Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
File: 1DNtXnTx-LfbEynwC7hXJBrnTRk.mft (raw, json)
Hash identifier: 6+GJkstjS/Et1FAarHUWhZuenGsD79tVg80G1rMgZI0=
Subject key identifier: 06:74:B9:1C:85:8C:75:75:99:DE:1A:4F:08:9D:10:3D:FA:8F:94:3C
Authority key identifier: D4:33:6D:5E:74:F1:F8:B7:DB:13:29:F0:0B:B8:57:24:1A:E7:4D:19
Certificate issuer: /CN=d4336d5e74f1f8b7db1329f00bb857241ae74d19
Certificate serial: 019D37C06EC4BDF7E09A9593A02CAA88425C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
Manifest number: 0618
Signing time: Sun 29 Mar 2026 04:00:51 +0000
Manifest this update: Sun 29 Mar 2026 04:00:51 +0000
Manifest next update: Mon 30 Mar 2026 04:00:51 +0000
Files and hashes: 1: 1DNtXnTx-LfbEynwC7hXJBrnTRk.crl (hash: vpefL/orHYfZurwDKKy7XEij+NuX3gmv1yYzQybSHoQ=)
2: w4SYF93bZ7mEac54Bcw2Oj2Zjm0.roa (hash: AiCzf27YzXL7TiAwTl4rqi9Bv4ePafNZNaFvG1buGG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:6e:c4:bd:f7:e0:9a:95:93:a0:2c:aa:88:42:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4336d5e74f1f8b7db1329f00bb857241ae74d19
Validity
Not Before: Mar 29 04:00:51 2026 GMT
Not After : Mar 30 04:00:51 2026 GMT
Subject: CN=0674b91c858c757599de1a4f089d103dfa8f943c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c4:66:bb:c6:48:0b:66:82:fa:a1:86:1e:5e:
67:c4:08:9d:49:d7:d2:ce:0c:7d:ad:52:67:a5:e3:
61:67:63:a1:23:8a:97:ab:5e:50:dd:a0:ea:2e:fc:
0b:7b:68:80:fe:c5:f6:d4:7d:05:61:82:b1:f3:31:
75:b2:4e:53:14:69:87:05:cb:16:d2:ce:f5:ff:62:
6e:f6:ea:a3:ba:d8:8e:dc:b7:66:18:e3:99:d1:a4:
da:61:5c:e9:52:54:c4:4b:00:8e:f5:20:02:eb:f9:
33:63:ef:e8:5f:f5:c6:4e:04:9a:82:92:4a:e4:a9:
32:39:a8:4c:6c:a9:d5:e6:62:61:57:30:b4:64:be:
ba:d7:c2:04:a0:e8:cb:60:9c:0e:64:8a:11:a7:e9:
99:ed:a8:67:be:24:07:8b:a1:8e:87:5b:c4:96:75:
ca:b3:51:3b:f9:5f:8d:b6:43:78:53:88:79:b7:af:
ed:bf:d8:bd:9a:95:82:b1:97:cc:62:31:5d:7d:3a:
61:db:ad:71:4e:76:76:62:33:ed:89:f5:20:1d:6c:
d8:2b:b3:96:65:1f:ee:34:02:3b:f1:fc:b5:1a:db:
e7:be:75:68:e9:5e:66:00:94:36:3b:72:c9:fe:b8:
5c:25:e8:9f:a2:ef:fa:12:40:9f:40:71:6f:88:90:
28:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:74:B9:1C:85:8C:75:75:99:DE:1A:4F:08:9D:10:3D:FA:8F:94:3C
X509v3 Authority Key Identifier:
keyid:D4:33:6D:5E:74:F1:F8:B7:DB:13:29:F0:0B:B8:57:24:1A:E7:4D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:08:92:d0:0a:2f:5c:61:ec:75:f4:16:f9:8d:33:1b:b5:a4:
b4:9d:1f:3a:ab:8b:8b:30:e8:15:0f:0d:cc:5b:45:ae:41:a6:
1b:ed:be:77:57:7f:51:ea:31:3c:66:52:b1:e5:a9:61:bf:a6:
ad:17:b3:98:bc:6f:c6:81:dc:67:9f:2d:04:cb:fa:d3:7b:cd:
27:78:da:32:11:c0:6c:7d:f3:1b:50:e4:4a:21:15:da:13:d9:
8e:96:4a:b0:ff:28:b8:5d:d3:0e:f3:d5:bc:d5:8f:77:05:c5:
c4:2a:ad:05:69:45:80:1c:8c:f4:28:5e:dd:87:36:7d:72:e8:
63:b8:5f:66:d7:cf:41:f7:e8:18:3a:0e:40:68:47:22:8c:69:
27:5c:c5:a7:c7:8b:66:d5:e7:ec:9a:15:62:ac:19:b0:80:20:
63:f4:5d:80:a0:55:84:54:da:6c:8e:96:e3:01:da:5c:aa:b2:
ce:23:51:b5:f5:f3:0c:2a:eb:dc:1f:ad:5c:94:43:0e:9b:f5:
be:7c:8c:d4:35:8e:41:f2:d3:5d:4f:38:f7:0b:a0:15:33:05:
0d:97:23:62:8e:b3:b4:ff:ec:5c:86:97:79:37:50:14:74:2e:
9c:1c:b6:8d:b5:df:1e:24:c9:d7:17:fc:d1:dd:ca:5a:0e:7c:
12:07:b5:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wG7EvffgmpWToCyqiEJcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MzM2ZDVlNzRmMWY4YjdkYjEzMjlmMDBiYjg1NzI0MWFl
NzRkMTkwHhcNMjYwMzI5MDQwMDUxWhcNMjYwMzMwMDQwMDUxWjAzMTEwLwYDVQQD
EygwNjc0YjkxYzg1OGM3NTc1OTlkZTFhNGYwODlkMTAzZGZhOGY5NDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8Rmu8ZIC2aC+qGGHl5nxAidSdfS
zgx9rVJnpeNhZ2OhI4qXq15Q3aDqLvwLe2iA/sX21H0FYYKx8zF1sk5TFGmHBcsW
0s71/2Ju9uqjutiO3LdmGOOZ0aTaYVzpUlTESwCO9SAC6/kzY+/oX/XGTgSagpJK
5KkyOahMbKnV5mJhVzC0ZL6618IEoOjLYJwOZIoRp+mZ7ahnviQHi6GOh1vElnXK
s1E7+V+NtkN4U4h5t6/tv9i9mpWCsZfMYjFdfTph261xTnZ2YjPtifUgHWzYK7OW
ZR/uNAI78fy1GtvnvnVo6V5mAJQ2O3LJ/rhcJeifou/6EkCfQHFviJAoAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZ0uRyFjHV1md4aTwidED36j5Q8MB8GA1UdIwQY
MBaAFNQzbV508fi32xMp8Au4VyQa500ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUROdFhuVHgtTGZiRXlud0M3aFhKQnJuVFJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zYTZiZGQtMGQzYy00YTBkLThkYjYt
MmRkMjUxODRiMGQwLzEvMUROdFhuVHgtTGZiRXlud0M3aFhKQnJuVFJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8zYTZiZGQtMGQzYy00YTBkLThkYjYtMmRkMjUxODRiMGQw
LzEvMUROdFhuVHgtTGZiRXlud0M3aFhKQnJuVFJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcQiS0Aov
XGHsdfQW+Y0zG7WktJ0fOquLizDoFQ8NzFtFrkGmG+2+d1d/UeoxPGZSseWpYb+m
rRezmLxvxoHcZ58tBMv603vNJ3jaMhHAbH3zG1DkSiEV2hPZjpZKsP8ouF3TDvPV
vNWPdwXFxCqtBWlFgByM9Che3Yc2fXLoY7hfZtfPQffoGDoOQGhHIoxpJ1zFp8eL
ZtXn7JoVYqwZsIAgY/RdgKBVhFTabI6W4wHaXKqyziNRtfXzDCrr3B+tXJRDDpv1
vnyM1DWOQfLTXU849wugFTMFDZcjYo6ztP/sXIaXeTdQFHQunBy2jbXfHiTJ1xf8
0d3KWg58Ege1nQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:28 2026 by rpki-client