Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft
File: 0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft (raw, json)
Hash identifier: 0yflypU9lIDh0AdB7rSs7T4p/67UAzrPe6rfEESqabE=
Subject key identifier: 79:4F:1B:AA:D2:51:6E:04:D1:31:A7:6F:DB:36:31:53:D2:E7:21:0E
Authority key identifier: D0:BD:40:EF:34:06:64:71:5C:8C:2C:FA:50:E3:D6:1B:A2:86:E0:37
Certificate issuer: /CN=d0bd40ef340664715c8c2cfa50e3d61ba286e037
Certificate serial: 019F178C117A688657F6F3777485016B1682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 08:01:23 +0000
Manifest this update: Tue 30 Jun 2026 08:01:23 +0000
Manifest next update: Wed 01 Jul 2026 08:01:23 +0000
Files and hashes: 1: 0L1A7zQGZHFcjCz6UOPWG6KG4Dc.crl (hash: E34GeX+Z8oKP138hz5DGQiqV6QT6ajQ2yM2vcMhbBFM=)
2: 9Bpiuh903cf2KUyc3B43Sh-h6cU.roa (hash: vOwl8xFJY0duh2VdVAScqH5k4a2xL8x3qVJv4PynVyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 08:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:8c:11:7a:68:86:57:f6:f3:77:74:85:01:6b:16:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0bd40ef340664715c8c2cfa50e3d61ba286e037
Validity
Not Before: Jun 30 08:01:23 2026 GMT
Not After : Jul 1 08:01:23 2026 GMT
Subject: CN=794f1baad2516e04d131a76fdb363153d2e7210e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:55:e9:aa:da:94:fc:27:64:28:f1:eb:f2:ee:
4d:07:7d:c1:14:96:28:a7:09:29:06:0f:ad:f1:84:
fc:28:75:3b:40:4f:dc:41:c3:0c:8d:e8:f6:58:7a:
2e:8e:fb:26:8b:c3:00:ef:fd:74:ac:46:71:9b:0d:
9e:ce:f5:28:8d:00:03:be:ea:fe:dc:8c:e3:66:46:
01:b4:90:19:93:1a:85:47:00:fa:f3:6c:e2:63:ab:
d0:66:f9:d4:4d:1b:ce:89:49:7d:e2:06:c1:2d:40:
95:5b:8b:be:a3:34:d1:b2:3a:e5:a4:f0:dc:54:9e:
4f:c6:71:2a:51:bd:c0:39:af:c9:e6:9d:1c:c7:44:
71:c3:30:9d:be:b4:90:8c:2b:ce:3a:d5:06:07:d2:
50:25:2c:de:e8:d3:ae:ad:6b:d0:8c:10:a3:c0:f5:
79:71:8d:5e:be:37:e4:3e:5e:5b:1f:44:e5:f0:e5:
74:0f:37:4d:a1:a5:8c:6e:a1:9c:1d:88:04:7e:1c:
01:92:fe:8e:e0:bb:ea:5e:79:bd:4e:72:ba:ae:9a:
ed:64:48:2f:61:ce:c0:a4:95:a8:60:de:56:97:49:
2a:d3:46:82:d0:2b:4b:fd:19:31:a3:f0:4c:85:83:
6c:a1:c4:bf:98:ec:cf:83:43:e9:6f:ba:e2:f1:2b:
e2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4F:1B:AA:D2:51:6E:04:D1:31:A7:6F:DB:36:31:53:D2:E7:21:0E
X509v3 Authority Key Identifier:
keyid:D0:BD:40:EF:34:06:64:71:5C:8C:2C:FA:50:E3:D6:1B:A2:86:E0:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:13:9f:51:44:15:7d:5f:05:ff:b1:59:23:5d:55:28:63:61:
ad:ec:d0:3c:4c:a5:3f:4f:bf:3e:a1:47:52:a5:3a:01:c2:62:
71:e8:7d:a9:eb:13:18:8a:e5:db:b4:5e:e3:39:65:95:41:3a:
d8:93:5c:13:b8:f1:90:8a:ad:1d:8a:d2:13:21:88:e9:a5:95:
78:98:c7:be:0a:41:3b:e7:45:aa:82:bf:e8:97:db:49:c1:90:
3a:49:c5:03:f9:cf:98:e2:af:77:b5:29:b7:5c:db:9e:9d:7c:
9a:c4:49:a4:3c:b5:0b:12:4e:44:3a:d9:83:29:3a:2c:46:7e:
94:64:1e:20:25:e1:9c:9e:b5:14:0c:4d:aa:fc:48:df:b5:9e:
8b:7b:53:7b:bf:87:1a:9f:4e:f2:a8:9a:37:d9:5f:c5:c2:6f:
0d:a7:7d:e4:57:ba:73:f1:8d:39:53:c3:d8:8f:1f:34:ef:c9:
f7:2b:f6:24:4f:be:d9:88:e5:a5:75:fa:aa:76:2b:1b:8c:fd:
e2:ba:2e:1a:6e:34:9d:8f:57:b5:cc:e5:29:bd:d4:85:7a:fb:
aa:42:3b:e0:fa:5b:ea:7f:a6:60:2e:44:94:8f:9e:c0:45:93:
ac:e0:5c:72:bd:ab:82:2a:43:52:4a:cf:6e:e6:bb:f2:5f:e0:
ba:a3:7a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:50 2026 by rpki-client