
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
File: d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft (raw, json)
Hash identifier: t+UtJ1OJ7hJblvQ4Jl1ynv/qdOxS1RykzVryRbj9pxI=
Subject key identifier: 74:EA:58:B9:58:8F:4E:78:41:8A:DB:46:6C:24:8A:54:DB:E4:CD:EE
Authority key identifier: 77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
Certificate issuer: /CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Certificate serial: 019F9F289CC4619D6A6244682133BD2AF814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
Manifest number: 19D0
Signing time: Sun 26 Jul 2026 16:01:06 +0000
Manifest this update: Sun 26 Jul 2026 16:01:06 +0000
Manifest next update: Mon 27 Jul 2026 16:01:06 +0000
Files and hashes: 1: d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl (hash: fSaxYCSi01/MMbsK5mwQchNCYSquZ2engiQpDWzVXZE=)
2: mQsjU1zOjVRO_u3D1WDC_GA_q4U.roa (hash: 4af//0/sTljaocW55fj5PkOIaVuuWa8S7DrXdP1GzbU=)
3: oFwZbtA1lxypnx_w-x5XCq34vRQ.roa (hash: i/Rl9TaZZIbdRkmJK6JnEtSg149s52oPIfIzhWvJ8BQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 15:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:28:9c:c4:61:9d:6a:62:44:68:21:33:bd:2a:f8:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Validity
Not Before: Jul 26 16:01:06 2026 GMT
Not After : Jul 27 16:01:06 2026 GMT
Subject: CN=74ea58b9588f4e78418adb466c248a54dbe4cdee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:49:d7:b5:32:be:77:b5:e8:24:6c:c9:72:ec:
d2:e7:60:81:01:a0:d6:7c:00:f4:fd:bb:49:7b:74:
93:61:dd:e2:9b:c7:8a:ca:15:eb:1b:c5:9c:44:a7:
97:d0:14:67:6b:e6:7c:a4:8a:ae:0b:51:c0:f3:5f:
20:99:a6:4e:f2:d3:25:76:a0:0a:12:80:46:f2:f8:
bd:20:53:82:18:fe:86:7b:95:33:b2:7a:38:92:be:
c9:c5:dd:4e:cb:e0:3a:f2:5f:51:c6:1a:dd:4b:0f:
9b:30:0f:d1:a1:0a:00:39:fd:95:6d:88:0f:ed:55:
f3:0f:fd:26:a6:27:98:00:10:c6:da:10:40:81:b8:
0b:01:a8:bb:d1:ad:3d:83:6c:55:5c:ed:72:8e:bb:
23:0f:8c:57:5b:63:1c:87:80:55:81:4a:bf:30:39:
e7:70:5e:62:9c:8a:55:4c:5a:30:5e:51:be:f9:51:
30:5a:28:33:35:50:62:29:c9:73:34:c8:0d:c3:81:
27:76:9f:64:41:47:a0:1d:00:7c:13:14:80:27:ab:
f4:d1:21:a7:21:16:a6:8e:50:11:c3:ee:8d:4d:89:
3c:92:81:a9:c9:e3:35:07:aa:b8:15:bc:da:34:90:
9c:be:d5:88:ab:88:98:4b:66:46:dc:70:86:92:bf:
1b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:EA:58:B9:58:8F:4E:78:41:8A:DB:46:6C:24:8A:54:DB:E4:CD:EE
X509v3 Authority Key Identifier:
keyid:77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:20:f5:6f:41:6e:28:ca:67:10:c1:b3:27:b0:df:16:8d:56:
54:13:0a:a7:f6:db:01:9b:c0:ac:94:f8:d4:3b:f7:dc:0d:f5:
da:dd:49:37:b3:84:45:96:4e:8e:ad:21:4a:39:42:c6:f1:b9:
dd:01:f0:8d:ee:ac:97:2d:c2:2d:c4:48:ab:3b:c5:56:0e:8c:
fc:88:74:4c:58:04:3a:4c:21:ef:d1:4f:91:0f:6a:fd:86:1e:
b9:c8:81:5d:6e:66:5f:2e:0f:bb:0b:d4:d2:e6:b7:fc:0f:bc:
f6:47:39:3e:8a:09:74:49:2b:e9:54:a4:e4:70:93:c4:b7:99:
61:8e:da:0b:78:7b:1a:41:74:f6:17:cd:14:06:56:98:e0:1b:
61:ef:64:ba:7d:95:a9:85:9f:08:f9:90:35:eb:ca:48:fe:20:
9c:69:aa:ef:68:40:10:51:94:27:f6:00:a2:68:98:d0:e2:e6:
e4:ad:11:89:92:b7:ac:e8:f2:b0:59:4b:62:cc:69:52:87:2a:
5c:2e:40:41:4d:85:4a:d3:5c:5e:e6:12:45:24:35:ed:7b:99:
99:ec:58:48:35:00:68:56:f0:6c:32:b6:2c:bd:b8:a0:81:85:
e0:94:8c:7f:92:b0:ba:6b:b7:3f:94:e3:ab:98:c6:58:f1:1b:
90:f3:28:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:54:08 2026 by rpki-client