Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
File: d4DNTnTxhajxrUBSG2EbdNUWv3c.mft (raw, json)
Hash identifier: 1qDAp1DVqHFEAbzkDU27sISU25MkkeXN/Mt7yO4Ehtk=
Subject key identifier: 57:0C:31:0B:1D:A2:DC:D2:74:60:D6:29:98:1A:45:0E:CA:E0:59:96
Authority key identifier: 77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
Certificate issuer: /CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Certificate serial: 019EBA6AD569ECC9983DC3EB589D07D791F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
Manifest number: 1955
Signing time: Fri 12 Jun 2026 06:00:23 +0000
Manifest this update: Fri 12 Jun 2026 06:00:23 +0000
Manifest next update: Sat 13 Jun 2026 06:00:23 +0000
Files and hashes: 1: 3yGgq6gpQ9NYaasBYMMPQaATXzo.roa (hash: i0WCJtC2Kt+N/0o8HIjmO/t5ox+yoXwX3GlgqEv4MdQ=)
2: ZRLYVrP2rb95Q-Ge4TVnxmxa0zg.roa (hash: Xsb75QA4ApCthewBTBgfSKpRYNo5qI3KmhsLF/JdAuM=)
3: d4DNTnTxhajxrUBSG2EbdNUWv3c.crl (hash: /6Ybf29VeFviosQuapE5B3fwLjq69YdKjItT+eUlu+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 05:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:6a:d5:69:ec:c9:98:3d:c3:eb:58:9d:07:d7:91:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Validity
Not Before: Jun 12 06:00:23 2026 GMT
Not After : Jun 13 06:00:23 2026 GMT
Subject: CN=570c310b1da2dcd27460d629981a450ecae05996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:83:ba:af:77:40:71:b3:7e:8e:74:9a:ce:c8:
6b:94:90:d1:de:31:ce:4c:01:42:98:99:fb:24:5f:
6a:a4:ee:2a:e3:da:b3:cf:9d:f2:11:53:62:73:49:
8f:7a:71:8e:77:0e:d9:0d:8f:93:d2:b3:d7:f8:cb:
88:5f:64:9c:20:66:42:be:03:a5:ab:17:eb:55:0c:
c5:7f:b9:28:98:9e:ec:6d:9a:5c:13:90:b6:a0:21:
1a:34:d0:4c:04:85:ea:54:23:88:6a:a8:45:b5:33:
95:98:cd:b2:0e:95:4f:75:11:9d:17:39:93:e2:59:
77:0c:3c:de:49:7b:93:48:9e:f2:63:97:1f:11:52:
65:53:d8:38:90:38:ae:45:f1:1b:32:b0:9d:7d:85:
0f:6f:25:ad:e8:89:9d:41:e9:b3:41:7e:48:87:28:
8e:79:3b:1a:c6:de:e7:ee:5c:4e:31:74:bd:ff:35:
19:41:a4:1f:42:f8:a7:58:cc:9b:5f:e9:f9:67:d1:
57:3f:4c:07:b1:fd:bd:09:bb:1a:52:94:f5:60:88:
fb:5f:18:c2:c6:30:f5:3e:a0:10:82:aa:b6:10:38:
f8:0c:ab:a9:a9:88:14:9c:c5:59:dd:6f:da:3b:b5:
2d:12:f4:88:4c:9e:3a:0e:96:de:d1:aa:03:ca:96:
29:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0C:31:0B:1D:A2:DC:D2:74:60:D6:29:98:1A:45:0E:CA:E0:59:96
X509v3 Authority Key Identifier:
keyid:77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:ea:80:76:74:90:91:97:4a:7f:0f:68:99:e0:fd:67:0c:87:
26:74:64:8d:49:24:19:6c:29:64:bc:d9:36:cf:e5:1c:bb:ff:
c0:54:a1:b7:2b:2b:44:2f:d6:b8:bf:54:c9:ef:62:e6:5e:5a:
a2:dc:4d:49:36:36:60:62:df:c9:74:6d:34:14:e9:a5:f5:c1:
ee:ed:b0:40:5e:c8:e9:e0:f5:2a:aa:f2:7b:1f:5e:64:6e:b5:
25:40:ad:29:09:2b:3d:9c:df:13:28:24:80:16:6d:e9:e9:3b:
4e:82:fa:1a:2d:7d:02:cf:1c:a8:9d:eb:28:6f:d5:13:93:30:
fa:c5:e8:e2:71:56:a0:d8:c2:5d:cb:ff:3a:b4:86:47:38:35:
fc:4e:09:8a:94:98:17:8f:26:02:ac:6f:ff:20:42:2f:e8:0c:
f0:74:b2:1c:e5:39:92:fa:a6:17:16:3c:ed:2c:14:2e:22:91:
ce:d3:c0:a3:de:ab:1a:93:e0:8e:70:ae:87:34:77:61:d4:0c:
40:68:b4:f8:04:03:68:85:7e:98:23:de:3d:ad:de:c8:da:51:
c5:5c:5c:95:75:ad:43:22:2b:f6:fa:ed:66:25:9e:0b:fd:00:
05:73:ec:57:f5:c5:c5:66:7c:e1:97:f7:a8:b7:ed:7a:ea:4a:
d6:13:ce:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:09:13 2026 by rpki-client