Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
File: cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft (raw, json)
Hash identifier: MLUsO6HV7k25F0RBlTWcrHOgfXubOI354RzuzyjGlYA=
Subject key identifier: 14:17:35:FA:57:86:59:98:B7:32:87:56:8A:81:46:F5:09:A0:03:DD
Authority key identifier: 70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2
Certificate issuer: /CN=703c48ed46cb79490e1662db01c31d02d02effe2
Certificate serial: 019FFAC7F61B1208D3350FC2C9851154185F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
Manifest number: 1541
Signing time: Thu 13 Aug 2026 11:00:36 +0000
Manifest this update: Thu 13 Aug 2026 11:00:36 +0000
Manifest next update: Fri 14 Aug 2026 11:00:36 +0000
Files and hashes: 1: cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl (hash: 1KgIYcbXAHVURKwSPBIbGeOsgaWvx1fKdt0uBDzSIIE=)
2: yUw1rcOt6TgtCelm2VNWDvkzOK4.roa (hash: 5OTxcGZtOq1eyipgogSlqCsPUOaG4WknyJnVBJaz5Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:c7:f6:1b:12:08:d3:35:0f:c2:c9:85:11:54:18:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=703c48ed46cb79490e1662db01c31d02d02effe2
Validity
Not Before: Aug 13 11:00:36 2026 GMT
Not After : Aug 14 11:00:36 2026 GMT
Subject: CN=141735fa57865998b73287568a8146f509a003dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:04:e0:0e:54:25:a3:f6:94:b6:2e:b3:68:f3:
ec:f8:c3:84:ec:50:4c:3f:01:c8:d3:6e:89:68:a2:
24:e3:9c:8e:04:26:c3:56:60:b3:a3:8b:e6:9f:d1:
84:bb:82:f5:68:24:4c:60:8c:fd:9a:c3:af:23:e6:
e7:2f:18:b3:2e:68:b8:20:36:bf:0b:82:d6:9b:75:
03:73:09:f1:63:ac:e6:ce:80:99:55:75:32:18:fb:
03:4f:ae:45:b3:c7:00:9e:48:0e:ea:b4:5c:b8:08:
a2:21:79:f5:a8:8a:c1:70:de:fd:f3:10:00:5d:d6:
db:15:d5:b0:c0:85:d5:1a:99:36:76:48:ad:03:ba:
ae:4a:1b:3c:d7:18:9e:02:27:6f:d5:32:95:26:32:
7f:d2:fe:ae:87:df:25:27:ae:e0:d4:03:0a:40:d5:
3b:40:bb:91:6b:f5:95:d8:3c:1c:db:ed:09:7b:c3:
6d:b1:f1:db:0f:0e:26:81:be:c6:80:7d:62:76:61:
f9:b6:a1:dd:39:83:ff:28:05:06:0e:71:74:27:9b:
aa:c1:1c:0d:f4:9b:31:a7:ee:7e:12:34:2e:ef:5c:
39:3d:1f:a8:25:24:85:a1:cd:8b:24:1c:5a:61:be:
e5:00:1b:a1:a0:a2:01:2a:e1:9d:80:8a:f5:54:de:
1e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:17:35:FA:57:86:59:98:B7:32:87:56:8A:81:46:F5:09:A0:03:DD
X509v3 Authority Key Identifier:
keyid:70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e2:ac:5c:50:80:6e:b7:c2:fe:f0:c9:ea:2a:ab:50:e4:c2:
7a:d4:44:2e:df:db:46:83:c6:fa:50:91:64:13:55:e2:24:6a:
78:78:aa:14:da:aa:46:6a:76:d2:27:57:67:24:7a:81:59:49:
3e:28:60:2f:5c:c4:d3:12:ef:a5:8a:b5:03:af:6b:55:54:48:
b9:c7:21:b7:3c:a1:7e:05:a5:9f:09:9f:d0:18:75:fa:e2:c1:
bb:bf:96:dd:0a:6e:b1:2f:65:eb:dc:3a:b4:7f:22:e6:de:cb:
57:da:ed:a5:4f:15:db:80:ca:29:39:2e:59:e6:a8:2f:8c:a9:
e7:53:9e:02:14:3f:07:68:de:4f:c8:8f:0f:8d:39:f1:67:d8:
2f:48:09:15:f3:e9:3e:08:3b:34:1c:73:c0:34:81:8c:57:68:
a9:b1:e5:80:45:ed:2a:2c:83:1a:58:d5:ca:c0:8f:4c:c2:59:
5e:5d:6d:89:9f:5e:de:0a:9b:a0:2b:0a:79:56:60:30:9f:c6:
e6:18:92:73:71:02:2e:9f:e8:ce:34:2e:ef:c6:1e:a9:e5:25:
50:37:df:be:20:bb:21:64:fc:2d:70:e0:d9:0b:61:78:36:49:
b9:82:98:7e:f8:08:3c:73:e3:eb:85:6e:e1:9d:76:f9:72:21:
ec:44:f8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 14:19:40 2026 by rpki-client