Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
File: dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft (raw, json)
Hash identifier: t62eXrj5cJzDWK6uJI1oDIXB/Xf4yjdeCUedn0/rohw=
Subject key identifier: 23:07:35:81:62:B1:40:9A:7C:EE:99:61:A7:7A:A9:3A:EE:8E:14:3A
Authority key identifier: 74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62
Certificate issuer: /CN=74bf07f04cc76a90ad97f9f1749fabcf05c35d62
Certificate serial: 019EB7A19C1B2C86298761B9B8330708DA51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
Manifest number: 0C4C
Signing time: Thu 11 Jun 2026 17:01:22 +0000
Manifest this update: Thu 11 Jun 2026 17:01:22 +0000
Manifest next update: Fri 12 Jun 2026 17:01:22 +0000
Files and hashes: 1: dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl (hash: FqlnxMexGMYQUHbA/XrcxYtxMXZwJ99WC1Qf+bCMtxI=)
2: urvvaO540p5lCG-661I_LYSazhQ.roa (hash: OYiQT7PXJGef2AODl6kFsbHiALBw8riu/71BAiKYr70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a1:9c:1b:2c:86:29:87:61:b9:b8:33:07:08:da:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74bf07f04cc76a90ad97f9f1749fabcf05c35d62
Validity
Not Before: Jun 11 17:01:22 2026 GMT
Not After : Jun 12 17:01:22 2026 GMT
Subject: CN=2307358162b1409a7cee9961a77aa93aee8e143a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a9:6c:23:e0:20:1d:f3:70:21:fb:7c:4f:a7:
4b:31:e8:d4:4c:9e:db:f5:4e:3b:88:01:87:07:0a:
b1:f6:db:49:b3:1e:08:06:3a:5b:3d:3a:a7:9a:30:
cf:f8:ab:a0:f1:a4:91:fb:08:29:4d:be:3f:ca:39:
9a:64:71:ec:44:6e:ac:d4:c5:05:9a:8c:51:05:da:
65:ec:8d:5e:19:07:b0:61:08:af:df:93:7d:99:bb:
8b:09:8d:c7:a7:a2:22:bf:4c:55:2b:c8:aa:7c:dd:
53:37:ae:0a:f9:e6:c6:ae:49:75:6e:11:0d:31:97:
4b:5a:67:95:25:f4:20:62:7a:3e:16:20:59:9c:01:
66:b9:26:7b:c5:27:8a:0b:2d:b6:65:c2:e6:05:ea:
a3:89:ec:23:bd:ad:a2:c6:37:93:44:e6:66:8c:4e:
c2:34:50:c9:61:e5:19:d0:bd:0a:45:ce:68:b7:28:
51:0c:a1:3f:16:4c:69:85:13:4e:7e:19:a1:af:1d:
8d:b8:b3:2e:54:6b:5f:8b:e1:1d:cb:c7:ec:9a:1b:
1a:8f:69:cb:8a:31:2b:13:9f:91:df:4f:c6:4f:5a:
42:73:38:d7:7e:0a:29:ab:a7:10:32:ac:be:d6:53:
0c:76:c5:ef:25:23:43:5f:8c:eb:26:29:ac:0f:1f:
6b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:07:35:81:62:B1:40:9A:7C:EE:99:61:A7:7A:A9:3A:EE:8E:14:3A
X509v3 Authority Key Identifier:
keyid:74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:6f:21:2a:6f:8e:ef:af:a4:ba:eb:3f:27:b8:ee:b9:07:97:
5c:04:da:f7:bc:71:d3:fe:15:1e:72:f4:70:8a:e1:4b:56:8b:
ae:28:ac:6c:6d:37:f3:f4:c7:6b:ea:71:61:ae:5b:11:a4:91:
6c:56:2d:b4:89:5b:21:12:5f:4f:75:8f:36:95:0c:9b:3b:bb:
05:2c:07:e6:ad:0d:30:4b:4b:fe:2d:c1:12:19:0b:62:34:1f:
d4:03:24:56:32:d0:0d:2d:42:d9:3e:b7:22:bb:f5:6c:39:65:
1a:05:42:06:14:e8:2e:32:f8:e3:06:4a:10:aa:72:8e:36:c3:
f2:31:f7:e8:8f:a1:7a:d2:9b:b9:28:da:3d:09:6e:c7:2d:42:
c2:13:93:cb:6b:3b:56:e1:db:73:c6:f3:3d:e9:72:f7:0a:5b:
85:3a:74:88:07:20:8b:cd:d8:d4:e2:f4:8a:7b:46:7b:90:31:
a5:74:b0:33:28:f7:fa:49:52:99:53:17:12:ab:06:d5:7c:66:
b5:f4:c3:6a:1a:6c:91:6f:85:e6:48:a2:1f:ff:8b:22:bf:87:
d0:77:2a:b1:19:ad:04:2c:d1:5c:b3:60:9c:e7:6a:17:7f:71:
71:9b:c3:36:e0:62:fe:e2:fe:19:1c:ee:a9:b6:c1:f5:3a:95:
40:1f:1a:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ63oZwbLIYph2G5uDMHCNpRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YmYwN2YwNGNjNzZhOTBhZDk3ZjlmMTc0OWZhYmNmMDVj
MzVkNjIwHhcNMjYwNjExMTcwMTIyWhcNMjYwNjEyMTcwMTIyWjAzMTEwLwYDVQQD
EygyMzA3MzU4MTYyYjE0MDlhN2NlZTk5NjFhNzdhYTkzYWVlOGUxNDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKlsI+AgHfNwIft8T6dLMejUTJ7b
9U47iAGHBwqx9ttJsx4IBjpbPTqnmjDP+Kug8aSR+wgpTb4/yjmaZHHsRG6s1MUF
moxRBdpl7I1eGQewYQiv35N9mbuLCY3Hp6Iiv0xVK8iqfN1TN64K+ebGrkl1bhEN
MZdLWmeVJfQgYno+FiBZnAFmuSZ7xSeKCy22ZcLmBeqjiewjva2ixjeTROZmjE7C
NFDJYeUZ0L0KRc5otyhRDKE/FkxphRNOfhmhrx2NuLMuVGtfi+Edy8fsmhsaj2nL
ijErE5+R30/GT1pCczjXfgopq6cQMqy+1lMMdsXvJSNDX4zrJimsDx9rDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMHNYFisUCafO6ZYad6qTrujhQ6MB8GA1UdIwQY
MBaAFHS/B/BMx2qQrZf58XSfq88Fw11iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEw4SDhFekhhcEN0bF9ueGRKLXJ6d1hEWFdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hMGIzOTUtNjFmZi00NTdkLThmZjgt
ZWMwODQxMzdlMjQyLzEvZEw4SDhFekhhcEN0bF9ueGRKLXJ6d1hEWFdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hMGIzOTUtNjFmZi00NTdkLThmZjgtZWMwODQxMzdlMjQy
LzEvZEw4SDhFekhhcEN0bF9ueGRKLXJ6d1hEWFdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANW8hKm+O
76+kuus/J7juuQeXXATa97xx0/4VHnL0cIrhS1aLriisbG038/THa+pxYa5bEaSR
bFYttIlbIRJfT3WPNpUMmzu7BSwH5q0NMEtL/i3BEhkLYjQf1AMkVjLQDS1C2T63
Irv1bDllGgVCBhToLjL44wZKEKpyjjbD8jH36I+hetKbuSjaPQluxy1CwhOTy2s7
VuHbc8bzPely9wpbhTp0iAcgi83Y1OL0intGe5AxpXSwMyj3+klSmVMXEqsG1Xxm
tfTDahpskW+F5kiiH/+LIr+H0HcqsRmtBCzRXLNgnOdqF39xcZvDNuBi/uL+GRzu
qbbB9TqVQB8ahw==
-----END CERTIFICATE-----
Generated at Thu Jun 11 22:41:00 2026 by rpki-client