Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
File: dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft (raw, json)
Hash identifier: pJgWQ5IxtEHmgeXHs/VljMWSl1dflRsIYFk1U0UANKI=
Subject key identifier: 62:9F:E6:1C:08:A6:34:2F:A9:89:9D:70:92:BD:3F:10:F9:87:B3:2D
Authority key identifier: 74:F9:36:9C:6E:23:C1:BF:0D:BE:D3:01:C7:D0:0B:4A:3F:DF:0D:04
Certificate issuer: /CN=74f9369c6e23c1bf0dbed301c7d00b4a3fdf0d04
Certificate serial: 019EC0A42BF5AD8EFDCF76484729724918D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
Manifest number: 195D
Signing time: Sat 13 Jun 2026 11:00:44 +0000
Manifest this update: Sat 13 Jun 2026 11:00:44 +0000
Manifest next update: Sun 14 Jun 2026 11:00:44 +0000
Files and hashes: 1: dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl (hash: 9Jn/RPcEPO87npTmpN1kdGHqDidA7yYYcOF3Wf8zYis=)
2: g7fYHM51W9swYseMkrEDa3soWXY.roa (hash: k9K4BHL4fbJsHQSn19Joe+3Hon27U4MZ6GclcBUO56E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a4:2b:f5:ad:8e:fd:cf:76:48:47:29:72:49:18:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f9369c6e23c1bf0dbed301c7d00b4a3fdf0d04
Validity
Not Before: Jun 13 11:00:44 2026 GMT
Not After : Jun 14 11:00:44 2026 GMT
Subject: CN=629fe61c08a6342fa9899d7092bd3f10f987b32d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e7:40:69:9d:00:2d:7b:d4:d3:e0:83:78:c3:
1f:66:b3:d3:db:a7:4a:f1:4e:e8:2b:3d:2f:6a:f0:
71:51:2c:a1:4b:be:3c:2d:07:c9:d4:63:cf:fc:9e:
55:92:0a:0d:73:7f:09:45:d7:df:9f:c3:78:db:88:
a3:4d:d5:14:7b:67:eb:1e:41:e6:87:b5:e3:56:c4:
9f:80:04:79:b0:7b:36:52:0b:a7:7b:38:01:6d:58:
2f:22:c5:8d:1f:12:18:8b:d3:79:ef:ee:ab:91:1f:
25:24:04:92:a2:25:51:d2:a6:c1:6c:08:a0:71:e9:
23:30:bb:f3:c0:7d:80:78:39:7b:aa:38:11:8f:a3:
af:95:b5:ce:de:9e:27:c4:29:a0:0d:0a:00:1c:b5:
b2:f8:85:ef:22:c5:6d:75:ee:7a:67:7c:09:a0:e8:
d4:44:39:89:25:b3:76:e5:84:e9:bd:3b:09:81:e0:
62:e4:e0:b2:a5:e4:16:e1:be:82:43:c7:65:08:83:
8f:fb:8c:bc:1c:46:cf:99:28:f4:95:76:53:a2:f1:
37:a8:77:e5:18:e5:81:2e:82:ac:24:81:53:bd:da:
c7:f2:09:f7:90:d0:93:f9:82:74:97:f2:33:f8:d9:
62:4c:9b:1a:cc:19:64:21:03:df:e2:13:ed:35:08:
e9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9F:E6:1C:08:A6:34:2F:A9:89:9D:70:92:BD:3F:10:F9:87:B3:2D
X509v3 Authority Key Identifier:
keyid:74:F9:36:9C:6E:23:C1:BF:0D:BE:D3:01:C7:D0:0B:4A:3F:DF:0D:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:9d:0d:87:ed:13:09:93:41:a6:b0:09:e2:70:4e:e3:68:7f:
bd:c4:e4:6f:2f:90:68:aa:7a:b5:4a:e9:f5:7b:ef:16:53:3a:
66:ba:e7:ff:75:2e:0a:22:b0:8d:5c:31:38:d2:38:5c:ca:41:
fa:1e:ec:be:f5:5c:ea:44:c6:6d:7e:3c:db:74:f8:81:2f:dc:
f4:ef:76:01:ba:4a:25:7b:17:09:01:6e:92:eb:0c:bc:8d:f3:
9e:a2:69:bd:82:e8:1e:2c:78:dd:38:16:f6:35:fe:8f:d8:31:
80:45:e9:74:16:83:9f:4a:6b:88:3d:6e:9e:4a:8b:f4:53:86:
ce:d7:a4:cf:d2:2c:2e:72:be:ef:aa:2c:93:fb:03:5d:14:0b:
e5:23:9a:74:75:be:c3:ee:ca:3d:c6:fd:05:33:da:11:f2:4d:
9f:df:1e:16:ca:e7:2a:3a:73:18:25:ae:60:fe:19:55:ab:d1:
9d:d1:ca:3b:f4:89:20:4e:0a:b8:23:d6:59:04:a6:a6:d5:5e:
d0:c9:29:e0:6e:46:a8:c0:22:57:f3:e6:14:d7:e5:37:12:02:
49:84:d9:86:15:1a:4b:a9:24:58:0c:0b:96:49:b6:0e:a6:67:
97:df:65:00:1b:96:bb:4e:17:c9:a8:82:66:2b:c3:49:ab:91:
21:0e:d4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:15:23 2026 by rpki-client