Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
File: dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft (raw, json)
Hash identifier: iqhuoFfPtGR5KJ5dcVTk8aZrXbANyGCCJ/ffzxWW0GY=
Subject key identifier: 4D:32:B8:2C:3F:80:E9:B9:E3:E0:C2:72:33:D9:8E:D8:B1:DA:ED:40
Authority key identifier: 74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
Certificate issuer: /CN=74774b7b530edacf8fa73353a9014a5638949bfb
Certificate serial: 019CAE35A1A643AA8A0ED1D8A0778BF38E31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
Manifest number: 0F17
Signing time: Mon 02 Mar 2026 11:01:16 +0000
Manifest this update: Mon 02 Mar 2026 11:01:16 +0000
Manifest next update: Tue 03 Mar 2026 11:01:16 +0000
Files and hashes: 1: 1FM0mS9YXhi36usAZssgSObubSE.roa (hash: ysx1WmEvblZeb6urFi3lM12je+ZT08ADvjlZD9WQj60=)
2: dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl (hash: WquNwnPJ1vnDVqkc6Vd6LzTotFUfc0mN+/XxWKv5dXw=)
3: tsnnwKx9h0Bq1OKLzU0QXupmagY.roa (hash: osDK5z+9VSYaQfFUqf/4Hk4+z2z6ZK/YmHN1eV6XoFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:a1:a6:43:aa:8a:0e:d1:d8:a0:77:8b:f3:8e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74774b7b530edacf8fa73353a9014a5638949bfb
Validity
Not Before: Mar 2 11:01:16 2026 GMT
Not After : Mar 3 11:01:16 2026 GMT
Subject: CN=4d32b82c3f80e9b9e3e0c27233d98ed8b1daed40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:52:3f:90:76:e1:1c:a1:a0:85:85:7b:3e:1a:
4b:70:c9:04:3e:ed:bc:bc:19:8e:93:a2:46:f8:e4:
f9:c6:98:8b:e3:9a:0e:65:c6:e9:06:d0:cc:17:42:
c2:71:29:43:1a:91:b5:6d:cd:15:c9:d0:2b:91:5d:
23:48:c9:3d:ff:04:8f:1e:c1:2b:30:ac:4c:f9:4f:
ae:b5:87:54:80:19:51:b6:a7:ea:1f:a3:a4:e9:3a:
b8:00:96:83:23:23:83:4d:a0:25:37:fb:23:0b:9a:
5a:48:75:eb:cb:05:22:98:69:51:0a:9d:80:2f:b6:
90:5f:61:4b:8b:61:64:42:db:ef:43:85:00:f0:8e:
7e:72:87:13:61:f6:3f:a0:cf:ae:83:ae:60:79:bb:
f5:ac:de:a2:cf:7b:09:1a:05:fc:30:14:dd:67:5a:
84:1c:4b:32:b7:5a:fd:2b:0b:22:da:0b:3f:96:a8:
c5:e4:a5:69:d5:42:8a:a2:7a:cb:51:90:34:af:a2:
49:66:60:2f:65:be:36:79:fc:d9:7e:db:ae:4a:d2:
e5:71:7f:d0:84:e0:f1:c2:c9:06:26:dc:44:3d:c1:
c1:ec:3d:18:be:d0:9e:39:ef:2e:5a:e9:80:bf:00:
fc:98:9f:68:05:60:4e:31:d7:45:3c:18:4a:1d:dc:
9c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:32:B8:2C:3F:80:E9:B9:E3:E0:C2:72:33:D9:8E:D8:B1:DA:ED:40
X509v3 Authority Key Identifier:
keyid:74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:28:8d:e3:63:16:ab:bd:37:9d:a8:3e:f3:d8:68:58:bb:48:
ab:e2:1c:5d:50:73:a5:4c:6e:a7:cb:1c:e9:5e:c1:2e:94:da:
13:09:f0:7b:e8:6f:e8:a5:a3:7a:06:cd:88:aa:07:03:66:6c:
60:9c:a3:4b:0e:cf:69:1a:b4:12:b6:ab:77:1d:94:15:5c:db:
53:76:56:21:47:6a:cd:71:88:13:ee:09:8a:5e:c9:3a:3b:32:
04:e0:84:77:65:9e:80:a8:0a:b9:19:1a:d8:c6:3d:03:0d:74:
a0:d1:0c:60:90:3f:c6:44:a1:46:5d:dd:84:ff:31:54:32:9d:
43:1d:2d:20:4a:83:fc:29:ea:e8:af:78:2a:0b:07:69:e8:1b:
37:41:6c:55:d4:c1:24:0c:ed:e3:85:52:cf:ce:c8:a5:19:b1:
db:44:6a:eb:32:c0:bd:05:a6:b2:58:d4:b4:f7:8a:4f:74:66:
b9:01:79:55:a7:f1:f4:5a:5a:d2:29:cd:eb:20:f7:1a:cf:38:
7b:c7:1b:02:80:c2:67:19:34:3a:eb:e1:a4:ea:73:35:97:78:
62:30:83:3b:b5:31:c2:84:27:b8:d3:b0:b4:94:82:10:6e:9c:
4f:97:24:f4:1d:62:2c:98:0d:2a:e0:49:e2:bf:59:f3:21:c2:
39:2e:de:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:40:55 2026 by rpki-client