Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
File: Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft (raw, json)
Hash identifier: qXLLFuhKWSoEC9szJrCvgUwBD3Bk0xcXQXujazWUHjk=
Subject key identifier: DD:DF:E0:86:E2:14:EA:5A:92:5A:DA:CC:0C:C1:7E:BC:C3:14:C0:DF
Authority key identifier: 0F:3F:13:32:CF:F0:5B:22:A3:A6:6A:6D:4C:34:8F:BC:01:DE:11:5C
Certificate issuer: /CN=0f3f1332cff05b22a3a66a6d4c348fbc01de115c
Certificate serial: 019F14C22B5CE9AAD3CBA628070BB625EBF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
Manifest number: 1985
Signing time: Mon 29 Jun 2026 19:01:37 +0000
Manifest this update: Mon 29 Jun 2026 19:01:37 +0000
Manifest next update: Tue 30 Jun 2026 19:01:37 +0000
Files and hashes: 1: Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl (hash: 9mBQ8MRWLH7oT208LfMHzJTgTFqiNuVUVL7QkC0W5nI=)
2: dLnEEciYoxf4zHYKdVd3Cs6UXwE.roa (hash: fuSsuZb+gCHUO48DwmuXqWY4VCL5Q795gkNmczjB/Fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 19:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:c2:2b:5c:e9:aa:d3:cb:a6:28:07:0b:b6:25:eb:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f3f1332cff05b22a3a66a6d4c348fbc01de115c
Validity
Not Before: Jun 29 19:01:37 2026 GMT
Not After : Jun 30 19:01:37 2026 GMT
Subject: CN=dddfe086e214ea5a925adacc0cc17ebcc314c0df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fa:c1:44:27:95:f9:b8:88:4c:82:c9:b0:83:
81:10:3a:df:e3:05:3b:d9:d6:b4:d7:85:18:16:11:
a2:d4:08:3b:af:86:6c:d5:42:11:76:5a:32:62:d5:
86:23:90:6f:df:0f:0d:c8:fa:2c:32:35:81:b3:2b:
77:a6:7e:83:99:0f:7f:6c:7b:9c:78:94:9d:8c:67:
68:ad:75:94:09:58:ee:d6:1f:03:ac:bf:6c:78:73:
60:74:ad:ff:96:7a:98:98:48:c5:38:e2:30:fb:b6:
19:02:f2:d4:89:9f:52:2b:ce:83:09:c5:96:97:55:
80:cf:2b:b1:3f:73:30:5d:49:64:2d:a8:a6:fe:a0:
76:b8:12:75:31:65:f0:3c:9b:46:68:a6:8d:03:29:
93:d5:11:e8:9a:0d:e0:df:c6:8b:b0:8a:e3:46:c6:
87:1c:73:97:1e:20:a8:b7:ac:f7:a0:53:0d:02:e8:
fd:64:28:48:35:84:c2:9c:84:bf:27:c6:31:9d:e4:
b5:46:87:28:57:32:e8:01:e5:7d:d6:ff:1b:1f:4c:
1e:43:8f:a5:40:c7:6f:c3:d2:9e:2d:9f:d5:b9:28:
3c:31:92:ad:71:d4:cd:17:3f:4e:1e:e2:88:81:84:
47:73:af:d7:e0:74:64:0c:66:a8:43:be:53:54:6d:
75:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:DF:E0:86:E2:14:EA:5A:92:5A:DA:CC:0C:C1:7E:BC:C3:14:C0:DF
X509v3 Authority Key Identifier:
keyid:0F:3F:13:32:CF:F0:5B:22:A3:A6:6A:6D:4C:34:8F:BC:01:DE:11:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:70:1b:b4:59:4f:37:68:49:a7:1e:4b:31:8a:83:2d:94:35:
b4:b7:dd:ec:f9:a0:18:d9:e9:1a:51:dd:7e:50:1d:15:66:18:
3e:11:49:e1:b8:a6:63:2e:1f:b4:4d:8c:34:2f:ba:e4:61:72:
a3:bd:5f:5f:ab:e6:78:ed:96:36:5b:90:88:01:b7:18:27:cf:
e9:b2:0e:2c:55:59:b5:35:9e:8d:98:5e:ac:28:80:dc:be:39:
c6:ec:b0:16:e5:9e:50:a4:ec:27:0c:de:fa:94:89:88:bb:d5:
f7:35:7e:e2:d6:09:24:18:45:44:3a:f0:da:bd:a9:b2:6f:00:
13:73:ba:55:ad:e1:0d:2d:63:17:5b:64:bb:f2:18:9b:3c:04:
83:06:66:c2:54:c0:03:c0:ef:7c:ea:2d:9a:82:0d:37:6d:b1:
e7:5e:c7:44:d1:f2:52:77:4e:f6:1d:84:e2:fd:eb:01:7c:0a:
80:d4:ff:44:c8:d9:06:d6:cc:df:17:6a:33:8d:52:d3:03:03:
b2:13:2d:af:38:a1:11:76:e6:91:2f:6e:ee:e7:b7:45:ed:ba:
b0:3d:a5:4c:b2:88:19:56:49:e9:5d:77:87:ba:e7:ba:c0:be:
b0:08:ff:5b:5b:a6:2b:4a:c2:4b:da:87:ee:47:52:4b:05:0d:
f4:c6:88:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 02:19:22 2026 by rpki-client