Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
File: elsD4kg77RNDh7_DBHoTmJ_epB8.mft (raw, json)
Hash identifier: 86DYBYfmshmMgt0y1AqQlM/Dp5BckWuIiUjoQMCFJvA=
Subject key identifier: 23:FD:49:49:43:0A:6D:5E:81:72:AF:30:AB:64:6D:01:79:7C:0B:C7
Authority key identifier: 7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
Certificate issuer: /CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Certificate serial: 019EED0FEAD33247B143E059F4FB2730760A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
Manifest number: 09CA
Signing time: Mon 22 Jun 2026 02:01:43 +0000
Manifest this update: Mon 22 Jun 2026 02:01:43 +0000
Manifest next update: Tue 23 Jun 2026 02:01:43 +0000
Files and hashes: 1: 1jLJCus46gm-AStfLL9q2M5Ho3g.roa (hash: XrU3m/+eSwJdl/VMMh61KI+6fAsJ3/LwxcvviYIdgKo=)
2: QdrNcN-oAM5Z8NA93nywrdwjlpY.roa (hash: dR7J85RI6taLvzWRGM0v5+kdTnGBa4MyfOc9jNOLw3w=)
3: elsD4kg77RNDh7_DBHoTmJ_epB8.crl (hash: oK4pUz8oiSbaEPNlDj4Fdnl5JraHcfW22NFUzNVFUto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 23 Jun 2026 02:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ed:0f:ea:d3:32:47:b1:43:e0:59:f4:fb:27:30:76:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Validity
Not Before: Jun 22 02:01:43 2026 GMT
Not After : Jun 23 02:01:43 2026 GMT
Subject: CN=23fd4949430a6d5e8172af30ab646d01797c0bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5e:4a:cc:ec:50:d7:f5:85:a9:8a:4a:33:65:
bf:29:4e:98:3a:b3:2a:81:be:d3:74:f2:61:55:e6:
d6:85:98:d0:23:f0:48:14:66:0e:be:9b:5e:b3:63:
5b:a5:4b:1e:86:dd:8b:f5:ad:00:6f:d6:e8:fe:27:
30:a7:b4:2b:85:0a:30:01:8c:85:63:ea:79:e5:8e:
2e:e3:19:10:af:96:c5:b9:83:80:9a:0b:bc:52:41:
f1:f5:99:ae:6d:b7:5e:67:4b:4a:0e:5d:41:7d:4b:
29:6d:b3:4e:ad:d9:03:c6:a2:75:6b:38:0c:d8:c1:
16:f7:2b:d7:81:a2:ac:e0:d6:d1:fc:db:fc:ae:d9:
3c:0b:6e:a6:71:ef:df:77:53:af:10:49:11:a6:ed:
ab:e0:52:cc:20:db:3c:d7:49:45:71:c7:83:bf:08:
65:bc:32:11:55:4d:9c:5f:8c:c5:65:92:20:bd:26:
56:26:38:46:8f:db:d1:db:ba:c3:a6:4f:46:a7:98:
b5:47:46:76:27:b4:7f:af:6e:5d:6d:24:c5:2e:86:
0c:57:fe:fc:ff:4b:01:09:bc:fd:6a:bb:ba:be:df:
fa:4a:52:1b:b1:3b:0b:43:d8:78:a3:fc:47:be:3e:
a8:5a:06:4d:35:30:fe:0f:09:c3:95:7c:ac:41:46:
ab:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FD:49:49:43:0A:6D:5E:81:72:AF:30:AB:64:6D:01:79:7C:0B:C7
X509v3 Authority Key Identifier:
keyid:7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:2d:37:f2:53:d2:f6:45:5d:d2:9d:9b:c0:5c:a3:86:30:45:
93:8d:6f:0c:f7:02:87:8b:39:4d:69:3c:a7:5f:ad:57:05:ef:
31:b3:88:0b:ef:0a:f2:87:a7:b4:7f:d1:75:1d:7c:b4:9b:d0:
9d:bb:a0:90:e2:3b:a3:58:4f:db:9e:b2:8a:58:db:a4:47:ff:
fa:2c:41:bb:67:c4:50:b5:89:16:7b:d9:ab:df:92:eb:64:08:
d6:d5:fc:eb:69:80:34:e1:c5:7b:97:7c:fd:cc:e5:32:b6:99:
78:f4:88:02:29:34:8e:fd:ea:a3:a1:58:3d:e0:37:17:93:ab:
b2:fd:42:a8:55:18:05:ab:30:57:65:5d:f5:f7:69:8b:8b:62:
2d:69:b1:e8:36:b9:5d:03:a6:c9:25:69:86:d0:22:62:11:80:
1b:4a:ae:13:77:00:16:23:45:36:89:fb:5b:cd:eb:6f:04:0c:
e1:cc:c6:6f:a9:97:91:70:1e:40:5a:e5:26:2a:3c:e8:d8:a3:
4b:cf:aa:9b:58:3b:ca:eb:8b:b4:9b:00:ca:88:a6:f8:b7:9c:
16:c7:2c:74:98:3b:30:77:ad:01:91:05:c6:d8:64:5f:ab:80:
78:d8:3c:14:87:8c:7b:5d:4b:ff:63:2a:4b:b8:1a:03:06:c6:
ca:0f:13:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 11:05:08 2026 by rpki-client