Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
File: 1DNtXnTx-LfbEynwC7hXJBrnTRk.mft (raw, json)
Hash identifier: jV9xYE6q6dwMimJQ0br/Hfhe8cPdICHdiTghQqKn0a8=
Subject key identifier: DD:AA:49:FA:52:43:5D:01:82:20:40:25:9B:BA:4D:9F:AC:16:79:45
Authority key identifier: D4:33:6D:5E:74:F1:F8:B7:DB:13:29:F0:0B:B8:57:24:1A:E7:4D:19
Certificate issuer: /CN=d4336d5e74f1f8b7db1329f00bb857241ae74d19
Certificate serial: 019F189EE8BBAB6F53C80DF69CDA1E210A0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
Manifest number: 0711
Signing time: Tue 30 Jun 2026 13:01:35 +0000
Manifest this update: Tue 30 Jun 2026 13:01:35 +0000
Manifest next update: Wed 01 Jul 2026 13:01:35 +0000
Files and hashes: 1: 1DNtXnTx-LfbEynwC7hXJBrnTRk.crl (hash: 2GUsNuhQh3G/vL8gbwf/v2qKBSjs0UDXek1NSPTlKT0=)
2: w4SYF93bZ7mEac54Bcw2Oj2Zjm0.roa (hash: AiCzf27YzXL7TiAwTl4rqi9Bv4ePafNZNaFvG1buGG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:e8:bb:ab:6f:53:c8:0d:f6:9c:da:1e:21:0a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4336d5e74f1f8b7db1329f00bb857241ae74d19
Validity
Not Before: Jun 30 13:01:35 2026 GMT
Not After : Jul 1 13:01:35 2026 GMT
Subject: CN=ddaa49fa52435d01822040259bba4d9fac167945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:69:7e:00:67:77:f0:03:1e:3c:aa:47:57:ab:
5d:14:20:1d:14:5a:b9:bd:19:18:0e:c6:fc:8b:34:
80:84:e1:53:0c:92:b2:a4:7c:26:27:8b:bc:16:4c:
3b:fb:f4:32:ae:31:ab:02:21:84:7f:54:66:57:75:
19:14:ef:42:67:6d:ca:8c:c2:a1:af:6f:a2:57:74:
63:7c:18:16:2a:36:a3:e9:5d:8e:f5:ac:20:85:eb:
da:94:bc:d3:45:85:be:a1:12:55:7e:30:5c:6a:43:
37:9c:b0:1e:40:9c:fb:74:98:0e:2d:f5:c7:ea:b7:
63:c0:2d:43:03:2c:ce:f4:e4:1b:35:ca:c3:27:d2:
09:5d:f9:6d:77:ea:03:f9:ae:ce:0a:9d:20:69:fb:
cc:36:a4:32:97:81:97:1e:25:47:65:dc:16:b6:c4:
0f:ba:9e:6d:5d:a3:d7:c1:b6:f2:82:77:1b:a3:2c:
7d:3a:e6:9a:ea:32:d4:35:1f:1d:f0:d6:68:b8:e3:
eb:38:34:32:01:be:69:43:16:6d:4d:ca:73:35:8e:
eb:a9:5e:4e:6b:01:ee:5f:ac:b1:95:f2:5a:70:e5:
78:b1:2f:c5:16:8b:76:fb:1f:a8:9e:6d:df:4d:29:
9b:57:86:07:8c:55:a6:06:87:7c:4a:31:14:5e:4f:
cd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AA:49:FA:52:43:5D:01:82:20:40:25:9B:BA:4D:9F:AC:16:79:45
X509v3 Authority Key Identifier:
keyid:D4:33:6D:5E:74:F1:F8:B7:DB:13:29:F0:0B:B8:57:24:1A:E7:4D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:0d:5c:ed:02:ff:fd:e3:9c:0c:38:ae:d8:5c:e0:4f:91:6b:
c4:71:be:b2:67:f4:9b:2f:98:67:4e:ae:ed:f5:23:39:76:4a:
47:6b:5a:ab:9e:5b:8a:e3:af:1f:48:86:ab:ea:62:d2:b8:2f:
10:36:95:6d:66:90:42:b7:50:f0:6e:ca:41:ef:35:c7:e8:7e:
df:4d:c6:fe:1a:76:e6:75:f1:53:ec:0f:9c:26:15:ee:84:6a:
02:2d:e7:e1:8b:59:2f:c1:be:72:7b:65:59:19:5a:8b:d9:91:
39:9d:d0:49:25:e8:1b:d2:b1:14:cb:c0:c2:cb:9b:af:2a:fa:
c1:74:4a:9f:f0:89:df:dd:56:6d:7f:20:b1:2d:01:07:83:89:
f6:4c:84:1f:cb:e4:a5:cc:9c:40:11:d3:fa:a2:23:08:d6:40:
12:55:e2:aa:91:6d:53:86:07:15:83:8a:a0:a1:c1:c0:f0:fe:
bd:09:36:c8:70:4e:ca:c3:51:8b:88:cb:a4:ec:f1:99:1c:36:
3c:59:5e:f9:bf:d7:d9:b1:cb:12:72:5c:66:f7:23:41:09:45:
61:fb:6f:a2:c4:a5:3a:ea:44:70:8f:e9:d6:de:a8:dd:89:7b:
17:93:1d:51:3a:9a:90:82:b4:81:7b:48:40:1e:99:9b:66:e2:
54:7d:40:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:59 2026 by rpki-client