Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
File: dv4wVehykAAOMof3q1iDgCpapto.mft (raw, json)
Hash identifier: V0hA6we4FlahA0+VMlfrHVjpg4zPedRSXz2TIdKK69A=
Subject key identifier: D6:7F:53:2B:FF:A1:42:1D:B1:E9:F8:47:58:24:69:1B:2C:5A:D6:6B
Authority key identifier: 76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA
Certificate issuer: /CN=76fe3055e87290000e3287f7ab5883802a5aa6da
Certificate serial: 019FA14DEE32594D444521BE60C5F8FE0798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
Manifest number: 0CF7
Signing time: Mon 27 Jul 2026 02:01:06 +0000
Manifest this update: Mon 27 Jul 2026 02:01:06 +0000
Manifest next update: Tue 28 Jul 2026 02:01:06 +0000
Files and hashes: 1: 0ySGeIDrXtZFxjKASUMVzdc0Dlc.roa (hash: l2+MJdgyr6VqnECFLRIqzXDoWHq/3WTx2ApaEcFXd9c=)
2: 2MIYePrvuVOPunZ0cCU587P-UNo.roa (hash: 87FdzdFETynQoJd/9d3TWFG9LHhJseAqTkXpKmEANyg=)
3: dv4wVehykAAOMof3q1iDgCpapto.crl (hash: 0ge1CN7nta+0uaj0nV/0H9Z60Z7VMR9FsL7l7QQqhbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 02:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:ee:32:59:4d:44:45:21:be:60:c5:f8:fe:07:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76fe3055e87290000e3287f7ab5883802a5aa6da
Validity
Not Before: Jul 27 02:01:06 2026 GMT
Not After : Jul 28 02:01:06 2026 GMT
Subject: CN=d67f532bffa1421db1e9f8475824691b2c5ad66b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0c:d5:b7:68:9b:5f:db:8a:78:3c:59:46:93:
9e:32:5d:50:da:f0:50:5d:27:87:21:b4:2a:00:ef:
fc:e8:74:0b:5a:f1:d7:26:7f:ed:f1:2d:f9:9c:50:
92:a1:c3:97:57:06:9a:73:b9:a8:9f:ee:84:48:8f:
59:16:a2:cb:34:a6:7a:ee:ce:8a:b0:d0:f0:06:4b:
4a:8f:27:61:e1:d9:fd:ee:e7:1d:40:95:1c:87:d0:
00:38:5f:7e:1d:fc:4a:04:d6:d5:00:39:9a:2c:bc:
9f:1c:11:77:e2:cb:13:f4:31:f9:e5:6f:c8:c9:79:
3a:b9:00:e1:f7:fc:c1:2a:d8:72:bd:43:ea:6a:46:
7b:72:56:f2:c0:18:f8:fa:36:c1:96:c8:a8:a2:d4:
29:2f:b2:67:1f:52:29:d2:3e:8c:45:02:b4:ba:2a:
55:44:9c:7b:db:75:b2:48:ab:29:ef:34:3b:1a:b5:
00:2e:ab:e7:0d:f6:6f:ba:0d:a0:0f:56:46:87:36:
4a:4e:67:65:77:97:bc:cf:4b:e3:fa:b9:15:5f:59:
f9:28:c1:14:78:23:f1:c8:58:75:8f:d8:ab:b3:e4:
8a:fb:0d:ef:c3:ff:11:c9:3e:b8:ac:a6:d5:5b:70:
06:d1:0b:99:89:0a:c8:e4:cb:00:4d:2b:83:19:b9:
48:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7F:53:2B:FF:A1:42:1D:B1:E9:F8:47:58:24:69:1B:2C:5A:D6:6B
X509v3 Authority Key Identifier:
keyid:76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:74:33:d5:e1:e5:d6:00:41:d3:df:f0:96:2b:92:1f:bc:77:
08:7b:70:43:b8:dc:6d:99:6c:f5:dd:b2:c7:74:ed:62:03:2a:
f5:72:43:6c:2f:e4:0f:d3:a5:14:84:df:84:d6:60:8c:a1:f9:
b3:ff:be:5c:4b:f6:35:7d:b8:70:8c:8a:27:a7:ab:49:ef:cd:
cf:f7:dc:b9:92:a6:88:de:7e:f5:ba:88:01:0a:82:74:1a:8b:
2c:fa:28:bf:fb:3b:73:8a:3f:89:21:c9:48:fc:28:1b:00:f4:
b4:06:55:3a:88:a2:26:55:d6:69:29:6a:d5:68:95:11:5f:2e:
9e:17:9a:dd:3c:e3:6f:1a:11:c2:5c:00:99:de:82:42:b8:8c:
fb:ff:da:70:cf:19:6e:8e:6a:3d:5d:dc:3e:62:80:99:f2:18:
23:dc:ac:22:10:6b:ba:f1:d1:1a:29:98:43:ad:85:f4:78:42:
e0:c3:81:bf:62:9c:25:c6:03:d9:e6:d1:88:68:34:82:0c:ea:
d6:28:11:01:dc:a8:5f:1c:67:a8:b2:58:c9:3e:ca:e1:b7:b0:
7c:70:75:40:44:21:3d:b4:52:04:fe:f1:84:e2:23:21:25:e4:
7e:eb:3e:e2:e0:4f:86:17:29:f4:84:c9:81:f9:d8:80:78:ff:
62:2e:91:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:26:29 2026 by rpki-client