Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
File: DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft (raw, json)
Hash identifier: UKIyQpMZnQcHq1nIXAOSX2I2b36yC3TtMGWGksvwguU=
Subject key identifier: AA:3F:F7:17:F3:B4:00:4A:11:89:25:2E:B9:E9:3C:E8:6D:A9:72:74
Authority key identifier: 0C:87:4A:5F:52:73:4E:26:0E:7B:FA:4D:45:11:4A:DD:92:77:E3:53
Certificate issuer: /CN=0c874a5f52734e260e7bfa4d45114add9277e353
Certificate serial: 019F189EA1CE8117C83F7721614239A44725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
Manifest number: 0B77
Signing time: Tue 30 Jun 2026 13:01:17 +0000
Manifest this update: Tue 30 Jun 2026 13:01:17 +0000
Manifest next update: Wed 01 Jul 2026 13:01:17 +0000
Files and hashes: 1: 96SX2S5aBWouZ5qx7BRgteL4iq8.roa (hash: M3a2yFufjkSiLfAokMv1+05AOpH8jhB4+9skztdJecg=)
2: DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl (hash: y1KbrVO9z7YCMU11FeKSznLwEaRNCoBbP6i/xtexkVY=)
3: Fy__JVL_Lepo6mUUM4F3EM-X7dg.roa (hash: 841fgQfyyxsP5yvIt805yflD9ODKBpncCMo1CIp2tRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:a1:ce:81:17:c8:3f:77:21:61:42:39:a4:47:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c874a5f52734e260e7bfa4d45114add9277e353
Validity
Not Before: Jun 30 13:01:17 2026 GMT
Not After : Jul 1 13:01:17 2026 GMT
Subject: CN=aa3ff717f3b4004a1189252eb9e93ce86da97274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:49:f4:b9:ea:57:de:d2:e1:16:32:4f:35:d4:
11:fd:80:10:ae:e5:84:b7:20:08:67:71:19:94:eb:
6b:c4:5c:2d:9c:c1:2f:83:47:35:d4:cc:27:f0:4e:
7b:76:e0:be:1e:f8:81:22:67:84:f2:5e:6f:76:17:
3b:17:b9:18:e6:fe:ad:70:50:b0:a2:d1:9f:ad:77:
04:a6:b4:f5:92:35:06:50:a4:e2:0f:a5:ff:3f:92:
f0:94:77:d1:8e:04:93:3f:e1:a0:fa:92:e1:98:af:
16:91:77:d0:01:3d:13:8b:53:87:b2:0c:ee:81:b4:
29:b8:b2:2a:d7:fe:06:80:dc:e4:f1:64:c6:ce:dd:
ed:75:43:36:2c:4f:c5:e1:56:79:e6:ac:10:6b:7d:
e9:4b:f9:a6:67:25:23:c3:ba:24:a4:12:ed:79:72:
75:b0:af:fb:50:4f:34:58:dc:39:53:f3:66:af:97:
51:c5:4d:85:5a:0c:9c:56:4d:0a:0c:59:d4:d8:e4:
a1:d8:41:de:46:e4:c3:b1:02:15:5e:63:4c:5d:99:
c7:47:5b:54:67:ae:0a:6d:4d:36:d1:99:68:cb:9e:
64:99:de:89:79:d1:c8:d1:9d:81:c8:11:4a:63:44:
a8:04:9b:ba:47:ee:0b:c0:ff:d2:da:99:11:7b:17:
cc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3F:F7:17:F3:B4:00:4A:11:89:25:2E:B9:E9:3C:E8:6D:A9:72:74
X509v3 Authority Key Identifier:
keyid:0C:87:4A:5F:52:73:4E:26:0E:7B:FA:4D:45:11:4A:DD:92:77:E3:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:38:e5:07:91:49:30:4e:4f:4d:e3:18:c1:ba:bb:7c:1f:c6:
4f:6b:2e:a9:5b:8f:9c:a8:17:37:8c:c5:df:20:a6:74:60:0f:
d1:73:76:49:72:b7:c6:97:a8:23:68:00:f8:d9:87:70:b0:5e:
5f:84:22:5f:da:e0:84:1b:5d:f6:a1:70:2c:fc:a1:7a:ac:7d:
1f:21:32:ce:23:21:75:56:d8:5a:b3:3e:2e:cf:05:98:4c:85:
89:c3:55:90:a7:6a:2e:87:a6:34:85:a4:de:7b:93:61:42:d7:
09:d2:e7:84:d2:02:f8:23:90:e2:0f:31:30:6e:69:f7:6a:01:
82:0d:f7:f8:8f:b4:50:9c:be:fa:92:92:69:7d:7c:e6:ad:68:
42:e2:c6:36:d9:65:10:84:d6:5a:4b:09:06:cc:4f:a5:f4:d8:
e2:19:ad:03:f8:85:e0:45:30:13:b6:9f:b2:66:b1:23:b3:a4:
ed:97:5f:64:24:99:52:39:b8:e1:c1:5e:6c:1a:e8:df:4a:69:
92:06:f3:37:0d:3f:ff:5c:9e:b7:c8:03:be:50:57:c4:1c:04:
60:e5:5d:9d:b2:d9:59:bf:73:31:4f:34:28:05:8e:36:72:71:
6b:b1:7a:af:7d:b8:03:85:08:68:76:15:f6:7c:55:12:54:ac:
33:cc:e5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:37:17 2026 by rpki-client