Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
File: dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft (raw, json)
Hash identifier: 8PTGQyS3vu3k3GcB7sdoVgdXSonKK0hDSQm/3rY3nfk=
Subject key identifier: A1:DB:5A:E2:B7:A8:F6:36:41:A0:17:04:A5:BE:01:FC:A3:BB:0E:DE
Authority key identifier: 74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
Certificate issuer: /CN=74774b7b530edacf8fa73353a9014a5638949bfb
Certificate serial: 019E910233A7C8D8A002C1857E0A80B56E4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
Manifest number: 1011
Signing time: Thu 04 Jun 2026 05:01:40 +0000
Manifest this update: Thu 04 Jun 2026 05:01:40 +0000
Manifest next update: Fri 05 Jun 2026 05:01:40 +0000
Files and hashes: 1: 1FM0mS9YXhi36usAZssgSObubSE.roa (hash: ysx1WmEvblZeb6urFi3lM12je+ZT08ADvjlZD9WQj60=)
2: dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl (hash: TSFbHpxu5eH8coESCGK+tqgYhS+yFJiyF7ARGrw5vMQ=)
3: tsnnwKx9h0Bq1OKLzU0QXupmagY.roa (hash: osDK5z+9VSYaQfFUqf/4Hk4+z2z6ZK/YmHN1eV6XoFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 05:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:02:33:a7:c8:d8:a0:02:c1:85:7e:0a:80:b5:6e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74774b7b530edacf8fa73353a9014a5638949bfb
Validity
Not Before: Jun 4 05:01:40 2026 GMT
Not After : Jun 5 05:01:40 2026 GMT
Subject: CN=a1db5ae2b7a8f63641a01704a5be01fca3bb0ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:da:92:03:64:ba:34:9d:b7:9e:21:e2:ee:bc:
73:0e:cf:fa:ab:9c:5a:0a:f6:bf:e2:d6:54:c1:bc:
fd:ac:68:d3:76:ca:88:8b:df:8a:31:74:0c:09:c7:
80:c7:e4:8d:84:19:41:35:ac:67:76:7f:cc:68:b0:
93:7f:31:98:5c:32:78:c6:b3:80:0d:44:3e:0c:ce:
0c:97:20:f3:0d:b7:60:4d:f3:c6:6e:e6:c4:4a:eb:
f2:ee:fe:ff:26:52:5c:34:89:f8:bb:45:89:22:e9:
97:eb:dc:e8:0f:11:8a:c1:c7:96:69:54:5a:68:0d:
cf:c0:52:70:2d:b6:56:de:90:24:16:55:16:c3:3c:
bf:bd:d1:fc:fe:2f:d6:fd:8e:ae:87:ff:aa:aa:f1:
d2:9b:39:8d:26:ff:45:cf:0b:b9:90:74:5b:fa:4c:
fc:c9:c0:09:df:5c:f2:d5:21:67:1f:6c:af:be:aa:
e9:00:a0:b3:dd:9e:d8:fe:31:f3:37:78:73:de:c9:
e8:f5:a4:dd:98:5c:c1:0f:7e:75:32:98:05:11:bb:
7b:77:ff:58:8b:66:2d:73:5a:3c:12:0b:a5:d3:34:
cf:78:ac:3e:30:74:11:3b:55:8f:27:03:f6:e1:b9:
83:fb:78:01:34:db:34:47:27:d0:46:59:bc:0d:b7:
76:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:DB:5A:E2:B7:A8:F6:36:41:A0:17:04:A5:BE:01:FC:A3:BB:0E:DE
X509v3 Authority Key Identifier:
keyid:74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:54:ad:71:0a:a9:b0:26:9c:65:45:1a:7c:4b:b3:bb:4d:c9:
14:ec:f8:b7:aa:27:29:98:0f:8e:42:d5:98:09:f8:92:d4:8e:
ec:79:4f:9b:bc:fd:65:02:41:ff:4c:29:3c:07:5e:d9:8c:bf:
30:33:96:be:6b:3b:4d:b1:79:29:a3:73:5a:1f:49:4f:d4:84:
f8:db:03:36:4b:b2:7e:20:af:90:45:cf:bb:67:5c:e6:8f:9e:
18:f7:49:58:e5:df:6c:8e:ab:69:0f:40:65:a5:2d:20:86:ec:
1d:58:a6:83:f1:13:fb:3c:e3:0f:2b:9e:ea:3c:72:04:7f:a9:
4a:1c:25:5a:0e:1b:5e:7e:b6:68:b1:cf:e3:c9:32:71:19:92:
42:f8:04:8a:dd:cd:8c:93:68:03:74:e2:58:a8:5f:a7:5a:41:
e0:c4:53:86:8f:81:07:3b:2f:28:28:69:85:81:af:76:dc:33:
d2:50:37:2d:ca:05:10:ec:ea:e7:46:bd:07:15:00:0e:a1:ef:
ae:5b:ff:97:79:26:7c:6a:fe:a9:ba:4c:09:99:5d:d0:63:d3:
33:48:e4:24:b5:c1:4a:f5:66:18:4f:c4:71:ab:b3:1f:85:3f:
67:86:e6:dd:fe:92:1e:38:bb:1f:d8:f7:0f:2f:1e:96:dc:1c:
9c:14:9f:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6RAjOnyNigAsGFfgqAtW5LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0Nzc0YjdiNTMwZWRhY2Y4ZmE3MzM1M2E5MDE0YTU2Mzg5
NDliZmIwHhcNMjYwNjA0MDUwMTQwWhcNMjYwNjA1MDUwMTQwWjAzMTEwLwYDVQQD
EyhhMWRiNWFlMmI3YThmNjM2NDFhMDE3MDRhNWJlMDFmY2EzYmIwZWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNqSA2S6NJ23niHi7rxzDs/6q5xa
Cva/4tZUwbz9rGjTdsqIi9+KMXQMCceAx+SNhBlBNaxndn/MaLCTfzGYXDJ4xrOA
DUQ+DM4MlyDzDbdgTfPGbubESuvy7v7/JlJcNIn4u0WJIumX69zoDxGKwceWaVRa
aA3PwFJwLbZW3pAkFlUWwzy/vdH8/i/W/Y6uh/+qqvHSmzmNJv9Fzwu5kHRb+kz8
ycAJ31zy1SFnH2yvvqrpAKCz3Z7Y/jHzN3hz3sno9aTdmFzBD351MpgFEbt7d/9Y
i2Ytc1o8Egul0zTPeKw+MHQRO1WPJwP24bmD+3gBNNs0RyfQRlm8Dbd2CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHbWuK3qPY2QaAXBKW+Afyjuw7eMB8GA1UdIwQY
MBaAFHR3S3tTDtrPj6czU6kBSlY4lJv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEhkTGUxTU8ycy1QcHpOVHFRRktWamlVbV9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8wZmI2OWQtY2VmYy00NmVjLWJlMzkt
ODViZDM0YmQ0ZTVhLzEvZEhkTGUxTU8ycy1QcHpOVHFRRktWamlVbV9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8wZmI2OWQtY2VmYy00NmVjLWJlMzktODViZDM0YmQ0ZTVh
LzEvZEhkTGUxTU8ycy1QcHpOVHFRRktWamlVbV9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACFStcQqp
sCacZUUafEuzu03JFOz4t6onKZgPjkLVmAn4ktSO7HlPm7z9ZQJB/0wpPAde2Yy/
MDOWvms7TbF5KaNzWh9JT9SE+NsDNkuyfiCvkEXPu2dc5o+eGPdJWOXfbI6raQ9A
ZaUtIIbsHVimg/ET+zzjDyue6jxyBH+pShwlWg4bXn62aLHP48kycRmSQvgEit3N
jJNoA3TiWKhfp1pB4MRTho+BBzsvKChphYGvdtwz0lA3LcoFEOzq50a9BxUADqHv
rlv/l3kmfGr+qbpMCZld0GPTM0jkJLXBSvVmGE/EcauzH4U/Z4bm3f6SHji7H9j3
Dy8eltwcnBSf0A==
-----END CERTIFICATE-----
Generated at Thu Jun 4 16:08:26 2026 by rpki-client