Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
File: 1DNtXnTx-LfbEynwC7hXJBrnTRk.mft (raw, json)
Hash identifier: M2+9Wtpegpc4pUvOIqJY5RaCqIi6Ru+ryCr4EM/w+Yw=
Subject key identifier: 63:E8:81:7A:F2:B6:C7:6E:E3:EB:38:4D:18:E1:F4:76:A3:CD:89:27
Authority key identifier: D4:33:6D:5E:74:F1:F8:B7:DB:13:29:F0:0B:B8:57:24:1A:E7:4D:19
Certificate issuer: /CN=d4336d5e74f1f8b7db1329f00bb857241ae74d19
Certificate serial: 019E1D91151EC20A80D804ABCCE778666874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
Manifest number: 068F
Signing time: Tue 12 May 2026 19:01:47 +0000
Manifest this update: Tue 12 May 2026 19:01:47 +0000
Manifest next update: Wed 13 May 2026 19:01:47 +0000
Files and hashes: 1: 1DNtXnTx-LfbEynwC7hXJBrnTRk.crl (hash: nQK+ZA62TpGmSW0PdK4virKs6b3mReyxcO4Uc9+VCHw=)
2: w4SYF93bZ7mEac54Bcw2Oj2Zjm0.roa (hash: AiCzf27YzXL7TiAwTl4rqi9Bv4ePafNZNaFvG1buGG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:91:15:1e:c2:0a:80:d8:04:ab:cc:e7:78:66:68:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4336d5e74f1f8b7db1329f00bb857241ae74d19
Validity
Not Before: May 12 19:01:47 2026 GMT
Not After : May 13 19:01:47 2026 GMT
Subject: CN=63e8817af2b6c76ee3eb384d18e1f476a3cd8927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:49:79:38:82:04:c7:e1:13:63:6d:fe:b6:a4:
52:f2:37:bb:4e:73:e0:2c:23:b1:b1:a9:03:3a:91:
29:19:92:0e:b1:6f:03:17:ff:ed:64:f8:57:c6:1b:
a3:dd:96:b9:8b:42:ed:9f:85:7a:f4:19:73:c9:ff:
32:bd:0b:58:ef:ac:83:c8:07:76:0e:1e:e8:02:c8:
58:1e:4f:ea:65:6b:20:81:4b:a5:7e:3c:e1:99:28:
f7:e4:0d:08:ba:53:4c:9b:62:cf:fe:22:c3:c6:c7:
19:cb:35:fc:77:b2:68:4a:33:13:ae:9d:6d:8e:b4:
3a:1f:b5:25:90:7b:c3:52:c6:9c:22:66:8f:dd:38:
62:d9:e6:b6:c0:a3:9f:15:c9:2b:b1:47:8b:d3:4f:
bc:7a:ae:d1:12:60:21:ce:04:fa:53:2d:5b:73:a6:
d1:b2:ef:f6:bc:1f:46:fe:9f:f3:66:ca:6f:2c:1d:
00:ac:58:78:b2:ad:7f:36:8a:02:4a:6a:72:97:e3:
53:06:8b:fc:2e:11:ea:b7:61:a0:7f:23:68:0e:b2:
85:eb:d2:64:0c:b1:55:40:a0:43:ab:26:d7:29:18:
20:ab:ff:56:ba:c4:cf:0c:f8:f1:db:dc:e5:f9:e9:
12:e4:40:ad:4b:21:3f:19:32:fa:4f:a2:ee:92:be:
5a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E8:81:7A:F2:B6:C7:6E:E3:EB:38:4D:18:E1:F4:76:A3:CD:89:27
X509v3 Authority Key Identifier:
keyid:D4:33:6D:5E:74:F1:F8:B7:DB:13:29:F0:0B:B8:57:24:1A:E7:4D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:02:09:fe:0f:42:4f:d7:15:66:6f:16:dc:8e:12:63:db:90:
ef:16:12:3c:9e:16:74:ec:6a:e3:6f:e7:7c:b9:8e:80:52:22:
91:41:db:36:84:92:79:16:1a:9a:ba:ac:d7:88:e8:37:c5:cb:
31:04:0e:c4:90:66:d2:7c:14:ae:1e:f1:20:50:56:a0:77:c0:
d8:ea:43:65:75:13:1e:30:58:d1:5a:2e:d7:83:12:bc:b0:5f:
94:08:9b:f3:e1:12:e5:f6:09:97:b8:37:4c:44:da:5d:75:04:
54:c1:d7:ac:bd:2a:4f:07:85:0e:ae:43:61:fa:c6:19:f0:80:
9b:34:07:2e:2b:3c:c3:92:18:df:78:d5:7c:1c:55:4c:ed:73:
ed:a0:3a:67:ae:07:c6:5b:65:ef:0c:98:97:31:d3:96:be:08:
dc:1e:12:d0:2f:fd:10:21:d5:99:19:cc:71:cc:cd:10:b5:fe:
80:c6:14:0e:f1:05:cf:ed:99:66:74:cc:a9:92:64:d3:0d:7e:
cc:13:93:4f:c2:2a:50:d4:bd:64:37:c5:2e:22:2e:2c:ff:8f:
8d:bf:1f:6d:5c:26:6b:de:dc:1b:51:7d:18:82:34:b9:64:aa:
14:e0:26:69:7c:26:f4:d6:40:a9:2f:b0:35:bc:a6:2b:bd:49:
6e:a6:a1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:22:27 2026 by rpki-client