Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft
File: tDtWqlNz6PXng0dnQkDv98KCctw.mft (raw, json)
Hash identifier: nvkwizdX33I4V1Xsr10q7Xc5jgi0rXOJ2UuQyXzao5Q=
Subject key identifier: 1A:E3:95:6B:ED:02:97:E8:57:73:9D:C0:1D:CA:67:2F:6F:8A:B7:3E
Authority key identifier: B4:3B:56:AA:53:73:E8:F5:E7:83:47:67:42:40:EF:F7:C2:82:72:DC
Certificate issuer: /CN=b43b56aa5373e8f5e78347674240eff7c28272dc
Certificate serial: 019FA03AFF4F4B737F480D8014BECF403970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDtWqlNz6PXng0dnQkDv98KCctw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft
Manifest number: 1306
Signing time: Sun 26 Jul 2026 21:00:48 +0000
Manifest this update: Sun 26 Jul 2026 21:00:48 +0000
Manifest next update: Mon 27 Jul 2026 21:00:48 +0000
Files and hashes: 1: tDtWqlNz6PXng0dnQkDv98KCctw.crl (hash: qs1yqm8+8IyHPM7qzEJ+xwtj618ncX/AT+VuHNnU7eY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDtWqlNz6PXng0dnQkDv98KCctw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:3a:ff:4f:4b:73:7f:48:0d:80:14:be:cf:40:39:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43b56aa5373e8f5e78347674240eff7c28272dc
Validity
Not Before: Jul 26 21:00:48 2026 GMT
Not After : Jul 27 21:00:48 2026 GMT
Subject: CN=1ae3956bed0297e857739dc01dca672f6f8ab73e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e6:0c:ae:ef:50:85:2b:88:fb:bd:4c:3b:01:
9c:6d:a6:e5:69:aa:85:3a:84:75:1c:ee:20:2f:96:
3f:4e:f1:a7:2d:5d:98:38:6d:78:c1:08:af:ad:4b:
40:b2:b5:17:e1:d8:6f:10:a6:cc:c3:e8:7e:df:89:
ff:11:1a:ba:0d:c2:f5:08:ea:ff:e0:ce:c1:f0:46:
f2:75:76:50:26:5b:2d:a8:5c:a4:e9:ed:d0:a0:7a:
97:34:50:8d:d1:0a:a7:4f:d7:95:f1:ec:2b:a4:07:
03:5e:bd:17:03:b2:b7:8b:1f:34:18:d5:fb:7c:64:
cb:3f:e9:9d:15:e6:86:ac:39:01:1b:6e:e2:67:e2:
e3:e7:27:82:c5:73:69:ee:64:6d:d9:65:4a:90:be:
0d:f9:c9:63:09:63:ed:e4:01:ef:3e:64:59:d0:eb:
88:69:13:9d:ad:44:04:47:8c:fe:d4:5a:31:e5:0f:
ac:79:f8:5a:e5:fe:40:cc:7d:88:f1:d7:1f:c4:4d:
4b:58:93:a6:cf:c8:9c:21:25:89:75:e9:64:7f:ed:
6f:9c:0c:27:bb:0b:7a:eb:99:28:06:7d:dc:0a:2d:
6f:c7:a9:e2:7b:11:0c:72:0e:ee:20:30:34:95:f5:
c6:89:f3:98:dd:db:28:e6:0f:0e:92:00:5f:4a:b2:
6c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E3:95:6B:ED:02:97:E8:57:73:9D:C0:1D:CA:67:2F:6F:8A:B7:3E
X509v3 Authority Key Identifier:
keyid:B4:3B:56:AA:53:73:E8:F5:E7:83:47:67:42:40:EF:F7:C2:82:72:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDtWqlNz6PXng0dnQkDv98KCctw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:9c:8e:54:4e:6b:91:e7:87:78:39:08:e0:42:9e:08:58:ee:
25:94:6c:34:d2:da:51:1d:bc:f2:5e:e7:27:dd:06:79:01:53:
f0:93:2c:f4:80:b5:ab:39:ba:92:b2:22:11:9d:df:90:3d:42:
a0:2f:a4:27:a9:e8:e7:fe:35:1e:44:54:e1:0d:9e:2a:9a:86:
7d:41:ab:8b:65:aa:2d:a3:6d:d8:3d:d6:e5:70:1e:98:19:1b:
00:35:de:45:57:54:ea:bb:8e:73:67:c3:d7:a1:1b:76:76:07:
29:e2:d3:38:a9:7a:b8:29:fb:35:18:3e:5f:0c:b8:98:9f:46:
20:73:a4:fe:bf:61:20:a0:32:96:e0:ea:e1:a8:a9:81:8a:64:
79:9b:bc:14:d8:46:c8:b2:16:13:ba:78:59:90:0f:ba:61:07:
65:b9:88:02:1a:74:ac:29:33:43:09:ca:21:9d:b5:dc:b9:8b:
a0:8e:ce:33:41:38:29:14:aa:27:97:99:39:79:1b:27:8b:68:
e9:ed:45:fd:98:c5:1c:09:68:c5:41:34:ac:39:d3:f0:25:b8:
66:7b:3e:0c:7f:61:03:33:a4:23:83:ea:97:5a:4a:23:bc:49:
36:e9:c8:4a:34:40:e6:1b:94:00:29:60:fc:c6:af:97:80:c5:
84:2c:af:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 03:15:20 2026 by rpki-client