Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
File: 12b8bxuOK2BPf7c8Kf1daJoOqB0.mft (raw, json)
Hash identifier: IV0Jv8am+0wGgUoHH2mmVjwnJKlI+KtJfsShcDOshO8=
Subject key identifier: 30:E4:7D:AD:59:F1:87:B4:F5:D0:0D:45:84:56:8D:9D:FB:F0:71:74
Authority key identifier: D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
Certificate issuer: /CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Certificate serial: 019F17C283CCD12E5D2CC894E2D45700E0ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
Manifest number: 1997
Signing time: Tue 30 Jun 2026 09:00:51 +0000
Manifest this update: Tue 30 Jun 2026 09:00:51 +0000
Manifest next update: Wed 01 Jul 2026 09:00:51 +0000
Files and hashes: 1: 12b8bxuOK2BPf7c8Kf1daJoOqB0.crl (hash: 70HOqPsR2AQzEH+G5bZpYavEhZkjzn2F88pYqTUZ1LY=)
2: 1N-KhQzruMGSdoGiZ7CO4u7ckk8.roa (hash: FLfbiUatng7gGWOmNIMwpoiBvu3NsECWb2uDXnrhlvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:83:cc:d1:2e:5d:2c:c8:94:e2:d4:57:00:e0:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Validity
Not Before: Jun 30 09:00:51 2026 GMT
Not After : Jul 1 09:00:51 2026 GMT
Subject: CN=30e47dad59f187b4f5d00d4584568d9dfbf07174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e2:4e:cd:19:8a:7a:cd:03:b6:24:73:7b:02:
14:82:d1:cf:3d:3b:99:84:ec:8e:c8:e3:97:ac:80:
77:85:d6:12:5d:b4:f5:78:03:15:96:73:e5:89:f1:
f0:d5:08:c3:74:24:83:be:56:dc:bc:33:25:ce:4d:
26:8f:7e:1a:ca:1f:08:d4:f6:82:7f:6c:e7:3f:a1:
8d:84:95:b2:a0:71:d8:8a:ab:d9:76:be:6c:f8:48:
78:31:16:9e:04:87:39:3e:fd:48:01:15:07:ba:0d:
f3:12:ea:ba:0e:41:26:38:b4:90:20:5d:e2:99:a8:
42:d7:49:19:67:58:df:8f:e4:18:66:22:04:06:9a:
83:58:75:02:0e:8c:30:6b:ed:2e:f5:07:6b:cd:77:
c8:fa:99:b6:14:e4:ec:6e:e9:f6:9e:a2:9f:df:c7:
86:b3:b8:c9:a3:96:5d:73:7a:e3:96:a3:69:e9:ee:
28:60:01:4b:e8:94:f7:d8:e8:3d:fc:16:79:ff:5f:
29:5d:27:fb:f0:0c:03:13:f9:c3:7f:73:6e:f2:ce:
c7:cd:f2:f7:ae:86:58:20:af:14:67:d2:98:37:1c:
d0:44:3b:e8:7c:1a:69:b1:4c:8c:46:7f:25:69:a7:
8b:6e:6f:78:f8:06:45:b7:ae:41:62:28:cd:d0:fa:
92:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E4:7D:AD:59:F1:87:B4:F5:D0:0D:45:84:56:8D:9D:FB:F0:71:74
X509v3 Authority Key Identifier:
keyid:D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ec:09:d5:52:dd:03:aa:6f:9d:67:f1:39:fd:81:a7:a3:5a:
15:4f:7d:c5:12:77:1d:26:24:a8:7e:af:af:ba:4b:2c:e5:01:
d7:94:84:eb:ff:16:54:ce:fa:f9:f6:79:5c:f5:6a:e3:e8:a6:
4b:70:1a:17:3e:53:f6:7c:8f:78:d7:d1:7f:76:cd:e7:61:6d:
de:94:de:fc:ed:30:39:da:5a:0a:ef:cb:60:28:73:d2:f0:70:
ec:98:af:b7:c0:a2:31:5d:e4:14:38:b7:fb:c0:4a:85:56:34:
9d:54:e9:60:ab:3c:59:7e:7b:88:c4:14:59:77:8e:2d:04:60:
ea:04:61:38:52:45:2f:1e:e8:3d:90:99:12:b1:73:28:93:3b:
d4:0a:06:ff:86:68:53:89:b3:be:0a:fb:eb:5e:2e:68:a8:78:
f5:f2:78:59:40:ec:ce:b5:71:64:21:34:08:3d:98:9f:af:e7:
2b:06:e4:9e:51:cd:fd:b3:8b:30:46:5a:60:b5:2c:97:8a:ca:
d4:ed:4b:0b:5a:f2:ff:82:cf:dc:1a:cf:a8:31:7d:f7:6c:3c:
29:03:9b:a6:f0:96:34:b3:09:5e:5e:1e:c7:52:00:a0:87:c2:
63:83:f8:10:4f:6a:4a:a3:5f:83:fb:1c:9b:60:f6:99:6b:25:
e3:77:09:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:33:58 2026 by rpki-client