Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
File: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft (raw, json)
Hash identifier: QMU/3EYMuip/k3W/6cPrcAK41Hx1eExA2O8sCrhyY+M=
Subject key identifier: DF:D0:27:D5:EB:77:9E:04:2E:73:13:E0:D7:90:21:55:9E:A7:7A:61
Authority key identifier: 74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
Certificate issuer: /CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Certificate serial: 019F91DB0A7DD5F8CED9C35BDCE542F9856C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
Manifest number: 1490
Signing time: Fri 24 Jul 2026 02:01:19 +0000
Manifest this update: Fri 24 Jul 2026 02:01:19 +0000
Manifest next update: Sat 25 Jul 2026 02:01:19 +0000
Files and hashes: 1: PeJEMtupept21vf-rfjqUX1mldY.roa (hash: L3Vq59CQQkeuB9Tb5q+mJV+IQYi3JZHbF6U8aJ9gFYU=)
2: aD0lsDcoNGKfxZpDG-OdR_bzMnU.roa (hash: bvoZBbd9QoLZ+N5I+xfKDL3PeYR6CygFLOwHX1oAOxI=)
3: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl (hash: oPoVdeYSAr4q5Je3mQyI2wDvNYXlx/lscTekSUIUTOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:0a:7d:d5:f8:ce:d9:c3:5b:dc:e5:42:f9:85:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Validity
Not Before: Jul 24 02:01:19 2026 GMT
Not After : Jul 25 02:01:19 2026 GMT
Subject: CN=dfd027d5eb779e042e7313e0d79021559ea77a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4c:3d:56:e4:6c:b7:ad:67:1a:b6:ef:d2:15:
2c:05:11:2f:a4:a2:ab:0e:30:31:33:7d:4b:d0:a3:
81:28:51:48:9f:63:59:a3:af:ea:6a:93:5c:e9:b2:
96:32:43:e5:a5:e3:fe:24:67:2b:7e:d1:80:66:24:
4e:78:4f:11:5b:c6:ee:33:23:f0:79:7b:52:9c:08:
15:76:30:e2:6f:67:0d:56:0e:a4:08:50:02:58:fe:
16:0e:ee:22:27:2a:8f:dd:f6:5e:da:6c:70:43:03:
19:d0:4b:eb:e5:d2:5e:68:20:2e:f7:5b:75:f2:9f:
ff:f4:3f:01:bf:4a:90:7b:a8:83:94:6a:b1:ed:fc:
a3:49:72:b8:74:15:e0:3d:4e:46:b7:6c:40:29:5c:
b1:d2:70:1c:e4:b9:db:29:42:f3:bd:c5:21:a4:a0:
13:3f:5e:9a:f8:ec:ee:39:04:83:03:2f:4f:fe:a0:
5c:f5:77:a3:8a:94:97:6d:ee:db:7a:d3:16:b8:45:
17:65:4f:f0:53:bc:40:93:db:9f:60:35:90:dd:49:
b1:27:69:ae:8d:75:9f:15:a0:7b:ab:ec:c3:e9:22:
fb:0d:78:7f:a3:3c:55:1c:85:ef:be:2e:f7:74:ab:
0e:af:ff:e5:37:de:4a:80:81:d1:6f:2c:10:b2:94:
84:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D0:27:D5:EB:77:9E:04:2E:73:13:E0:D7:90:21:55:9E:A7:7A:61
X509v3 Authority Key Identifier:
keyid:74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:db:0f:fe:90:5a:e3:2f:18:3c:a5:bb:d9:3a:c5:61:fd:41:
bc:2e:87:b2:b9:e8:27:4a:e6:03:98:56:8d:90:53:a2:75:39:
48:34:47:62:10:96:c2:1d:37:64:2f:fd:10:2a:fc:19:f2:db:
43:ea:38:78:a4:ce:86:86:16:4d:4f:86:32:29:ed:e5:1b:01:
4b:fc:b3:d8:a8:c9:bc:f3:ea:9a:e2:96:e3:53:35:12:4b:fc:
49:45:03:4e:e4:f8:3b:71:6a:f1:3d:73:61:71:5d:14:31:74:
4a:3f:41:47:93:45:bf:31:cb:2d:71:54:14:83:34:f7:0c:53:
0e:7d:90:ad:15:4d:35:93:b5:cd:fc:9f:23:75:2a:a9:37:1a:
c3:49:d9:1b:8a:81:75:41:75:d5:05:00:9a:ae:8f:f5:2a:1a:
fc:ad:55:9a:7f:87:b2:6f:92:32:ca:41:6a:0c:39:ec:cc:85:
b1:c1:0a:07:c3:71:3d:ea:ac:19:76:78:6b:28:da:76:a6:fe:
24:49:6a:41:5c:3d:b8:fd:f3:9f:ae:23:a9:a6:9e:64:91:87:
5d:66:6f:28:6f:70:7a:ec:a8:99:e2:2c:62:ab:fb:d6:99:cc:
46:8e:0c:e1:c8:e6:c8:83:94:6b:36:5e:d6:c0:40:f1:44:8a:
1a:21:e8:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2wp91fjO2cNb3OVC+YVsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0M2Q4NTBjZDEyYTM2M2RkY2RiMGRjMjczZTFkZmM4NjNi
NzA1ZjcwHhcNMjYwNzI0MDIwMTE5WhcNMjYwNzI1MDIwMTE5WjAzMTEwLwYDVQQD
EyhkZmQwMjdkNWViNzc5ZTA0MmU3MzEzZTBkNzkwMjE1NTllYTc3YTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkw9VuRst61nGrbv0hUsBREvpKKr
DjAxM31L0KOBKFFIn2NZo6/qapNc6bKWMkPlpeP+JGcrftGAZiROeE8RW8buMyPw
eXtSnAgVdjDib2cNVg6kCFACWP4WDu4iJyqP3fZe2mxwQwMZ0Evr5dJeaCAu91t1
8p//9D8Bv0qQe6iDlGqx7fyjSXK4dBXgPU5Gt2xAKVyx0nAc5LnbKULzvcUhpKAT
P16a+OzuOQSDAy9P/qBc9XejipSXbe7betMWuEUXZU/wU7xAk9ufYDWQ3UmxJ2mu
jXWfFaB7q+zD6SL7DXh/ozxVHIXvvi73dKsOr//lN95KgIHRbywQspSEiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/QJ9Xrd54ELnMT4NeQIVWep3phMB8GA1UdIwQY
MBaAFHQ9hQzRKjY93NsNwnPh38hjtwX3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEQyRkRORXFOajNjMnczQ2MtSGZ5R08zQmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wODFlOTYtMTBlMS00Yzk3LWI5MzIt
MWRhZjgwYzUxOWQwLzEvZEQyRkRORXFOajNjMnczQ2MtSGZ5R08zQmZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8wODFlOTYtMTBlMS00Yzk3LWI5MzItMWRhZjgwYzUxOWQw
LzEvZEQyRkRORXFOajNjMnczQ2MtSGZ5R08zQmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAStsP/pBa
4y8YPKW72TrFYf1BvC6HsrnoJ0rmA5hWjZBTonU5SDRHYhCWwh03ZC/9ECr8GfLb
Q+o4eKTOhoYWTU+GMint5RsBS/yz2KjJvPPqmuKW41M1Ekv8SUUDTuT4O3Fq8T1z
YXFdFDF0Sj9BR5NFvzHLLXFUFIM09wxTDn2QrRVNNZO1zfyfI3UqqTcaw0nZG4qB
dUF11QUAmq6P9Soa/K1Vmn+Hsm+SMspBagw57MyFscEKB8NxPeqsGXZ4ayjadqb+
JElqQVw9uP3zn64jqaaeZJGHXWZvKG9weuyomeIsYqv71pnMRo4M4cjmyIOUazZe
1sBA8USKGiHoIA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:36:10 2026 by rpki-client