Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft
File: dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft (raw, json)
Hash identifier: FL6DZrw3igdwf0pnzsDPdyjTH6RVLoRL8XeC8a3RwxY=
Subject key identifier: 40:E9:B2:7C:00:C2:F2:E4:F4:EE:7D:D0:45:99:A0:B9:FE:7A:A1:81
Authority key identifier: 76:D4:4D:97:65:3A:06:D8:46:B2:44:35:35:B8:3E:8C:BC:39:D9:28
Certificate issuer: /CN=76d44d97653a06d846b2443535b83e8cbc39d928
Certificate serial: 019E4EB4095849CC1DBBADEC59A55B7745D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dtRNl2U6BthGskQ1Nbg-jLw52Sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft
Manifest number: 058E
Signing time: Fri 22 May 2026 08:01:22 +0000
Manifest this update: Fri 22 May 2026 08:01:22 +0000
Manifest next update: Sat 23 May 2026 08:01:22 +0000
Files and hashes: 1: RIKPxzN612TS7QdYx0yhnbfdgCk.roa (hash: 07oY6OiufBnwXNFc8F9BHYyCv8CtgRF58yYSOyMr920=)
2: SLrQ1knzFhgHD__1U04Q5GQJX3U.roa (hash: AVeAooocOWwYiMM4BHVrd1TGE917Rw4KZCVXlSQ+oDM=)
3: dtRNl2U6BthGskQ1Nbg-jLw52Sg.crl (hash: pYdmLWXUPJXqW/FQ1HFsnKZkBZZTHqe76cn+wYTgbfc=)
4: ryBPgXvA-kuwL8ute7lp1pTeuxA.roa (hash: aMotHhiy0ZyL5y70ElZdApnRGo5oHKFlodbC24Zl6LA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dtRNl2U6BthGskQ1Nbg-jLw52Sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4e:b4:09:58:49:cc:1d:bb:ad:ec:59:a5:5b:77:45:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76d44d97653a06d846b2443535b83e8cbc39d928
Validity
Not Before: May 22 08:01:22 2026 GMT
Not After : May 23 08:01:22 2026 GMT
Subject: CN=40e9b27c00c2f2e4f4ee7dd04599a0b9fe7aa181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:76:09:2c:f4:e5:5f:68:fc:95:66:c2:df:17:
41:ec:20:40:bc:cb:21:aa:e1:35:c8:04:51:b5:ad:
65:9a:7b:4b:53:6d:29:21:02:7b:4f:fe:2c:67:fd:
a4:f9:97:64:51:4e:dd:34:5c:01:21:cc:85:6b:9c:
d0:a2:b3:a5:f8:c4:e2:82:ec:ea:98:09:bf:75:be:
7f:91:6b:38:e1:98:83:e7:78:fb:f7:fe:78:3d:14:
8e:9e:99:5e:ca:50:9a:7a:9c:85:71:a9:65:0e:28:
91:f5:27:a5:69:e7:ee:16:17:10:5a:5d:51:fa:cd:
4b:ca:f8:a6:85:5e:ca:84:9e:ca:a4:1c:6a:0b:a5:
7d:dc:0d:40:c0:b9:07:18:51:02:79:a6:a9:be:da:
14:b6:ac:46:bf:fb:83:44:1b:40:5c:07:73:20:1f:
ab:fc:55:dd:78:13:52:24:4b:80:6d:be:74:25:c6:
d4:20:00:8e:7a:11:ab:69:3d:e1:ab:32:50:05:da:
7f:08:be:03:11:cb:a1:eb:54:18:d0:ad:88:bf:ef:
30:b3:93:c3:5e:bc:73:a7:29:4c:f9:3a:1f:72:d9:
93:fd:84:58:b7:f9:7f:5c:da:88:32:35:0d:8d:17:
ba:23:b7:9e:2b:44:0c:5c:de:f2:58:97:73:bc:93:
17:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E9:B2:7C:00:C2:F2:E4:F4:EE:7D:D0:45:99:A0:B9:FE:7A:A1:81
X509v3 Authority Key Identifier:
keyid:76:D4:4D:97:65:3A:06:D8:46:B2:44:35:35:B8:3E:8C:BC:39:D9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtRNl2U6BthGskQ1Nbg-jLw52Sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:8e:84:ce:c8:51:67:03:5a:5b:27:20:9b:8a:3e:da:78:fd:
9c:bf:00:a5:a0:32:44:3c:c8:d5:79:02:97:ca:f6:58:21:67:
e6:39:91:fb:ec:d3:d9:69:41:f4:0a:3f:5a:b0:a9:bb:9e:0f:
fc:17:3c:8d:51:46:c9:43:4b:d5:18:4a:08:46:2a:e6:5d:83:
ca:57:da:4b:bb:7f:d0:6a:60:01:5e:d5:63:c0:83:10:43:09:
10:a1:73:c8:23:17:82:29:95:91:1e:67:90:31:f4:73:a3:d5:
f6:c5:0d:00:58:e0:8d:ad:f7:78:7f:3c:aa:62:76:f1:85:68:
fc:6b:3b:e3:80:58:46:11:c0:52:fa:cb:83:46:ba:e5:3f:ca:
47:8c:e8:f0:be:af:f5:ba:d3:2c:79:a4:a1:b7:f9:4d:95:12:
16:57:57:cc:76:44:0a:e9:00:61:1c:ed:5a:1a:03:41:eb:53:
81:2e:a0:f5:f6:ac:49:45:5a:33:15:42:4d:9f:26:dd:9e:2a:
84:bf:0c:48:7e:99:98:f2:52:a5:10:06:a6:01:81:a7:2e:2e:
1c:54:da:7b:93:90:fa:e4:54:8a:0d:e5:da:a8:5e:a4:3e:09:
29:9f:8f:ef:52:6a:f7:03:83:1f:a7:8c:be:8a:47:e1:f5:5c:
c1:b3:62:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:11:18 2026 by rpki-client