Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
File: De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft (raw, json)
Hash identifier: rHxASgHMHVsfzJy0pJpjpdkzbYpLDdetVLMBnvtyE4c=
Subject key identifier: 0E:25:30:4D:34:50:48:D7:21:C0:8A:A9:F4:C3:B8:4D:91:13:6E:A6
Authority key identifier: 0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4
Certificate issuer: /CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4
Certificate serial: 019F85694BF0B09AA4C37D1F792155EB553C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
Manifest number: 0DAE
Signing time: Tue 21 Jul 2026 16:01:38 +0000
Manifest this update: Tue 21 Jul 2026 16:01:38 +0000
Manifest next update: Wed 22 Jul 2026 16:01:38 +0000
Files and hashes: 1: De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl (hash: WvVqFJ80fsRUIRH3Wr8DtwZuhek7oCz11A4jtPl/+VU=)
2: SbbT_vemLYhSpPxloUrfpgEATIA.roa (hash: TxqN78AgB7Nz/Wz8KEGfJojT7Yd8MRSlYTLQkCNBIXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:69:4b:f0:b0:9a:a4:c3:7d:1f:79:21:55:eb:55:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4
Validity
Not Before: Jul 21 16:01:38 2026 GMT
Not After : Jul 22 16:01:38 2026 GMT
Subject: CN=0e25304d345048d721c08aa9f4c3b84d91136ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bc:c1:11:d2:14:e9:19:e4:1b:b8:ad:b5:05:
45:0b:08:40:78:c2:c4:96:d5:36:db:f7:92:56:fd:
21:8f:0e:bb:7b:cc:38:3d:14:4b:62:0d:25:ca:59:
e9:a2:89:7f:c3:44:d1:34:2f:71:03:eb:70:cb:ec:
50:9e:d1:a9:a0:f1:97:42:9b:f0:de:f6:90:d2:45:
87:c7:6a:b5:70:c7:e3:a0:1d:f5:8e:3a:3e:37:5c:
2f:23:61:25:a2:dc:6b:3d:70:f3:ad:55:25:10:af:
7a:ac:8c:6f:26:cd:e8:5a:9f:78:19:0b:a6:78:5b:
75:78:6b:8c:91:42:96:c0:18:e6:f4:fc:10:ed:f5:
c7:5b:55:bb:b8:90:a0:b4:c5:d7:a4:a2:a7:04:26:
12:0a:28:40:03:8a:78:73:5e:a5:1c:c1:f7:07:68:
7a:c2:6b:51:eb:fd:74:38:6b:b7:e3:b9:3d:d7:2f:
e4:fb:f7:e9:98:40:20:8d:ea:fc:bb:18:95:c3:db:
b5:7b:4b:d0:1a:14:7e:9b:1f:73:9a:39:ee:e2:e4:
00:dc:6a:d3:7a:08:8a:b0:b2:58:94:b8:ad:24:4f:
21:4e:dd:6e:6c:91:51:50:aa:fa:0f:1c:52:ab:02:
8f:19:5d:b2:0d:ea:ad:7c:fc:ad:80:af:1a:1d:f7:
1b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:25:30:4D:34:50:48:D7:21:C0:8A:A9:F4:C3:B8:4D:91:13:6E:A6
X509v3 Authority Key Identifier:
keyid:0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:66:c4:6c:34:ab:31:1f:7a:51:71:db:72:83:83:98:18:cd:
4b:b8:1d:d7:ba:eb:62:fe:f1:c2:ca:4e:4f:25:d8:8f:1e:5e:
cd:25:39:31:c2:99:65:87:9a:a8:4a:1e:a4:f8:77:e8:4c:69:
33:2a:e0:2c:5c:8a:3a:72:c0:13:ab:19:f9:0b:21:8d:40:7b:
aa:df:92:93:ba:6d:9e:79:4a:65:91:2a:e2:4e:e9:27:a8:ed:
db:7b:3b:25:ae:1d:71:f7:50:48:8b:c6:47:59:30:84:03:e5:
4b:ef:28:75:6d:7c:8e:96:2e:f0:ee:4e:35:87:20:72:ae:1e:
c9:a4:f7:1a:e1:4c:41:88:8c:dd:fb:6b:a0:d7:41:3b:c1:bf:
8a:ad:ae:86:25:cf:61:25:3d:fe:0e:07:51:5b:9a:bf:ff:fc:
e7:0b:c8:3b:a5:27:a9:fb:c9:d8:af:2b:08:44:73:59:b7:dd:
89:29:08:5e:52:91:fb:a9:83:9e:a2:09:9b:aa:3c:24:bb:61:
ec:40:e1:71:0f:62:6a:a7:0a:ce:19:ad:6d:fb:e0:bd:d5:fd:
a5:f9:2c:d2:76:35:9c:3e:32:bb:6b:63:43:9c:71:57:36:db:
37:6d:8a:23:e1:0c:5f:e9:80:87:37:d0:d2:18:03:ee:c7:94:
60:55:0d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:22:55 2026 by rpki-client