Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
File: d4DNTnTxhajxrUBSG2EbdNUWv3c.mft (raw, json)
Hash identifier: Rz+9rBWokeRVRydTnHz5cNH1S085Q1Uz5aq4nQgRNck=
Subject key identifier: 60:EA:CE:5D:4D:CE:4B:E9:8B:86:F2:F6:C5:C9:3E:15:24:81:4F:FC
Authority key identifier: 77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
Certificate issuer: /CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Certificate serial: 019ED5751B8D3C436A7F184CD004B71CB0E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
Manifest number: 1963
Signing time: Wed 17 Jun 2026 12:01:22 +0000
Manifest this update: Wed 17 Jun 2026 12:01:22 +0000
Manifest next update: Thu 18 Jun 2026 12:01:22 +0000
Files and hashes: 1: 3yGgq6gpQ9NYaasBYMMPQaATXzo.roa (hash: i0WCJtC2Kt+N/0o8HIjmO/t5ox+yoXwX3GlgqEv4MdQ=)
2: ZRLYVrP2rb95Q-Ge4TVnxmxa0zg.roa (hash: Xsb75QA4ApCthewBTBgfSKpRYNo5qI3KmhsLF/JdAuM=)
3: d4DNTnTxhajxrUBSG2EbdNUWv3c.crl (hash: s/IOtRwwvyx3kAHo2EujR0KKnDq4WIwH1cKYptT6b54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:75:1b:8d:3c:43:6a:7f:18:4c:d0:04:b7:1c:b0:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Validity
Not Before: Jun 17 12:01:22 2026 GMT
Not After : Jun 18 12:01:22 2026 GMT
Subject: CN=60eace5d4dce4be98b86f2f6c5c93e1524814ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c5:63:96:a2:e3:af:2e:84:04:c5:ad:40:bd:
a7:9b:f1:92:37:6a:09:94:94:e7:ed:4a:22:7d:ef:
fe:a1:a0:5d:a3:fb:37:70:8b:2e:9a:89:73:12:76:
b2:9f:fb:62:0d:c5:d3:36:a4:98:a9:e8:23:4f:bb:
5b:28:07:00:ff:3b:72:3b:32:c1:e4:19:ba:a0:6c:
c3:a9:98:62:cd:93:fb:4d:39:90:6f:2f:1f:5d:ca:
f5:62:a3:f4:37:58:5c:f7:e5:91:7c:e8:88:77:4b:
b3:64:16:af:13:1a:ee:4d:0b:00:b6:01:1f:4d:d0:
a1:f0:ff:b7:ef:5c:6e:53:62:0c:0b:46:0f:e0:65:
86:2e:34:3b:64:5b:dd:85:73:c4:77:0b:84:b6:a2:
e7:06:e7:43:c1:5e:8d:4a:d9:e0:16:92:95:12:eb:
fa:f7:2c:23:20:c0:2a:82:a5:a8:fb:a2:b2:09:08:
ce:ee:ff:40:99:e1:91:e4:c1:f2:2b:be:88:d1:e8:
d5:0c:32:52:85:a9:4f:c1:6f:83:00:40:53:2a:47:
d6:ef:90:7c:47:ab:2c:b2:58:c7:a8:85:7c:9c:a1:
15:4e:93:b8:eb:56:17:eb:f9:2c:6f:0f:ea:34:47:
4a:9e:27:48:72:6e:2c:c2:7d:51:8f:8e:c7:ca:71:
93:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:EA:CE:5D:4D:CE:4B:E9:8B:86:F2:F6:C5:C9:3E:15:24:81:4F:FC
X509v3 Authority Key Identifier:
keyid:77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:bc:55:43:2b:1d:24:ae:f8:2e:d2:c3:df:9a:38:cf:3d:05:
ca:e4:8f:5f:50:7e:da:9c:4f:a1:7b:f5:2c:9f:36:e1:cc:fd:
06:31:19:fa:71:0b:53:22:b4:ca:c7:e0:38:09:a2:e4:e0:a3:
fd:48:26:61:03:e8:5b:1f:d8:e0:f9:e5:35:0d:03:02:d3:60:
94:0a:e3:4e:54:c6:e3:f0:0a:dd:f3:85:36:a0:fe:07:c5:ff:
50:6c:01:c3:bf:01:80:86:0d:bc:4b:08:db:af:cf:9f:a8:91:
7c:b5:1c:9f:70:5f:6d:ad:1c:2d:ab:df:43:f0:d7:be:86:69:
d5:b6:93:d1:aa:59:34:e0:68:4d:56:38:5c:f9:d2:bb:36:a9:
98:ae:c5:78:00:3a:63:61:90:70:08:c7:41:5d:72:b4:7e:49:
e7:2a:a6:e6:eb:9c:9f:12:c9:e6:38:a2:b3:1c:27:0d:cc:18:
b8:a0:b5:73:9b:92:64:72:ff:e1:98:9b:70:d0:f1:4e:66:7a:
51:78:f7:32:82:72:3c:a8:1c:c1:77:f9:94:99:dd:0e:cd:88:
91:4d:74:5d:ea:2e:50:05:1c:bc:c9:6e:ef:b7:5d:b4:14:8f:
d2:fc:f6:db:a4:e1:5f:07:9b:87:43:9d:51:28:1d:7e:fd:f0:
a9:d8:0c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 15:34:44 2026 by rpki-client