Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
File: 1DsiEwqpp3NCVHaewTv-Fx-h4os.mft (raw, json)
Hash identifier: HxNsX1DrgrRuQ5621fyqVOvIYYl7xRLw8ll86XKDjqE=
Subject key identifier: 3F:F8:4A:A4:D4:12:42:E0:15:0A:AB:64:4A:2E:AE:4C:9A:18:E3:AA
Authority key identifier: D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B
Certificate issuer: /CN=d43b22130aa9a7734254769ec13bfe171fa1e28b
Certificate serial: 019EC06D5CE941B2E9BDC63F69AAF0A8527B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
Manifest number: 0E69
Signing time: Sat 13 Jun 2026 10:00:53 +0000
Manifest this update: Sat 13 Jun 2026 10:00:53 +0000
Manifest next update: Sun 14 Jun 2026 10:00:53 +0000
Files and hashes: 1: 1DsiEwqpp3NCVHaewTv-Fx-h4os.crl (hash: IbAiXI4gSlOhGXnv+y2fr3eWYNDsM6wq8yIkNdCDITg=)
2: LcZ01B8XER2_rfHNBUAgVCnzOW8.roa (hash: 0WZJeMvXyTID6Mtu4m//BfRpROZSkchZp8tEs1f8aqo=)
3: wEAh6Y1gg6BEm0orkWdwRI0gp74.roa (hash: X3U5riqBeOsUH+HvnP5Z0bS6jprPNi+05ZohLO28jWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:5c:e9:41:b2:e9:bd:c6:3f:69:aa:f0:a8:52:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d43b22130aa9a7734254769ec13bfe171fa1e28b
Validity
Not Before: Jun 13 10:00:53 2026 GMT
Not After : Jun 14 10:00:53 2026 GMT
Subject: CN=3ff84aa4d41242e0150aab644a2eae4c9a18e3aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:45:c7:14:bd:0b:59:1a:b4:c3:b9:25:1d:76:
60:ce:ef:08:99:d4:55:bd:5e:87:10:3a:50:53:15:
4f:22:98:a5:39:9c:89:48:7e:53:0c:ec:1f:e2:5e:
b8:9d:0c:bd:9e:24:71:ae:df:97:64:b0:29:dd:32:
e7:bd:51:5a:d6:87:9f:ad:ac:35:ab:7c:65:f7:58:
6c:8a:dc:41:1a:d3:0c:55:89:0e:d3:08:83:7d:fc:
54:35:65:6b:16:5f:9b:db:fa:92:c0:22:f2:85:98:
89:a2:23:e0:81:35:f5:d9:ee:b8:d0:25:ac:24:f3:
f4:2e:9a:cb:63:4c:80:a8:12:f7:23:e3:a7:63:f6:
5b:2f:d0:fe:45:07:70:16:26:33:ac:0a:ff:06:16:
46:6f:48:bc:18:de:64:86:56:7b:4d:1f:72:31:a0:
98:f0:a9:21:6d:77:61:ed:50:e4:ed:0e:03:95:57:
2d:71:5f:01:75:ac:44:45:b9:e0:6f:c4:df:ab:f9:
cb:f3:ed:6c:b5:0a:88:50:f8:71:d8:12:71:05:b8:
70:c2:74:d7:38:a2:b9:97:3e:2e:e9:5a:4a:00:c1:
a2:79:2e:46:f5:37:a7:33:d1:de:04:6e:39:42:e0:
e1:c6:52:2a:35:af:4a:2b:79:d0:13:0c:00:f7:46:
6e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F8:4A:A4:D4:12:42:E0:15:0A:AB:64:4A:2E:AE:4C:9A:18:E3:AA
X509v3 Authority Key Identifier:
keyid:D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:0f:0c:97:86:a1:06:36:db:2b:42:70:59:b4:0a:65:c3:9e:
6d:ba:87:9a:f1:38:b0:f3:ba:87:1e:70:cd:a7:8e:4a:63:ec:
98:cc:85:68:64:71:e6:1e:b0:8c:1c:21:40:c7:e4:27:50:c8:
4f:7c:2b:62:93:79:ba:56:f9:26:ac:5d:74:45:38:83:f2:93:
50:bc:bd:b6:6c:65:b2:61:31:f5:15:98:66:4d:b7:00:c4:63:
35:35:ed:63:1c:31:57:94:9f:25:fd:05:3b:90:46:05:e9:cd:
5f:3a:3b:b0:9a:0b:9f:96:d3:13:c3:e5:23:57:4a:ed:60:de:
36:40:aa:60:3a:f7:3a:f3:ea:18:4a:c4:d5:eb:b0:fb:82:e7:
86:52:8b:e4:5f:ef:b6:4d:33:6d:85:47:95:ef:17:f1:17:27:
93:9b:54:40:a9:ed:76:d3:fa:a6:a5:13:b5:56:f7:44:db:6d:
b9:0e:83:e4:fe:f7:69:0a:d9:8a:cf:a0:e0:99:f4:d6:be:ba:
82:59:30:02:af:c2:b9:47:25:12:02:3a:d3:1b:a7:8c:26:a3:
22:19:2b:c8:24:2a:5a:1e:4b:34:81:a6:f7:a8:b1:08:86:1b:
b9:d0:40:90:f7:e1:ea:6c:70:18:47:96:cb:60:5d:7b:f1:dd:
7d:3b:5f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:04:34 2026 by rpki-client