Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
File: 1DNtXnTx-LfbEynwC7hXJBrnTRk.mft (raw, json)
Hash identifier: kjGBKyHnQhOKZGGSLX7pgNayLbkKt+XvjJ/YmCjjCDw=
Subject key identifier: AF:A5:D8:BD:96:EA:E3:58:A6:EC:CA:31:66:5E:8A:F0:31:3A:5C:96
Authority key identifier: D4:33:6D:5E:74:F1:F8:B7:DB:13:29:F0:0B:B8:57:24:1A:E7:4D:19
Certificate issuer: /CN=d4336d5e74f1f8b7db1329f00bb857241ae74d19
Certificate serial: 019FAB63EADF70FA857A5DD6A575AB3355A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
Manifest number: 075D
Signing time: Wed 29 Jul 2026 01:01:19 +0000
Manifest this update: Wed 29 Jul 2026 01:01:19 +0000
Manifest next update: Thu 30 Jul 2026 01:01:19 +0000
Files and hashes: 1: 1DNtXnTx-LfbEynwC7hXJBrnTRk.crl (hash: aPkVJJmshf3Ej+gMVzJ1W+hxn1IAWNoh/4gcRLl6pHU=)
2: w4SYF93bZ7mEac54Bcw2Oj2Zjm0.roa (hash: AiCzf27YzXL7TiAwTl4rqi9Bv4ePafNZNaFvG1buGG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:ea:df:70:fa:85:7a:5d:d6:a5:75:ab:33:55:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4336d5e74f1f8b7db1329f00bb857241ae74d19
Validity
Not Before: Jul 29 01:01:19 2026 GMT
Not After : Jul 30 01:01:19 2026 GMT
Subject: CN=afa5d8bd96eae358a6ecca31665e8af0313a5c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ad:8b:a1:f1:a6:59:e2:09:2f:06:3a:b6:50:
f3:fb:47:9f:73:a9:11:7b:d0:f9:42:da:49:81:b5:
30:3d:25:61:51:93:11:d7:18:02:07:e5:d2:3b:84:
a9:94:6a:70:f5:00:45:cd:ba:19:00:1a:e8:fb:88:
e5:e1:79:57:39:cd:79:00:38:8c:cb:21:90:69:60:
7b:5a:70:e7:96:7b:7d:77:22:36:c5:c0:5a:c8:37:
85:50:72:9a:54:bb:44:c6:08:da:ce:09:a3:41:e7:
5a:34:ac:12:e9:c8:54:f3:62:a0:c6:c0:11:28:39:
33:7c:b7:87:59:7c:fb:ae:7b:f1:83:87:38:50:e3:
e1:5d:f6:70:23:60:af:91:03:cf:d7:5d:fe:82:8d:
ea:3b:35:66:f1:47:98:d7:e4:ef:75:4e:9b:99:ef:
b2:38:fe:0d:bd:99:b5:72:b6:1f:12:fa:b4:b7:e7:
81:51:fb:e5:37:5a:53:d8:1e:c8:af:9c:64:89:38:
8f:db:3b:0b:f6:7a:b8:ad:4e:66:59:4d:73:0a:e9:
04:c6:94:b7:27:d4:3e:f0:05:27:81:39:c9:33:75:
ae:f5:b5:2c:a7:17:e9:70:1a:44:18:93:27:41:bc:
b1:39:7b:b2:3e:7c:5a:95:c6:48:44:13:e5:eb:39:
fe:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A5:D8:BD:96:EA:E3:58:A6:EC:CA:31:66:5E:8A:F0:31:3A:5C:96
X509v3 Authority Key Identifier:
keyid:D4:33:6D:5E:74:F1:F8:B7:DB:13:29:F0:0B:B8:57:24:1A:E7:4D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:92:bd:43:6f:a5:21:6c:34:21:26:f6:c5:82:be:bf:9b:7c:
9d:73:b5:3d:c9:b8:67:c9:38:c3:9e:9f:a9:3d:b5:c0:a0:19:
b5:d8:99:63:4b:2c:37:9e:17:08:1e:89:34:01:88:1e:59:eb:
1e:a0:c8:a1:5c:ef:1d:b2:af:2f:fc:36:96:2b:24:c3:dd:a1:
96:b4:0f:94:59:ca:3d:f0:a5:64:49:aa:0e:3e:63:ba:a9:2b:
a5:51:95:60:0c:b7:35:13:f1:a5:39:ed:91:f4:cd:59:83:ff:
84:ae:51:a0:8c:c7:bd:40:cd:59:94:99:62:c2:ca:6f:63:8a:
b4:dc:4f:f8:fa:f2:79:dd:ff:fc:14:47:5c:bf:0e:5d:c0:4f:
ff:9a:9e:bc:0e:99:5e:5f:30:27:58:d1:c5:14:48:15:86:1e:
74:8d:be:fd:84:ea:ad:16:97:77:59:ab:f2:ed:26:ac:1f:05:
3c:35:9f:99:6f:b7:de:ac:ff:9a:0f:10:8c:5e:b0:90:01:ec:
a0:42:57:96:3a:27:3e:36:e5:d2:da:43:01:11:a9:37:d9:dd:
d6:d1:5f:cd:b3:2e:d6:dc:21:8c:ed:9e:00:c5:1e:d2:06:cb:
99:b4:de:c3:38:13:18:73:42:41:ca:a2:f3:cf:ea:4a:7d:8b:
e1:d0:b0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:28:42 2026 by rpki-client