Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
File: 1DNtXnTx-LfbEynwC7hXJBrnTRk.mft (raw, json)
Hash identifier: YBvCE97ze83dxoSJPhnZ1fkzuxA9lDMvPjqGMZhabDw=
Subject key identifier: 36:01:F2:BA:B4:B1:E5:C1:2A:11:78:4E:CA:A3:32:C9:72:53:5C:4D
Authority key identifier: D4:33:6D:5E:74:F1:F8:B7:DB:13:29:F0:0B:B8:57:24:1A:E7:4D:19
Certificate issuer: /CN=d4336d5e74f1f8b7db1329f00bb857241ae74d19
Certificate serial: 019F905A0FEA2FD67C590072D9DA835B1AE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
Manifest number: 074F
Signing time: Thu 23 Jul 2026 19:00:49 +0000
Manifest this update: Thu 23 Jul 2026 19:00:49 +0000
Manifest next update: Fri 24 Jul 2026 19:00:49 +0000
Files and hashes: 1: 1DNtXnTx-LfbEynwC7hXJBrnTRk.crl (hash: ZYAD6q0QRaNuKKv/fRQYT2NsMTADQ0YPLHUUmZTjPlw=)
2: w4SYF93bZ7mEac54Bcw2Oj2Zjm0.roa (hash: AiCzf27YzXL7TiAwTl4rqi9Bv4ePafNZNaFvG1buGG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:0f:ea:2f:d6:7c:59:00:72:d9:da:83:5b:1a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4336d5e74f1f8b7db1329f00bb857241ae74d19
Validity
Not Before: Jul 23 19:00:49 2026 GMT
Not After : Jul 24 19:00:49 2026 GMT
Subject: CN=3601f2bab4b1e5c12a11784ecaa332c972535c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:65:ab:d7:1b:d7:60:4f:c5:4a:5e:a4:f7:96:
58:a8:81:ef:a3:3b:41:c7:a6:48:19:e3:95:a0:48:
04:48:94:ef:e3:bd:73:5e:5a:e3:28:62:5c:28:d6:
12:a4:18:cd:31:89:a1:13:e7:85:18:05:ac:62:8e:
3a:de:71:fb:4e:38:f6:89:a0:3a:9d:18:b1:b8:8a:
d0:7a:ea:05:89:87:37:09:6e:06:73:18:ce:2e:c3:
d9:d0:45:ad:e7:6a:b0:0e:78:24:71:fe:5d:af:ae:
f4:b0:ae:3b:9d:20:19:6a:00:1e:93:d9:94:4d:62:
86:26:23:cd:fb:c8:07:b1:8a:ef:cd:c3:2f:07:c1:
e6:c6:68:18:59:2a:2f:38:7e:39:8a:2b:a0:40:76:
91:d3:a4:32:2c:71:d1:fb:b4:d0:3a:e4:86:47:9b:
c8:4c:9b:8d:82:e5:ed:10:15:fe:32:77:18:1a:38:
df:c3:08:18:fc:46:9a:f0:a9:54:32:b3:a4:b0:3c:
27:ed:c1:60:30:8f:9f:1f:c4:e5:3a:c7:ed:6a:b7:
f5:a2:d9:9f:74:7b:5a:55:38:dc:3b:ff:30:7f:74:
af:7f:51:21:47:82:41:db:b0:c6:84:f7:bb:25:8e:
e8:19:63:8e:a0:c2:a1:1a:bb:b4:33:9c:a8:07:aa:
a6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:01:F2:BA:B4:B1:E5:C1:2A:11:78:4E:CA:A3:32:C9:72:53:5C:4D
X509v3 Authority Key Identifier:
keyid:D4:33:6D:5E:74:F1:F8:B7:DB:13:29:F0:0B:B8:57:24:1A:E7:4D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:41:f8:17:a6:f6:07:67:8f:b9:80:50:43:28:f2:1b:79:b4:
9d:2c:91:60:56:15:9f:b9:10:4d:d8:77:ef:82:aa:08:1e:fe:
c8:ac:d6:11:ba:6d:e3:46:48:2d:06:8e:e0:73:88:50:f2:b4:
dd:22:33:95:47:b0:5c:48:a7:96:e9:a0:e9:20:dd:da:03:a6:
0e:ce:60:2b:aa:4c:ad:4f:a3:2d:12:0e:08:8b:95:56:a1:0a:
d4:ac:b2:f3:fc:6e:85:bf:30:b0:7d:a0:53:dd:01:05:34:1a:
65:4f:1e:9c:d5:03:57:cd:c5:5e:db:a4:8e:6f:af:98:71:11:
32:da:6f:c8:cb:50:7c:21:12:26:fc:27:6f:7b:80:3c:55:ed:
80:2a:48:9d:6f:06:76:f8:e0:94:8d:bd:2b:c4:54:b4:ce:ca:
49:0b:e2:e4:dd:0f:44:8f:c0:42:b1:fd:29:38:b9:f1:db:68:
75:a8:15:f8:77:a7:82:eb:d0:9d:13:57:e5:7e:85:0a:ac:6f:
7e:d3:68:80:6a:6e:e5:9d:ed:47:0b:ff:7d:55:5d:fa:57:3d:
48:4f:82:22:9a:a2:80:44:e1:3e:03:af:4b:a1:c5:bf:4b:a9:
a5:33:79:a1:b1:3b:18:8e:ca:b8:ef:bd:2f:a4:97:e3:6c:86:
69:d9:73:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:08:58 2026 by rpki-client