Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
File: 1DNtXnTx-LfbEynwC7hXJBrnTRk.mft (raw, json)
Hash identifier: TOitk3HP3EPU9rVDoV4RMmz5KHXa/O8lxqLMRw2G+0U=
Subject key identifier: 62:52:3F:0A:DA:3D:84:F1:D2:11:37:C4:6F:BF:A8:08:A6:C4:73:9C
Authority key identifier: D4:33:6D:5E:74:F1:F8:B7:DB:13:29:F0:0B:B8:57:24:1A:E7:4D:19
Certificate issuer: /CN=d4336d5e74f1f8b7db1329f00bb857241ae74d19
Certificate serial: 019E30E0E85EB13C98CEC1CBD0A9A95C0518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
Manifest number: 0699
Signing time: Sat 16 May 2026 13:01:46 +0000
Manifest this update: Sat 16 May 2026 13:01:46 +0000
Manifest next update: Sun 17 May 2026 13:01:46 +0000
Files and hashes: 1: 1DNtXnTx-LfbEynwC7hXJBrnTRk.crl (hash: MgoqhgIzGX4HkByi81tDOELlHrVyhla0IdzIGj2NTwk=)
2: w4SYF93bZ7mEac54Bcw2Oj2Zjm0.roa (hash: AiCzf27YzXL7TiAwTl4rqi9Bv4ePafNZNaFvG1buGG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:e8:5e:b1:3c:98:ce:c1:cb:d0:a9:a9:5c:05:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4336d5e74f1f8b7db1329f00bb857241ae74d19
Validity
Not Before: May 16 13:01:46 2026 GMT
Not After : May 17 13:01:46 2026 GMT
Subject: CN=62523f0ada3d84f1d21137c46fbfa808a6c4739c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2f:a0:a8:9a:02:19:0f:2b:c3:7c:5e:ec:1d:
2c:fe:b4:a1:2b:e6:e6:4e:15:95:ea:e1:3f:a4:55:
1b:22:15:f8:79:74:45:14:b4:f0:0c:72:70:db:1b:
6f:5e:51:6f:ab:77:49:c8:64:ff:f3:05:72:52:6b:
50:b6:d5:10:a3:1a:17:9e:14:d4:70:61:77:6f:10:
44:18:09:cb:00:3b:c7:57:24:39:0e:6e:e8:c3:14:
9c:83:b4:e6:0f:a4:c0:2f:76:72:73:e5:81:59:5b:
19:97:51:e8:db:1d:f8:9c:e4:0f:8f:0a:b8:6c:3e:
15:34:fa:cd:d4:46:d6:1c:aa:1f:9d:f0:63:f0:20:
9c:77:34:f3:8b:09:9d:bf:d5:05:9c:5d:b1:da:62:
74:50:d6:97:ee:ee:63:cf:44:aa:8b:7d:1a:bb:3d:
07:d6:f1:fb:14:89:42:10:49:82:cf:73:de:fa:a8:
af:7a:61:02:5b:a9:4a:ad:84:ad:0b:77:8f:fa:9b:
50:7f:36:c9:e9:6e:4c:8d:34:37:ff:fb:7c:e2:90:
e9:5b:0c:f0:e4:33:9f:91:43:1f:2b:55:f5:56:5d:
65:4e:4e:bd:84:b7:9f:64:09:ea:09:ff:16:1d:e0:
e3:07:4c:10:c2:cf:3d:c9:19:28:a4:d9:0d:8d:6a:
e7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:52:3F:0A:DA:3D:84:F1:D2:11:37:C4:6F:BF:A8:08:A6:C4:73:9C
X509v3 Authority Key Identifier:
keyid:D4:33:6D:5E:74:F1:F8:B7:DB:13:29:F0:0B:B8:57:24:1A:E7:4D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:5d:c5:56:5b:27:75:b0:bd:3a:22:bd:a1:ad:41:05:02:a8:
10:93:db:b1:27:bc:3d:92:52:57:36:37:69:49:b4:2a:a8:10:
0d:1e:cc:5e:d1:33:1d:50:4b:d5:39:81:74:33:f0:5a:35:bb:
dd:c5:bb:3d:88:4c:b2:78:24:8d:80:c4:13:c0:f4:3b:db:ab:
ea:6d:b1:63:a7:db:e7:32:1e:c7:d4:3b:8b:55:4d:39:9d:5f:
cb:96:1b:28:a9:a0:26:a9:eb:7b:56:37:69:53:2c:1f:a1:3d:
20:78:85:83:0c:32:51:e1:a0:21:59:33:60:95:6d:a5:97:14:
f3:79:ad:35:c2:27:b3:f1:d1:3d:b9:08:51:53:27:f8:c1:20:
d5:54:c0:04:84:a1:b6:7e:64:60:9d:92:33:6b:14:49:b0:47:
c2:fc:a8:13:38:63:e0:51:29:a1:2a:8f:bb:55:b1:9f:20:f4:
8b:c3:a0:c7:df:16:a7:ce:f5:1a:1e:2c:79:4e:c4:69:a0:f6:
ea:96:e0:ba:c6:86:41:00:b5:ca:08:9e:1a:3f:99:d6:36:e3:
5f:73:71:1f:b0:98:8f:de:49:e3:05:73:48:1a:25:fa:96:37:
d8:70:f2:2a:74:b0:d3:a0:0d:ab:88:06:fe:12:2c:27:ad:32:
b6:a4:8b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:57 2026 by rpki-client