
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
File: txDNRHGj-M3NhE0_NmFIlAlStOc.mft (raw, json)
Hash identifier: f+bXwQp4+xRZ+oX30n0BdtctYkvDrf6qibUqOtlAUUY=
Subject key identifier: 43:5C:6A:22:84:A8:CB:47:56:B8:B7:5F:42:7C:A2:C3:98:A8:B8:E0
Authority key identifier: B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7
Certificate issuer: /CN=b710cd4471a3f8cdcd844d3f366148940952b4e7
Certificate serial: 019F1453EA6C0E1794E8102627184C78F3B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
Manifest number: 1984
Signing time: Mon 29 Jun 2026 17:01:11 +0000
Manifest this update: Mon 29 Jun 2026 17:01:11 +0000
Manifest next update: Tue 30 Jun 2026 17:01:11 +0000
Files and hashes: 1: Hh4oawFMPhlZWHiv9oVznjVHldw.roa (hash: ZkANeMjzmI2+4mD6XiyteCRytMwKnaF4f4SfTl1h+1g=)
2: txDNRHGj-M3NhE0_NmFIlAlStOc.crl (hash: 06UmlEsPsBraxRjdQ2MgJt4qfyVYSGqzh9XwE2hB8U8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 17:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:53:ea:6c:0e:17:94:e8:10:26:27:18:4c:78:f3:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b710cd4471a3f8cdcd844d3f366148940952b4e7
Validity
Not Before: Jun 29 17:01:11 2026 GMT
Not After : Jun 30 17:01:11 2026 GMT
Subject: CN=435c6a2284a8cb4756b8b75f427ca2c398a8b8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:10:3b:51:03:5c:ae:fe:a2:20:07:85:95:4f:
bb:0c:df:33:b3:17:72:af:ff:dd:61:bd:fd:a8:40:
66:bc:73:70:bf:43:c7:66:29:b3:8c:33:68:ac:9d:
1d:d7:33:a5:b2:ed:c5:ae:3e:12:93:3f:e5:e8:a3:
f6:05:63:8c:a2:b3:8b:45:b8:3e:93:6d:bc:cc:a6:
9b:8a:09:2d:c5:c1:6f:b1:74:eb:ec:95:15:b3:83:
f1:dd:a9:d6:f8:42:cf:6b:3a:1e:89:d8:a5:f3:5e:
9d:36:18:c7:23:91:78:3c:5b:c6:19:1c:80:e6:bd:
70:3b:3a:17:74:77:f9:bd:4f:e3:37:14:ca:c2:e4:
a8:43:46:af:66:e7:19:73:64:af:98:db:c4:4e:9e:
15:15:66:2d:00:b7:83:06:02:69:49:91:89:cd:3e:
f8:18:7e:63:4b:f9:c0:9f:46:fe:26:71:16:70:5a:
82:81:0d:ec:8a:9c:78:08:f4:2c:d1:3b:9e:3a:3e:
9e:87:45:ea:05:1f:2e:96:ab:39:0e:fc:8e:02:0e:
bb:b8:12:1e:b8:52:f0:dd:90:9d:2b:15:da:6c:09:
d5:d8:ea:88:46:47:f5:cd:c0:19:a7:ad:62:b4:f8:
65:a4:6e:2c:aa:d7:4c:49:c4:c4:a1:d4:d7:e1:11:
95:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5C:6A:22:84:A8:CB:47:56:B8:B7:5F:42:7C:A2:C3:98:A8:B8:E0
X509v3 Authority Key Identifier:
keyid:B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:12:f3:09:ac:08:19:35:f5:ea:4f:b3:b8:db:97:c6:cd:8a:
4e:e1:b1:b7:9e:8a:77:3c:5b:82:db:3f:e9:76:fd:bd:b7:06:
43:22:22:ce:c8:0e:8f:8f:3e:66:70:39:b4:f5:86:d1:42:a9:
be:73:51:2a:03:03:b0:66:46:04:c0:94:08:f7:d7:49:1d:9c:
ed:e4:28:ce:e6:38:1a:26:87:1c:f7:b0:0d:35:bb:94:db:b4:
c0:8f:5c:1b:ce:d7:bf:3e:be:ef:2d:e3:06:aa:07:b8:3e:3f:
59:c7:1e:41:9c:65:4d:9b:f3:7e:05:0f:b9:7f:08:53:0f:a6:
20:b6:32:a7:08:45:1d:e1:a3:1d:a2:7b:5c:e8:a2:02:cb:be:
46:bd:4c:51:ed:77:ab:66:f2:47:60:6a:1b:e5:60:bf:83:9d:
6d:c7:50:e6:3d:b7:ef:0c:7a:c6:38:a7:b9:c2:79:0f:a7:f8:
71:ac:a2:1b:c0:15:d2:64:7a:bb:39:09:0c:5a:52:a7:b5:f4:
e5:ce:07:5c:8c:03:e4:67:11:03:ca:52:43:e8:c6:d6:02:bf:
b4:a5:bc:4d:fd:09:6c:67:2e:a8:d7:d3:b6:50:1b:a6:e4:dc:
c7:9f:7f:4a:38:16:2e:4f:e9:ff:01:64:11:43:09:ca:bc:87:
3f:53:44:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 02:26:22 2026 by rpki-client