a:d8:a1:a4:64:2f:c6:03:61:5c:
8f:47:23:3a:c8:bf:c8:13:fe:93:59:6e:98:2f:85:
78:93:d9:c9:2d:21:aa:8b:03:49:1c:8a:41:49:03:
5f:c0:eb:b2:33:21:56:21:c0:bf:95:0c:14:b7:64:
1e:6f:eb:87:28:4f:73:68:48:9d:5a:6b:70:60:e0:
e6:9d:18:61:54:0e:b4:6c:33:5d:9c:3d:a9:59:05:
41:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4D:4C:B1:D7:23:05:28:6A:37:75:4D:EF:85:2F:FF:3B:73:78:90
X509v3 Authority Key Identifier:
keyid:74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:75:42:03:9e:f6:34:77:76:68:16:b1:de:fb:12:07:cd:54:
eb:5c:0e:81:90:00:61:df:c5:52:35:4f:1b:79:55:26:18:d4:
0b:41:b3:99:3e:63:48:3a:e2:d3:50:ec:32:25:06:7d:ae:ed:
c8:7a:ee:03:f5:78:8b:9e:f9:59:cf:a8:a5:4a:36:8c:81:28:
bf:72:02:f1:36:a8:27:f6:41:cb:24:18:aa:5b:bc:8a:5d:9d:
67:0e:47:7b:ea:70:e9:f6:6d:d3:b1:0e:9f:d0:e8:64:e8:c1:
95:00:12:1f:3c:dd:6c:f9:39:01:2e:27:e4:ac:b4:e3:6b:f6:
cf:0f:08:3a:7c:92:bd:01:0c:f5:0e:82:a5:0b:dc:9f:47:0c:
80:d2:6b:69:11:0d:81:d5:ab:03:dc:a0:fe:c7:0f:12:46:bd:
92:0f:df:2a:0b:77:9d:62:a6:2e:87:b5:f2:c7:c3:08:7c:d6:
7d:53:93:bd:21:bd:ca:6c:7d:56:bf:33:64:f2:1b:4a:cd:ef:
00:32:08:36:27:5a:4a:c9:42:79:aa:87:a9:14:a1:8f:33:dd:
64:9f:2f:a4:1d:3f:28:aa:ac:3e:cc:67:f4:c0:da:ab:33:ef:
9f:f8:c2:35:b9:9e:3c:4e:8b:a4:33:f4:25:6f:ac:b9:ff:cc:
77:80:3d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:01:17 2026 by rpki-client