Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft
File: DVX6KmKDfbmv5EI-TBGelJmyG0M.mft (raw, json)
Hash identifier: Q3wdiNi2gXvhNlcxzv2bB+FBe6on1l/mGHRSil4DMsM=
Subject key identifier: F3:FD:09:EA:1A:C2:C9:C2:B0:D7:7B:53:26:91:02:B3:5D:0A:B6:D8
Authority key identifier: 0D:55:FA:2A:62:83:7D:B9:AF:E4:42:3E:4C:11:9E:94:99:B2:1B:43
Certificate issuer: /CN=0d55fa2a62837db9afe4423e4c119e9499b21b43
Certificate serial: 019F197A0B915282F68618C794C29721D087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DVX6KmKDfbmv5EI-TBGelJmyG0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft
Manifest number: 0AF3
Signing time: Tue 30 Jun 2026 17:00:56 +0000
Manifest this update: Tue 30 Jun 2026 17:00:56 +0000
Manifest next update: Wed 01 Jul 2026 17:00:56 +0000
Files and hashes: 1: DVX6KmKDfbmv5EI-TBGelJmyG0M.crl (hash: gb1IrIHDyJhzB5tVdATL7l1ITv/hNLJjIt5umPJYNLg=)
2: HIeW7jOEPndBeoT23uEj81ZTZBg.roa (hash: JJnVSxNA1ixWdqqkWmZ7PhO+qpLJouZei+s+CRfBSYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DVX6KmKDfbmv5EI-TBGelJmyG0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:7a:0b:91:52:82:f6:86:18:c7:94:c2:97:21:d0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d55fa2a62837db9afe4423e4c119e9499b21b43
Validity
Not Before: Jun 30 17:00:56 2026 GMT
Not After : Jul 1 17:00:56 2026 GMT
Subject: CN=f3fd09ea1ac2c9c2b0d77b53269102b35d0ab6d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:af:4c:e3:6d:d0:62:ed:18:73:3d:49:50:8c:
92:70:b1:4a:71:02:84:d7:6b:78:4a:7d:44:dd:c0:
d4:08:95:74:7c:e1:d0:6d:75:22:b1:35:ed:92:d7:
13:96:c2:76:64:9f:b4:bf:14:ee:63:c8:08:c2:da:
5c:7f:49:f1:02:10:8f:ea:fc:f4:af:0d:16:bc:76:
0b:7b:14:a0:05:ce:77:26:f4:ef:b1:f4:6a:88:05:
6c:e5:b5:e7:05:3c:b4:52:cd:34:c8:c9:d4:2a:f3:
37:62:49:6e:a5:1e:40:fe:76:98:c8:d2:5c:ef:b3:
9a:84:c4:e7:10:9c:03:1d:b5:31:2f:d0:77:9c:d5:
ae:1b:e1:d6:64:35:0e:35:56:67:68:b5:32:d3:8f:
1d:0b:a9:e7:ca:2a:9b:f3:dd:aa:d9:d0:03:dd:c0:
21:c1:e0:8c:a7:f6:0e:6e:58:34:5d:b8:d0:05:9c:
40:2f:eb:9f:93:71:72:ea:74:4c:94:56:5a:42:8a:
cf:46:71:2d:4e:7b:46:02:4d:a4:15:af:97:b3:53:
2b:e9:1c:06:ee:f2:1c:0a:69:f1:d8:b8:1e:04:0f:
0d:16:88:de:5f:88:07:68:95:0c:52:aa:4b:43:b2:
71:77:9c:1b:16:13:15:03:44:62:0d:c4:6e:63:87:
3f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FD:09:EA:1A:C2:C9:C2:B0:D7:7B:53:26:91:02:B3:5D:0A:B6:D8
X509v3 Authority Key Identifier:
keyid:0D:55:FA:2A:62:83:7D:B9:AF:E4:42:3E:4C:11:9E:94:99:B2:1B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DVX6KmKDfbmv5EI-TBGelJmyG0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:db:d3:b2:b0:bc:c6:9d:5a:5b:82:96:32:9b:f9:ce:73:75:
ce:9a:86:c5:2f:a5:fd:76:5b:c8:48:30:de:9d:64:79:ea:76:
fb:b8:36:39:41:24:61:ad:d9:07:a9:62:95:d3:f4:81:e8:5e:
d1:08:6a:7a:25:9f:f8:1e:d5:69:82:51:d2:f1:0e:8a:23:f1:
b6:50:ed:a9:ea:b7:bb:68:9f:e5:bf:80:72:83:dd:1f:a6:0d:
2e:8c:3a:f8:4c:03:51:38:f2:0e:7f:98:2c:3f:39:e6:be:70:
42:16:70:40:53:fc:22:19:64:ed:1e:88:0b:00:fb:f1:8d:5e:
48:d8:ca:50:e4:a9:b9:60:1c:0e:cd:72:fc:96:9f:3d:31:64:
81:f1:aa:df:0d:98:c5:e7:6d:c3:1b:5d:36:30:4a:53:65:44:
35:40:4d:2c:55:59:c4:2b:a2:75:19:4f:ad:5e:ed:b9:d7:11:
40:a3:0c:54:9c:9d:02:2e:de:a8:a0:ef:dd:fc:d1:98:a7:40:
88:74:ee:5e:25:7a:43:d1:91:66:c1:ec:a6:74:b8:e3:3e:bf:
a6:b9:74:01:b0:fa:60:95:23:c4:2f:7b:b0:2a:d4:d0:5d:66:
8e:2b:ba:31:fa:22:38:16:0e:d8:e7:1d:10:15:4e:ed:07:10:
38:ed:ab:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:38:07 2026 by rpki-client