Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
File: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft (raw, json)
Hash identifier: XLpUo5gQv8b5m4EiDrwKqLw98TwvYDCTlV7U3gBtH0o=
Subject key identifier: 9E:DD:E2:CD:97:65:01:2B:94:53:84:AB:56:E1:C6:0C:C2:71:EA:2C
Authority key identifier: 74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
Certificate issuer: /CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Certificate serial: 019FA907718A78BEB19822995DB7626883EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
Manifest number: 149C
Signing time: Tue 28 Jul 2026 14:01:05 +0000
Manifest this update: Tue 28 Jul 2026 14:01:05 +0000
Manifest next update: Wed 29 Jul 2026 14:01:05 +0000
Files and hashes: 1: PeJEMtupept21vf-rfjqUX1mldY.roa (hash: L3Vq59CQQkeuB9Tb5q+mJV+IQYi3JZHbF6U8aJ9gFYU=)
2: aD0lsDcoNGKfxZpDG-OdR_bzMnU.roa (hash: bvoZBbd9QoLZ+N5I+xfKDL3PeYR6CygFLOwHX1oAOxI=)
3: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl (hash: zEUfdGdF0vD7OwBcXgHhFIVNOCrJaO7vu41tS4tXdgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:71:8a:78:be:b1:98:22:99:5d:b7:62:68:83:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Validity
Not Before: Jul 28 14:01:05 2026 GMT
Not After : Jul 29 14:01:05 2026 GMT
Subject: CN=9edde2cd9765012b945384ab56e1c60cc271ea2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c9:b3:71:98:b3:1b:f8:cc:b6:cb:f7:0f:7e:
f2:03:07:10:f8:e7:82:a9:a4:29:20:e8:fd:46:69:
e8:68:f3:ac:f1:00:90:c3:a1:88:9b:2a:78:e8:5d:
c8:13:72:d7:3a:a1:6e:98:63:a8:a2:32:0b:fa:0e:
c2:78:83:a0:fc:aa:79:66:16:a1:63:18:0d:77:83:
96:09:fa:50:3a:f0:19:46:41:20:84:65:47:3f:68:
e4:32:21:db:2b:4d:ab:d9:e6:c9:27:47:75:a1:56:
1c:e3:41:fc:de:b7:59:8c:d1:fe:f6:29:56:ab:4f:
f2:68:5b:c3:41:4f:55:ae:a3:2d:ac:9c:82:76:8c:
e0:e8:8c:f1:f3:9a:10:86:94:b7:64:5c:fd:ec:41:
a3:8c:54:66:b5:e2:58:95:de:0e:cc:11:27:35:1f:
25:2d:2e:1a:5a:aa:77:e5:20:e8:ad:79:2c:3e:65:
24:ae:2b:46:4d:cf:7d:27:69:7d:fb:bf:e1:58:1d:
47:6f:09:0c:fa:59:44:56:bd:91:6c:7b:ac:77:52:
2b:66:90:0b:e0:ce:39:ca:c3:97:4d:68:23:9b:3b:
de:48:ee:45:5b:4d:96:ac:d0:cc:62:d8:30:2f:36:
56:66:15:74:6f:e7:f4:19:e5:24:ba:de:eb:56:3e:
d6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DD:E2:CD:97:65:01:2B:94:53:84:AB:56:E1:C6:0C:C2:71:EA:2C
X509v3 Authority Key Identifier:
keyid:74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:92:04:18:fb:50:3e:42:9e:88:ec:d0:34:ad:f5:57:36:15:
24:d5:ea:f3:94:10:dc:45:af:f7:83:d7:44:a6:9c:38:a7:2f:
58:3d:06:bb:81:a2:55:94:f8:fd:b8:a7:85:49:55:81:23:9d:
55:dd:25:02:4d:08:e0:37:91:24:f2:9c:1b:a4:91:42:3e:0c:
87:59:17:6e:61:f8:58:0a:9b:93:e8:fa:3c:d0:37:8a:ab:34:
22:ac:87:74:7e:63:32:a0:ef:cd:77:83:a0:a3:09:9e:4b:53:
ad:f8:58:ad:fd:46:95:57:a7:ca:d6:f6:37:08:bf:1e:56:64:
71:11:a2:25:f4:e1:d9:14:ae:27:18:53:7a:0b:69:18:01:51:
17:1c:b9:07:77:05:0c:f5:31:41:2f:ad:29:1a:b0:f4:c1:59:
15:12:48:79:6e:b8:ba:af:2b:08:d9:2f:a2:15:c8:60:da:a5:
78:08:c6:21:c1:56:49:6c:41:48:16:f8:10:6d:c2:2b:92:aa:
9b:85:75:5c:c0:37:d3:22:ee:30:3e:2c:57:28:fe:a0:e0:22:
26:5b:ac:8e:9c:dc:74:00:48:9b:b4:57:38:45:38:58:05:51:
34:b2:d2:b5:f3:55:b4:83:63:60:e9:2d:b8:35:68:cf:81:d9:
47:aa:9c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:39:04 2026 by rpki-client