Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
File: RDtnudTJnHJeNX2BdPt-AkoVAuI.mft (raw, json)
Hash identifier: 8+4DYL9h41OEpuIYLKP7vbWE0WJY63bhGRBnxK43pXQ=
Subject key identifier: 6F:FF:E1:E1:F0:EC:51:55:0E:44:DF:21:C2:21:1B:6D:A3:CB:8E:91
Authority key identifier: 44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2
Certificate issuer: /CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
Certificate serial: 019FAB2C7BC26689AB4CDE6DE0DB33B02683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
Manifest number: 0A5F
Signing time: Wed 29 Jul 2026 00:00:46 +0000
Manifest this update: Wed 29 Jul 2026 00:00:46 +0000
Manifest next update: Thu 30 Jul 2026 00:00:46 +0000
Files and hashes: 1: RDtnudTJnHJeNX2BdPt-AkoVAuI.crl (hash: 9w+FC1ojtxiGn7c2/W4Dlm+HgkXfh7mBtA4MQgDvGU0=)
2: nlcpl9ulhW9UJP1m-NfebbvM-08.roa (hash: IBQWkMt/VVWxVDIuSxk0QRhZsHES5xi9v/NlOWNnx9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:7b:c2:66:89:ab:4c:de:6d:e0:db:33:b0:26:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
Validity
Not Before: Jul 29 00:00:46 2026 GMT
Not After : Jul 30 00:00:46 2026 GMT
Subject: CN=6fffe1e1f0ec51550e44df21c2211b6da3cb8e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:7a:c1:12:f3:d0:fc:ce:dd:07:eb:01:e2:
75:ed:5c:ca:f6:64:08:b5:ea:23:64:13:a5:1f:0e:
0f:93:04:32:62:dc:cd:0d:a4:15:d2:2f:0d:31:48:
fa:63:7b:f8:62:31:25:91:86:50:44:93:e1:18:72:
aa:a9:c4:c5:83:82:d0:73:9f:6a:23:62:2a:22:74:
4f:0f:6b:cf:97:15:d9:e1:13:28:e0:57:bb:c7:e6:
26:eb:f0:bf:2b:ef:26:f1:8d:e4:5d:8e:18:ff:8d:
fc:c2:0d:be:73:c9:8c:8f:ae:bd:85:dc:d3:21:43:
f1:6a:0d:69:d0:a7:df:3e:31:a4:41:c2:e3:1a:f9:
6e:8d:0f:ae:d7:bc:47:d2:d0:89:09:d8:cc:98:d4:
9d:e7:3c:82:d2:86:c3:8e:19:9c:6f:06:74:fb:5b:
bf:a1:9d:ab:bb:0a:c4:de:84:4e:39:e3:d3:eb:29:
6f:8b:c9:4d:38:37:7a:0d:3b:b3:44:2e:49:ad:71:
d7:95:37:ea:56:dc:71:d2:18:c7:a2:8e:dc:40:a4:
56:02:8b:86:5b:95:d3:c8:d2:2f:61:05:ee:dd:6e:
11:90:2c:b4:6b:f3:67:74:3e:7d:16:47:18:6b:76:
94:dc:7a:85:6c:98:07:81:c4:ad:3a:fa:a3:af:5e:
5e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FF:E1:E1:F0:EC:51:55:0E:44:DF:21:C2:21:1B:6D:A3:CB:8E:91
X509v3 Authority Key Identifier:
keyid:44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:64:96:ec:a0:7a:eb:3d:3f:5d:55:d6:1f:a5:ed:c2:fc:f2:
b0:0e:44:04:3b:b0:1f:23:8a:b5:5b:2f:16:77:f6:cc:e0:b4:
b6:62:3b:0a:05:48:e6:2c:bc:42:13:d4:f9:4d:90:97:78:10:
73:47:43:7c:66:50:e4:f9:91:51:d3:af:e6:98:6d:33:db:1b:
12:a7:53:fb:78:40:77:56:1d:c4:b7:d5:26:15:87:7d:03:35:
df:7c:77:60:de:21:f7:de:4a:46:04:7d:69:a3:b9:dc:7f:95:
e7:88:b7:c3:97:cf:34:2e:8b:b5:ae:1a:dc:1e:88:e4:f4:62:
ea:37:f5:15:16:7e:86:7b:62:13:e1:39:f1:4a:87:61:98:69:
95:94:68:c9:48:d4:4e:c8:3c:50:4a:ec:36:b6:f0:e5:63:d9:
0d:e9:7e:b7:06:93:5a:c1:2a:33:af:f5:77:19:2c:3c:f3:f8:
27:5b:05:db:01:4c:63:56:95:ac:2e:4b:53:1d:49:cf:8b:ab:
9b:a2:ec:36:f5:ba:6c:1e:9c:53:2b:88:cf:ff:1e:cd:4f:5e:
e5:d4:9a:7d:4d:e8:26:31:70:e3:06:10:bf:f2:16:ce:04:7c:
31:e1:e9:d1:c2:54:53:09:c6:56:7f:2d:88:10:fe:56:92:a2:
95:d9:bc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:06:29 2026 by rpki-client