Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
File: dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft (raw, json)
Hash identifier: g9vVJig2NqmcSwC4vj9qJ7KlQBXVyvxt1bRelr4/mks=
Subject key identifier: 86:B6:66:AB:CB:3A:C1:A0:36:89:F7:C8:CE:F5:63:4C:29:6A:70:8D
Authority key identifier: 74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
Certificate issuer: /CN=74774b7b530edacf8fa73353a9014a5638949bfb
Certificate serial: 019D394131BB14DCE004DAA6334B134FE01C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
Manifest number: 0F5F
Signing time: Sun 29 Mar 2026 11:01:06 +0000
Manifest this update: Sun 29 Mar 2026 11:01:06 +0000
Manifest next update: Mon 30 Mar 2026 11:01:06 +0000
Files and hashes: 1: 1FM0mS9YXhi36usAZssgSObubSE.roa (hash: ysx1WmEvblZeb6urFi3lM12je+ZT08ADvjlZD9WQj60=)
2: dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl (hash: AIxq0OA//y34A+NEJTRy0KgAumHQxbrxNZ/HrVnjJmA=)
3: tsnnwKx9h0Bq1OKLzU0QXupmagY.roa (hash: osDK5z+9VSYaQfFUqf/4Hk4+z2z6ZK/YmHN1eV6XoFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:31:bb:14:dc:e0:04:da:a6:33:4b:13:4f:e0:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74774b7b530edacf8fa73353a9014a5638949bfb
Validity
Not Before: Mar 29 11:01:06 2026 GMT
Not After : Mar 30 11:01:06 2026 GMT
Subject: CN=86b666abcb3ac1a03689f7c8cef5634c296a708d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f3:a2:1c:1a:d8:f9:f7:a6:0d:79:5a:48:56:
7d:bc:2f:09:e9:88:34:70:5a:11:b4:72:3e:c9:9f:
ed:14:f8:bc:48:ce:3f:fb:e7:56:52:84:59:4c:21:
d1:47:d7:d9:98:fe:03:93:8d:b5:60:0e:5e:97:70:
c1:12:f7:e9:ca:d6:aa:9b:a4:5e:da:20:46:fc:e4:
6a:e8:80:a6:07:2b:ef:4c:f1:3d:8a:66:e9:fb:44:
f0:55:ee:de:f1:9f:4d:9f:e8:32:b3:0f:42:24:65:
d4:1b:b2:d3:a8:ab:f2:71:8e:9d:c1:2d:9c:aa:c8:
5c:57:8c:b9:9b:0d:40:ba:25:80:3a:6c:08:11:14:
2c:00:df:f2:b2:9d:ca:eb:d5:99:c1:34:a1:00:b1:
45:43:5e:0d:1c:93:ca:2a:c5:6e:2c:6c:c1:2b:c7:
7d:43:fd:79:db:30:10:7e:21:d9:8b:e0:be:c7:67:
5b:a2:d0:51:a0:87:60:05:1c:94:08:9e:00:72:19:
b8:76:22:c0:5f:57:a1:50:d1:6d:cb:ac:4e:43:86:
29:92:39:bb:f6:b4:3d:c0:b2:75:ae:5e:7a:6f:c8:
bb:80:f1:5e:a0:48:73:fc:82:31:87:10:45:3a:f1:
ae:a5:65:d0:9e:48:74:b5:0f:57:22:48:fc:e1:87:
19:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B6:66:AB:CB:3A:C1:A0:36:89:F7:C8:CE:F5:63:4C:29:6A:70:8D
X509v3 Authority Key Identifier:
keyid:74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:7a:13:d4:f4:37:d8:f6:3e:d3:0b:db:c5:e8:cf:d6:da:09:
bc:32:c8:db:ae:af:b2:68:c8:10:fb:ac:d4:77:40:7b:cd:e1:
69:d2:0e:d4:67:ad:74:1f:9f:03:47:2e:40:d5:3f:7b:3d:77:
b6:71:23:e1:b4:ea:17:b5:4e:fa:32:7c:a9:02:f8:b5:3e:32:
e7:50:35:b9:b0:73:fd:47:5c:e0:52:a0:11:93:ae:af:e2:d7:
5b:8f:14:d4:58:12:86:ad:85:dd:6a:f5:bf:5a:63:4b:eb:05:
6a:25:0f:8c:15:b0:f0:14:25:b0:ab:6a:4c:04:1e:3c:1c:a0:
7b:11:77:91:72:43:18:3d:f7:07:c3:07:62:aa:d4:04:d7:66:
5f:71:7f:77:6f:2a:fe:be:ba:32:76:8d:a6:78:32:63:33:80:
b9:29:b0:07:5d:01:bf:c2:21:ec:aa:a1:16:15:44:d2:b4:49:
c7:8f:6b:9e:28:45:40:47:cb:fe:8c:20:ff:2b:db:1b:31:dc:
bf:a7:2a:dd:16:e4:6e:64:67:b2:e7:e7:85:bb:82:84:2d:09:
13:b5:b6:26:89:9a:81:a1:dd:d3:00:5c:76:e0:0d:93:c8:24:
b7:50:f9:06:9e:51:9f:c1:58:63:ae:07:78:cc:16:b5:07:0b:
3d:b0:b8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:24 2026 by rpki-client