Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
File: dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft (raw, json)
Hash identifier: gRCBiThsH9Qi6O2hwuBYR0BLqCKAjopcFS6qgFBtq0A=
Subject key identifier: 67:3A:59:14:5B:9E:BF:F1:24:A2:FB:31:3D:85:63:F4:D7:BB:E7:82
Authority key identifier: 74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
Certificate issuer: /CN=74774b7b530edacf8fa73353a9014a5638949bfb
Certificate serial: 01A06F4CA58F2129CA69C0D2DE5AA2A7C51C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
Manifest number: 1109
Signing time: Sat 05 Sep 2026 02:01:28 +0000
Manifest this update: Sat 05 Sep 2026 02:01:28 +0000
Manifest next update: Sun 06 Sep 2026 02:01:28 +0000
Files and hashes: 1: dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl (hash: nvu/8Nnjsp5KCYr9H4rLcbqDUEDMENCGOqMc7YkPEPU=)
2: oIs9KYQxH1wc9n76SykV_cPagh0.roa (hash: Pyk8WpzW1sn9/iZFQXXrVYWhfzR4ErKJTZ2VaP3qK0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:4c:a5:8f:21:29:ca:69:c0:d2:de:5a:a2:a7:c5:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74774b7b530edacf8fa73353a9014a5638949bfb
Validity
Not Before: Sep 5 02:01:28 2026 GMT
Not After : Sep 6 02:01:28 2026 GMT
Subject: CN=673a59145b9ebff124a2fb313d8563f4d7bbe782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f6:19:5f:05:a0:97:b0:40:e6:17:a0:67:5b:
bf:a6:f4:31:9e:ae:52:a6:05:8d:79:e7:a6:7e:c6:
7d:e2:64:64:a5:69:a0:a4:19:02:81:e3:e7:ff:cc:
4d:5c:86:21:5e:bc:59:24:42:44:16:2d:ac:d5:55:
77:20:cd:35:74:cf:4a:57:f3:4c:08:80:10:b8:38:
32:5d:d0:6d:06:64:54:96:59:08:57:66:2f:17:77:
f7:44:c5:9a:3e:33:fe:89:9b:df:a7:cb:7a:6d:77:
5a:4a:f6:51:79:ca:9a:37:3d:79:4f:91:8e:72:ca:
d4:e7:4b:9e:43:c7:5c:ed:b7:54:8d:e6:15:68:f2:
fa:d5:78:73:c0:ad:9a:a9:f5:51:4c:04:05:42:5b:
f6:e1:ee:78:f3:e2:a0:87:dd:01:7b:01:9a:7f:cd:
e1:07:ff:a7:b3:b7:a5:4a:50:bd:c3:32:ab:9f:8b:
34:b8:14:d6:01:4e:49:c1:31:68:57:30:09:24:51:
b8:80:d0:27:03:7b:ab:ec:a4:6d:2c:cd:3a:6d:c9:
61:52:19:45:f8:ce:25:0e:2c:78:c7:9d:5f:8a:c0:
8c:d0:69:cb:47:64:01:dd:e7:12:f8:e2:fd:e8:e1:
33:33:c0:97:ac:e4:5e:f9:da:c0:3b:42:13:8e:9a:
5b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:3A:59:14:5B:9E:BF:F1:24:A2:FB:31:3D:85:63:F4:D7:BB:E7:82
X509v3 Authority Key Identifier:
keyid:74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:cb:75:79:d6:7a:6b:c6:d8:2f:47:1a:d5:35:aa:66:25:67:
64:52:26:0f:54:58:ec:f6:23:a6:d5:c4:c8:26:d2:5b:23:43:
00:6f:c3:95:0b:dc:f0:c7:f8:49:34:1a:74:af:d8:a0:0a:b4:
f8:49:f5:fd:4f:a1:f5:36:4c:07:19:7f:4a:de:7b:33:b8:81:
ba:e4:5f:3d:7a:c7:27:53:13:8c:37:64:ae:ea:de:b4:90:a7:
3a:98:38:f8:da:68:1c:cb:cd:d5:3d:d2:5e:4e:fe:47:24:e0:
ee:68:4a:49:00:ac:9e:d4:ec:8e:81:ee:04:bd:e4:5a:45:d1:
4b:2c:67:c0:de:1c:ed:83:1e:b7:a8:2b:ad:fe:f4:d8:8a:5d:
79:54:e6:a6:ef:50:63:0d:f1:27:f9:27:68:08:f9:6e:d0:5e:
21:f3:d6:4d:79:0f:e8:bc:64:0d:5d:26:83:21:5f:e0:e0:50:
97:83:77:be:46:f6:b1:51:49:6e:59:a2:ed:44:b9:2c:2e:69:
dd:ce:12:ff:81:64:63:b6:bc:55:7b:5d:0e:77:58:69:66:8b:
15:e2:a4:bb:ce:5b:c4:50:39:49:8b:e3:00:36:00:cd:c2:e0:
c2:a5:b5:14:2b:a5:ba:39:c2:3f:c7:34:78:de:c1:e7:d9:f4:
be:db:d1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:18:03 2026 by rpki-client