Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
File: dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft (raw, json)
Hash identifier: H2VEZbfD0Hlkyx+POXWrogaTOrQpemQQA68VYAMkD84=
Subject key identifier: 7F:75:F4:E0:BA:BD:35:33:9A:67:E6:C5:4F:0F:2A:C4:D0:96:44:47
Authority key identifier: 74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
Certificate issuer: /CN=74774b7b530edacf8fa73353a9014a5638949bfb
Certificate serial: 019EC337440F086330A56228D61557C0D721
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
Manifest number: 102B
Signing time: Sat 13 Jun 2026 23:00:39 +0000
Manifest this update: Sat 13 Jun 2026 23:00:39 +0000
Manifest next update: Sun 14 Jun 2026 23:00:39 +0000
Files and hashes: 1: 1FM0mS9YXhi36usAZssgSObubSE.roa (hash: ysx1WmEvblZeb6urFi3lM12je+ZT08ADvjlZD9WQj60=)
2: dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl (hash: 5f2NNtsqjHnY+GKA1x+iSieFcp9ZFy4mAXjvrDqHCi8=)
3: tsnnwKx9h0Bq1OKLzU0QXupmagY.roa (hash: osDK5z+9VSYaQfFUqf/4Hk4+z2z6ZK/YmHN1eV6XoFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:37:44:0f:08:63:30:a5:62:28:d6:15:57:c0:d7:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74774b7b530edacf8fa73353a9014a5638949bfb
Validity
Not Before: Jun 13 23:00:39 2026 GMT
Not After : Jun 14 23:00:39 2026 GMT
Subject: CN=7f75f4e0babd35339a67e6c54f0f2ac4d0964447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b6:66:cc:df:6c:8f:1a:85:32:65:40:84:dd:
18:bc:6c:08:36:3c:33:0e:ed:90:45:2b:0e:72:94:
43:d8:2b:f2:3f:6d:be:71:47:9b:4e:12:b4:87:9d:
e4:e0:6d:10:9b:f0:24:81:08:2b:37:53:3f:1f:97:
fc:cc:f2:9a:3a:dd:97:dc:67:d4:fc:17:80:ab:6d:
26:3f:51:56:f3:26:9d:dc:3a:d1:03:56:cb:d4:51:
1d:cc:71:74:01:be:37:a6:54:52:8c:cf:56:bf:09:
a4:b6:83:84:34:9e:2b:9f:ae:44:da:d7:bb:da:79:
80:54:a7:10:82:3a:dc:c7:b2:97:a8:f8:3f:5f:1a:
8d:a0:c6:c6:a6:05:75:37:e8:f2:80:9d:10:d5:6c:
ae:1e:a5:22:6e:be:7f:21:c5:a3:6f:c7:c8:73:71:
24:36:d2:de:4d:b9:c0:bd:20:a0:ee:54:2b:a6:ac:
dd:7c:ea:7a:36:fb:b4:ec:fe:4c:98:1e:a6:18:ab:
13:c6:05:11:93:b3:ae:24:3e:63:e2:3b:ad:5c:6b:
62:2f:e5:cc:42:e0:6a:3c:93:95:c4:e4:64:25:ee:
b6:65:da:cf:a3:0d:4d:bf:99:9c:8c:52:50:c1:4d:
ae:9f:f4:22:76:f9:f1:cd:04:50:9b:30:b2:13:c7:
1b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:75:F4:E0:BA:BD:35:33:9A:67:E6:C5:4F:0F:2A:C4:D0:96:44:47
X509v3 Authority Key Identifier:
keyid:74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:cc:b1:6a:c7:d4:3a:9a:fb:17:d5:d4:ba:5b:cb:c1:da:2a:
69:29:fd:18:89:1e:3b:bc:9c:01:1f:90:2b:74:48:e0:94:7b:
71:65:4f:8e:86:84:db:85:c9:44:f5:74:2a:d0:de:51:40:bc:
4f:3c:f6:65:1d:5f:1e:5d:9d:fa:67:3d:1a:47:e4:ac:99:6b:
99:3f:f7:a4:a3:4d:82:00:b6:4c:b4:10:03:7f:fb:d0:86:42:
07:4e:85:60:a2:62:37:db:bf:48:0d:08:73:60:2a:eb:dc:fa:
f1:a0:b5:e8:75:77:70:8c:82:bc:3b:1d:78:df:27:d3:dd:2c:
5e:35:63:2c:6f:50:c2:5d:de:44:24:56:9c:03:67:3e:32:9f:
9d:e6:74:ae:0d:4f:cc:19:72:c5:c8:29:5d:05:4d:6b:37:73:
93:ec:29:74:b7:b5:34:dd:63:28:b0:a8:e7:5a:f2:2e:6c:88:
29:67:fa:8c:2f:ae:99:8d:52:e0:b3:fa:ca:5e:15:b7:40:c1:
f9:47:17:88:3a:e3:83:9c:38:92:c2:8a:ba:1e:e0:9d:af:9a:
22:04:8e:bc:a4:e1:50:1f:55:64:42:c3:32:cb:27:90:cd:97:
3d:28:3d:7c:05:44:37:1a:62:41:5a:56:da:61:97:ef:2f:fd:
bd:08:3b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:43:21 2026 by rpki-client