Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
File: dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft (raw, json)
Hash identifier: GAzoLcwGAARYOkShte4dikJ8za/Ve0LatUbsFT+8ASU=
Subject key identifier: C7:77:46:8D:A2:CC:63:B6:E9:24:CF:CA:FE:01:B0:0D:AA:61:8A:C4
Authority key identifier: 74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
Certificate issuer: /CN=74774b7b530edacf8fa73353a9014a5638949bfb
Certificate serial: 019F859F69D5CCB747E4EEE8CC580A8156C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
Manifest number: 1090
Signing time: Tue 21 Jul 2026 17:00:44 +0000
Manifest this update: Tue 21 Jul 2026 17:00:44 +0000
Manifest next update: Wed 22 Jul 2026 17:00:44 +0000
Files and hashes: 1: dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl (hash: ENsfnavQMyaBATBYQ9J+Vmc9YjpVGy4JM7YAcXJoRB0=)
2: oIs9KYQxH1wc9n76SykV_cPagh0.roa (hash: Pyk8WpzW1sn9/iZFQXXrVYWhfzR4ErKJTZ2VaP3qK0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 17:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:9f:69:d5:cc:b7:47:e4:ee:e8:cc:58:0a:81:56:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74774b7b530edacf8fa73353a9014a5638949bfb
Validity
Not Before: Jul 21 17:00:44 2026 GMT
Not After : Jul 22 17:00:44 2026 GMT
Subject: CN=c777468da2cc63b6e924cfcafe01b00daa618ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:90:51:ce:83:69:cb:6f:0b:76:d0:13:cb:5a:
bb:21:48:30:64:10:74:4d:ea:04:ee:4c:25:4f:f0:
b6:60:7d:60:c9:e1:ba:e0:f6:20:85:26:c7:03:cd:
61:d9:00:4a:de:a9:6b:72:29:b4:f4:fd:53:da:cd:
71:46:66:7a:be:e3:2f:5b:a8:cc:97:fa:8c:f5:6b:
76:68:3c:c9:57:42:8a:11:3a:59:7a:af:e1:ad:47:
e2:33:2e:a2:c8:49:fd:be:75:14:b2:57:eb:8e:84:
42:ca:59:92:88:5d:8a:b3:8b:99:c7:a0:fd:55:78:
67:0c:60:6f:ae:21:cd:f1:bb:fa:11:5c:82:2a:61:
f4:4e:92:cf:3c:97:cd:56:ca:c7:75:41:38:23:b6:
11:ef:37:60:61:b5:14:6e:c9:e3:92:b8:30:44:ee:
f0:d2:8d:63:fe:7c:71:6d:16:6e:e6:92:71:a6:75:
ab:dc:a3:05:e0:63:4d:5b:3c:7a:dc:21:5b:1a:19:
21:6f:18:fc:72:43:01:3c:97:9e:f6:94:c7:82:4e:
5b:b9:32:1f:96:47:14:36:a2:88:bd:00:c5:4c:d3:
24:b0:b8:0d:4f:2c:77:46:a4:02:7c:57:eb:be:47:
88:38:7a:81:0a:a5:97:dd:2b:09:d8:0f:21:1c:50:
eb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:77:46:8D:A2:CC:63:B6:E9:24:CF:CA:FE:01:B0:0D:AA:61:8A:C4
X509v3 Authority Key Identifier:
keyid:74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:94:a8:bc:4a:16:29:1e:95:3f:2c:36:5a:01:eb:9c:52:4b:
28:d7:5d:cd:72:12:79:61:da:55:14:8b:ef:8c:62:c7:dc:98:
db:f3:b6:a7:28:c7:6a:06:8c:5a:23:e4:43:e0:86:53:85:27:
c7:14:49:64:d6:d1:d1:d7:e1:ca:bc:48:77:af:d2:45:f9:ca:
59:e5:5c:10:c9:ac:8e:51:c2:49:30:36:1a:ce:5d:40:62:a7:
3c:eb:c7:17:f2:40:cf:f1:1f:e2:00:92:ba:cb:aa:39:6b:bb:
b6:56:5d:d0:45:29:e2:26:ed:76:2d:4f:e5:35:d5:d1:37:31:
78:8c:8b:26:43:38:73:90:3c:82:ce:9a:a7:9a:2a:1e:4a:54:
29:a2:2d:d2:00:59:da:f6:64:4a:43:ee:7c:b7:fb:76:a7:9f:
9d:6a:45:ce:69:39:eb:d5:ef:66:43:0e:fc:46:e5:41:53:48:
ee:7a:59:2c:ce:87:37:39:b5:91:75:c3:74:f2:0f:8d:88:22:
13:f4:ae:3f:5b:14:86:91:6e:80:1f:f3:9b:47:07:58:a4:f8:
e9:b2:2d:10:63:49:36:38:04:d5:84:ce:83:f0:94:11:95:03:
64:f0:21:e2:ac:d0:bf:65:2d:01:86:e3:18:b4:e8:99:ca:95:
c4:c8:d2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:33:17 2026 by rpki-client