Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
File: dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft (raw, json)
Hash identifier: 3KG1YKlZbuJzpEyOYuzAF7m4y6qwHLGSSdVx5/u/i+Q=
Subject key identifier: B2:F2:ED:D8:BF:13:A1:3A:15:17:25:72:B7:E6:D4:F1:70:15:11:92
Authority key identifier: 74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
Certificate issuer: /CN=74774b7b530edacf8fa73353a9014a5638949bfb
Certificate serial: 019D99D022F6F19FF089A45402AE5A824B4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
Manifest number: 0F91
Signing time: Fri 17 Apr 2026 05:00:47 +0000
Manifest this update: Fri 17 Apr 2026 05:00:47 +0000
Manifest next update: Sat 18 Apr 2026 05:00:47 +0000
Files and hashes: 1: 1FM0mS9YXhi36usAZssgSObubSE.roa (hash: ysx1WmEvblZeb6urFi3lM12je+ZT08ADvjlZD9WQj60=)
2: dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl (hash: 3BlhaBV/a8urOl7CHyw/Fbh0befvGIaL2arw7FlrwGk=)
3: tsnnwKx9h0Bq1OKLzU0QXupmagY.roa (hash: osDK5z+9VSYaQfFUqf/4Hk4+z2z6ZK/YmHN1eV6XoFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:22:f6:f1:9f:f0:89:a4:54:02:ae:5a:82:4b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74774b7b530edacf8fa73353a9014a5638949bfb
Validity
Not Before: Apr 17 05:00:47 2026 GMT
Not After : Apr 18 05:00:47 2026 GMT
Subject: CN=b2f2edd8bf13a13a15172572b7e6d4f170151192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:72:13:df:dc:85:f6:4d:b5:87:89:7a:90:ff:
55:c6:c0:03:1d:db:a7:9e:5e:bd:7c:0f:d3:1d:59:
7d:ca:63:40:0a:18:0e:d1:7f:13:90:26:3e:48:82:
76:f3:8f:fd:db:fa:78:83:7e:b7:d5:2d:ed:15:6f:
95:6a:d3:7e:37:b9:e0:0b:e8:55:ad:38:4d:2c:5b:
80:60:41:0e:98:06:e6:48:fa:44:57:4e:41:06:78:
7b:2b:0f:2c:87:1f:3d:3b:43:4f:26:49:ec:c1:a1:
bf:85:17:1e:55:13:d7:5f:bc:66:45:44:3c:f1:fc:
2e:d5:65:93:d9:71:f1:77:35:f3:dd:61:ce:ad:76:
29:51:ac:a6:b9:9f:b3:87:cc:43:d2:0a:f9:11:2b:
07:eb:6e:70:f8:61:b5:0b:f7:53:53:32:ca:5c:1e:
3e:02:8a:f8:0a:b1:d7:5b:50:fd:5f:3a:ff:7f:8a:
7d:5b:75:58:6e:f7:85:69:c0:20:9f:6a:9f:e1:90:
91:2b:1c:76:57:43:c1:3b:e3:bb:36:d8:f3:4d:e9:
09:d5:f2:0b:9f:25:e0:df:62:5d:65:9b:6a:15:21:
87:0d:32:76:3a:4f:65:65:9b:c9:6c:2f:ef:be:ab:
e5:5f:94:98:1f:af:f3:61:cd:35:3b:15:26:6b:61:
45:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F2:ED:D8:BF:13:A1:3A:15:17:25:72:B7:E6:D4:F1:70:15:11:92
X509v3 Authority Key Identifier:
keyid:74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:88:58:03:68:f7:f0:e2:9e:8a:26:88:fc:08:b1:0b:57:11:
6b:af:d4:3d:c8:6d:d6:5c:e2:23:8c:5b:23:45:71:37:c4:80:
c2:b0:4c:40:1b:06:d1:34:20:f6:ce:5a:a7:e5:2f:98:9c:10:
8f:c1:af:8b:21:95:e5:d6:89:55:ba:76:4a:9d:a3:20:55:5b:
53:11:51:3b:98:f2:ca:e5:f3:3b:09:df:35:51:e6:fe:0f:34:
d7:93:e8:61:0c:5b:b6:25:ae:bf:79:6c:95:4f:2d:f3:ea:95:
73:de:c1:5d:f2:e1:0d:7b:c8:31:f5:7d:0e:4b:6f:e1:99:2d:
9a:fe:30:58:3d:5e:09:11:44:a3:96:77:e1:ca:6d:e1:e0:86:
eb:71:83:34:74:d6:73:6a:51:13:89:20:d3:b4:0c:5f:c3:0e:
34:82:0f:e8:0a:f0:7c:6e:08:4a:2e:10:bf:12:51:d5:e5:e2:
fd:bf:46:38:d5:b5:5a:36:3e:8b:a2:51:62:ce:47:4b:58:6b:
1d:5a:50:cb:e9:b0:7b:e6:9e:1c:bf:6c:13:0a:9f:eb:93:33:
2d:72:ee:98:5a:ae:6b:9c:ff:19:ab:a8:6d:50:eb:fd:b7:26:
b9:a0:0b:37:2e:6f:06:ed:43:61:4d:1e:65:d3:0b:41:15:4c:
90:04:1e:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0CL28Z/wiaRUAq5agktMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0Nzc0YjdiNTMwZWRhY2Y4ZmE3MzM1M2E5MDE0YTU2Mzg5
NDliZmIwHhcNMjYwNDE3MDUwMDQ3WhcNMjYwNDE4MDUwMDQ3WjAzMTEwLwYDVQQD
EyhiMmYyZWRkOGJmMTNhMTNhMTUxNzI1NzJiN2U2ZDRmMTcwMTUxMTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnIT39yF9k21h4l6kP9VxsADHdun
nl69fA/THVl9ymNAChgO0X8TkCY+SIJ284/92/p4g3631S3tFW+VatN+N7ngC+hV
rThNLFuAYEEOmAbmSPpEV05BBnh7Kw8shx89O0NPJknswaG/hRceVRPXX7xmRUQ8
8fwu1WWT2XHxdzXz3WHOrXYpUaymuZ+zh8xD0gr5ESsH625w+GG1C/dTUzLKXB4+
Aor4CrHXW1D9Xzr/f4p9W3VYbveFacAgn2qf4ZCRKxx2V0PBO+O7NtjzTekJ1fIL
nyXg32JdZZtqFSGHDTJ2Ok9lZZvJbC/vvqvlX5SYH6/zYc01OxUma2FF4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLLy7di/E6E6FRclcrfm1PFwFRGSMB8GA1UdIwQY
MBaAFHR3S3tTDtrPj6czU6kBSlY4lJv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEhkTGUxTU8ycy1QcHpOVHFRRktWamlVbV9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8wZmI2OWQtY2VmYy00NmVjLWJlMzkt
ODViZDM0YmQ0ZTVhLzEvZEhkTGUxTU8ycy1QcHpOVHFRRktWamlVbV9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8wZmI2OWQtY2VmYy00NmVjLWJlMzktODViZDM0YmQ0ZTVh
LzEvZEhkTGUxTU8ycy1QcHpOVHFRRktWamlVbV9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcYhYA2j3
8OKeiiaI/AixC1cRa6/UPcht1lziI4xbI0VxN8SAwrBMQBsG0TQg9s5ap+UvmJwQ
j8GviyGV5daJVbp2Sp2jIFVbUxFRO5jyyuXzOwnfNVHm/g8015PoYQxbtiWuv3ls
lU8t8+qVc97BXfLhDXvIMfV9Dktv4Zktmv4wWD1eCRFEo5Z34cpt4eCG63GDNHTW
c2pRE4kg07QMX8MONIIP6ArwfG4ISi4QvxJR1eXi/b9GONW1WjY+i6JRYs5HS1hr
HVpQy+mwe+aeHL9sEwqf65MzLXLumFqua5z/GauobVDr/bcmuaALNy5vBu1DYU0e
ZdMLQRVMkAQeGQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:26:35 2026 by rpki-client