Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
File: 1DsiEwqpp3NCVHaewTv-Fx-h4os.mft (raw, json)
Hash identifier: DD5aY8IgerRoAEzk2qmKLZT+FdAY2TKGcsPJ2POB1BU=
Subject key identifier: 04:3D:D5:EB:A0:E9:8A:93:3C:44:93:3E:D4:49:70:58:F3:F4:4F:29
Authority key identifier: D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B
Certificate issuer: /CN=d43b22130aa9a7734254769ec13bfe171fa1e28b
Certificate serial: 019F90C8112C2EDDD21E8D6DD61BE506FBD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
Manifest number: 0ED5
Signing time: Thu 23 Jul 2026 21:00:58 +0000
Manifest this update: Thu 23 Jul 2026 21:00:58 +0000
Manifest next update: Fri 24 Jul 2026 21:00:58 +0000
Files and hashes: 1: 1DsiEwqpp3NCVHaewTv-Fx-h4os.crl (hash: dnFrCi23xAFPOKJOJb24VMG6FbaGGLGh3DPSj9TNTCg=)
2: 3SGaIwhtWysQLWn0sQ-j25aYWzk.roa (hash: 6nFcHI9+JyUVi2ufE9HEixwgDofNaQHxTSquSnDsJV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:11:2c:2e:dd:d2:1e:8d:6d:d6:1b:e5:06:fb:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d43b22130aa9a7734254769ec13bfe171fa1e28b
Validity
Not Before: Jul 23 21:00:58 2026 GMT
Not After : Jul 24 21:00:58 2026 GMT
Subject: CN=043dd5eba0e98a933c44933ed4497058f3f44f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e1:eb:f3:61:30:18:45:59:a4:0e:77:7b:39:
4a:57:65:70:c9:1a:2f:40:fa:b1:93:16:d0:35:55:
43:cc:a3:1d:3d:5d:f0:03:fd:86:45:3c:8d:6d:be:
9e:d7:4b:71:a1:9f:2e:13:73:68:14:08:eb:0c:64:
98:39:a6:1a:b5:4e:8a:36:51:32:75:bf:86:bc:4e:
f5:c7:3d:78:02:20:3d:2f:ef:7f:bf:74:c5:94:27:
c3:d7:c2:7d:a6:ed:d2:8f:1c:5c:3a:7a:79:21:fc:
7b:3a:ba:9a:aa:3c:24:4c:3e:b5:6f:56:26:d2:6b:
0d:a2:25:81:03:d1:82:ab:fc:70:b7:11:ab:59:12:
dd:23:51:89:38:7b:aa:4b:c9:93:c5:66:dd:fb:1f:
3c:d3:72:75:05:b6:71:d6:32:34:fe:18:ea:5c:9f:
c5:58:d8:8f:77:4d:17:c7:bb:6d:99:9e:65:0c:97:
47:71:7a:ac:03:20:6b:e2:89:e3:1d:22:d5:52:e6:
2c:04:71:d0:58:1c:ba:74:8b:a1:69:04:22:cb:2f:
92:6e:25:50:b5:66:3c:ea:e1:ca:8c:03:f9:37:ab:
28:07:ad:02:16:e5:a9:3f:ca:ae:8c:88:97:c7:24:
4e:59:68:b2:fd:42:22:cb:80:ac:e5:1a:30:d7:37:
0d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3D:D5:EB:A0:E9:8A:93:3C:44:93:3E:D4:49:70:58:F3:F4:4F:29
X509v3 Authority Key Identifier:
keyid:D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:cd:de:c2:0d:f7:a3:3c:23:77:e9:c3:2f:09:88:b0:2a:56:
76:cc:e9:95:f1:46:b7:7d:5b:2b:af:48:41:d5:bc:42:8c:af:
d0:c6:2f:ac:3d:1b:56:e8:3a:28:9a:46:a8:b3:4a:19:84:0d:
bf:c4:a7:aa:c6:f0:c2:95:68:4a:b1:84:af:1c:94:19:99:2d:
8d:bb:c5:c9:a3:04:7d:f6:82:a3:30:89:9e:d5:b7:8e:5c:59:
35:9f:0a:a1:18:fa:c0:38:12:b7:aa:70:5c:94:f7:35:30:c3:
81:93:37:83:71:26:e8:b9:c2:6b:60:6c:d2:70:32:e6:d3:40:
05:38:f1:33:ad:f6:16:fb:f3:3e:b6:1f:9f:33:9d:73:b1:aa:
17:74:1e:99:b0:09:9f:e3:af:b6:71:61:1c:77:a3:c4:d6:c2:
68:1d:51:c2:21:fb:26:8e:69:0f:80:42:c5:8e:26:79:f4:50:
37:aa:f8:85:7d:bd:50:ec:9d:a9:69:44:c5:dd:37:ae:a7:4c:
f2:26:e8:3c:c6:a8:06:d6:9d:83:17:92:f3:2c:f0:bf:b2:55:
cd:48:87:fe:9a:f0:74:ab:54:67:1f:70:41:36:ee:24:0b:04:
48:00:24:b0:3a:5a:94:8b:cc:fd:42:29:f3:19:0c:e8:66:01:
61:89:75:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:46:48 2026 by rpki-client