Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
File: dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft (raw, json)
Hash identifier: TWIHCT5HJKAii95kFOEauqcCavIgasFals02qbJMs+s=
Subject key identifier: B2:C4:0E:58:1A:0C:19:06:FD:DD:09:6C:E5:2C:BB:66:59:27:5A:C4
Authority key identifier: 74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
Certificate issuer: /CN=74774b7b530edacf8fa73353a9014a5638949bfb
Certificate serial: 01A0F8699F27E57F05F431B188AE2F6AF904
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
Manifest number: 1150
Signing time: Thu 01 Oct 2026 17:01:06 +0000
Manifest this update: Thu 01 Oct 2026 17:01:06 +0000
Manifest next update: Fri 02 Oct 2026 17:01:06 +0000
Files and hashes: 1: dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl (hash: lgHalacBPonAtjFIZCNMgAs9rnqRG0M2gvaE4UzSQzY=)
2: oIs9KYQxH1wc9n76SykV_cPagh0.roa (hash: Pyk8WpzW1sn9/iZFQXXrVYWhfzR4ErKJTZ2VaP3qK0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 14:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:69:9f:27:e5:7f:05:f4:31:b1:88:ae:2f:6a:f9:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74774b7b530edacf8fa73353a9014a5638949bfb
Validity
Not Before: Oct 1 17:01:06 2026 GMT
Not After : Oct 2 17:01:06 2026 GMT
Subject: CN=b2c40e581a0c1906fddd096ce52cbb6659275ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:83:47:40:03:b7:48:ef:92:07:4f:3e:d7:3e:
21:51:3e:98:1a:36:41:4b:d3:56:da:dc:9f:b3:4d:
ad:16:d5:85:8c:41:5d:f2:6c:34:73:5b:86:84:e5:
c5:49:39:a5:77:6d:c6:85:23:40:73:93:86:90:40:
1c:83:c2:8d:97:78:4d:af:4f:0a:ce:29:da:6d:14:
af:a1:b9:91:c8:d4:b7:63:1f:38:10:a1:61:8a:22:
d3:5c:61:69:33:f7:b9:f9:b5:65:ea:dc:25:f6:b8:
e5:31:8d:d4:62:d4:3f:d5:8e:a4:a3:96:ec:d2:31:
0c:8d:ca:e4:fa:98:e9:93:dd:97:04:62:26:57:29:
65:ae:b2:64:1b:0a:7a:e0:78:12:6e:bd:47:ba:e8:
97:cf:7f:95:36:ae:3a:54:e7:62:81:92:9f:c8:48:
95:ba:9a:82:cc:8c:ca:51:64:7d:1f:f7:3d:77:e6:
54:7e:b5:b0:61:0b:f4:c3:a1:82:70:c6:cf:43:0b:
bc:39:29:02:cc:96:bd:4e:e1:47:6b:f4:ae:1f:59:
67:4a:89:00:9c:8b:b4:95:64:e5:7b:5b:05:49:07:
9b:8c:b6:c5:d9:e2:73:4a:ae:28:92:e5:3b:4a:c8:
fc:dc:58:e8:62:ff:41:1b:fc:bd:67:cd:88:f1:be:
7c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C4:0E:58:1A:0C:19:06:FD:DD:09:6C:E5:2C:BB:66:59:27:5A:C4
X509v3 Authority Key Identifier:
keyid:74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:0e:55:64:e2:56:7c:cf:e1:c3:d6:c6:67:6a:16:23:a3:18:
83:48:1e:6f:ef:27:be:71:e0:9c:fa:7b:88:e0:be:95:21:08:
a8:61:fa:a0:d9:be:0e:9f:35:74:79:57:4c:4c:09:2a:8a:b2:
00:ad:9d:01:24:3a:43:16:92:61:3c:78:e2:5f:9b:4b:8a:02:
c7:98:7a:90:6e:2a:37:4a:f3:bf:fd:45:2f:22:c7:b5:cd:6b:
fd:4d:03:2e:d2:ed:d5:0f:55:19:5c:ee:6c:94:c7:15:45:d6:
1d:17:df:82:b0:87:e6:ab:d4:37:dd:c7:64:f0:81:c4:b2:9e:
1d:fb:3e:ef:58:94:c4:e8:f6:26:da:08:4e:ea:d1:30:9f:ab:
05:6c:ed:d7:d0:cd:c3:3c:65:a3:b2:f6:cb:21:64:c1:23:ee:
78:a4:16:98:56:41:a8:a5:ba:8e:a0:28:68:50:09:58:f5:2d:
6a:61:7a:4d:7b:0c:4b:bc:30:d4:91:e7:b6:cd:d1:21:40:ed:
92:02:42:5d:b9:4b:1c:45:62:1b:ad:6d:c7:86:b2:e9:bb:30:
0f:72:78:5c:d2:1a:d5:09:9b:3c:3c:a2:bd:11:02:91:41:4d:
87:bc:6a:7c:dd:b0:fe:10:9e:7a:dc:08:a3:11:9e:b2:fb:ca:
0b:1f:27:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 23:21:31 2026 by rpki-client