Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
File: dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft (raw, json)
Hash identifier: e4wG5cv5T4ILcOnPSGLYYWLmYLBa48UqtUnlQWECth0=
Subject key identifier: DD:D0:94:24:7E:79:E4:AB:29:16:1F:CB:9C:87:1C:4A:A6:BA:BA:90
Authority key identifier: 76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39
Certificate issuer: /CN=765ea3400a3748c3b6c61268d492f8bf0a908239
Certificate serial: 019F2924C58DCBAD8BB7F92E42696BC7C062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
Manifest number: 1515
Signing time: Fri 03 Jul 2026 18:01:43 +0000
Manifest this update: Fri 03 Jul 2026 18:01:43 +0000
Manifest next update: Sat 04 Jul 2026 18:01:43 +0000
Files and hashes: 1: dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl (hash: b1nfV/Hib/k11Gehq3yzK5qGrZmW7JK0pIIK8VWYs2c=)
2: pyuMnNg45Imlk2H0jl_EMiwNCJY.roa (hash: Du2wmMU/s9sp+p6yThJQ53vWQyfYeVO+yB5tdkmnkw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 18:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:29:24:c5:8d:cb:ad:8b:b7:f9:2e:42:69:6b:c7:c0:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=765ea3400a3748c3b6c61268d492f8bf0a908239
Validity
Not Before: Jul 3 18:01:43 2026 GMT
Not After : Jul 4 18:01:43 2026 GMT
Subject: CN=ddd094247e79e4ab29161fcb9c871c4aa6baba90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4d:a6:09:55:91:38:70:c7:da:0a:71:7a:c1:
7e:57:3d:33:6e:4b:56:3a:31:f8:e0:d2:73:89:c4:
2e:d7:2f:0a:78:4b:a2:46:ef:0e:78:48:10:11:2a:
f0:87:36:72:55:3e:c4:ec:39:b4:05:0d:c3:34:25:
7d:17:b7:4f:9c:ca:35:31:79:dd:7a:0c:ca:45:c1:
30:42:98:e5:d6:ab:a0:98:4c:3f:07:f8:ba:c8:fb:
c2:1d:6f:77:db:a0:4c:73:49:e7:3d:d3:21:19:b7:
02:22:70:02:c8:b5:77:14:c9:aa:6d:bd:51:04:39:
a5:61:ec:50:0b:f2:74:b7:19:8d:5f:bf:39:44:9f:
62:1a:67:09:80:20:d1:d5:b1:12:36:b3:be:d7:48:
14:7a:3c:aa:57:d0:3f:38:ed:8c:48:75:7b:17:ac:
93:58:bd:70:84:fc:87:19:69:b5:7b:bc:f8:6b:46:
9d:4c:8d:a0:ba:03:d1:69:c2:4b:f8:3c:80:48:87:
49:40:b7:28:11:53:9d:53:7e:43:fc:f5:b9:88:32:
f5:a1:ca:ad:f4:2e:91:d6:e4:9b:ec:e2:d5:50:50:
89:c2:16:be:eb:bd:83:25:ef:89:ae:93:91:51:2e:
16:5d:a1:da:d4:48:fc:a3:be:b7:6e:43:f9:3d:55:
38:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D0:94:24:7E:79:E4:AB:29:16:1F:CB:9C:87:1C:4A:A6:BA:BA:90
X509v3 Authority Key Identifier:
keyid:76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:2a:e7:de:22:20:02:be:a2:cf:5f:db:ce:59:cc:65:b3:75:
ee:f5:7a:7b:ff:c4:2b:3b:ce:a0:b9:ae:73:a8:da:7b:d2:25:
57:3a:05:e8:3d:b4:57:d0:d5:55:b3:b2:af:c3:15:35:50:42:
f1:93:fa:54:14:71:0c:78:41:0e:e4:9c:f2:e1:17:cc:e9:4a:
03:f2:6e:7f:63:4b:9e:d9:84:6d:e3:1d:d1:61:76:c0:da:90:
c7:27:3b:03:d3:77:3a:c6:d2:1a:23:fc:8e:e4:d0:dc:b7:ec:
d2:6e:df:a1:f2:ad:af:d1:60:e5:12:2c:c8:04:5d:36:30:26:
1a:cb:e9:ec:74:9d:6e:c2:e4:8f:5c:ff:a4:1d:ba:85:d6:47:
94:ab:2c:98:77:f0:58:2f:05:ac:36:e2:46:f5:d9:46:fa:f4:
81:a3:1a:0c:7f:fd:0e:55:a5:c2:0b:4f:78:9e:5b:a6:8b:2e:
45:c9:f4:f2:ed:f8:1f:8a:d6:88:a9:35:54:75:76:1b:e5:5a:
7e:2e:67:a4:74:5a:cf:81:03:bd:50:e0:0e:fc:d1:95:a4:70:
23:82:09:65:4b:87:1a:22:7a:cf:0f:9f:c2:bd:3f:01:56:43:
15:2d:fe:98:4c:88:7f:29:a5:26:d9:78:23:44:28:c4:3e:b3:
79:c4:75:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 21:49:45 2026 by rpki-client