Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.mft
File: DZ40sUlHfVXvC1lipeXgDN-1hIk.mft (raw, json)
Hash identifier: vqLnmMfnVxu6+4QQ5tkLjnAOpQB5kOGv9KW4sr5zGwY=
Subject key identifier: 1A:64:BC:F0:2A:8A:6A:F1:BE:2C:0A:62:08:27:CB:E4:42:C6:FA:36
Authority key identifier: 0D:9E:34:B1:49:47:7D:55:EF:0B:59:62:A5:E5:E0:0C:DF:B5:84:89
Certificate issuer: /CN=0d9e34b149477d55ef0b5962a5e5e00cdfb58489
Certificate serial: 019F1754DE7655CB5AD8299AC4F533C24D1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZ40sUlHfVXvC1lipeXgDN-1hIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.mft
Manifest number: 16C4
Signing time: Tue 30 Jun 2026 07:01:05 +0000
Manifest this update: Tue 30 Jun 2026 07:01:05 +0000
Manifest next update: Wed 01 Jul 2026 07:01:05 +0000
Files and hashes: 1: DZ40sUlHfVXvC1lipeXgDN-1hIk.crl (hash: 2UaAjQ1MMAoRUc6RH5R9GC38Nt7grMpZaNGgtvdFJdI=)
2: jiPOjIl6nBCVWenOtGifVVlibug.roa (hash: XoY5kXa67LdZT4EHsb4gzDlj3ILFLqUeSW5H/QfO6kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZ40sUlHfVXvC1lipeXgDN-1hIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:54:de:76:55:cb:5a:d8:29:9a:c4:f5:33:c2:4d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d9e34b149477d55ef0b5962a5e5e00cdfb58489
Validity
Not Before: Jun 30 07:01:05 2026 GMT
Not After : Jul 1 07:01:05 2026 GMT
Subject: CN=1a64bcf02a8a6af1be2c0a620827cbe442c6fa36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:eb:1a:0d:48:34:c4:10:f9:1c:10:34:8e:ad:
30:32:dc:01:35:f9:97:92:93:8f:9a:98:8e:64:83:
ae:5f:bd:dc:b0:76:0b:53:05:c4:e9:3e:a2:e9:66:
f3:de:88:9b:88:dc:9e:be:bb:02:82:f2:d7:9a:79:
1c:af:df:20:ef:4f:2c:c8:35:55:d4:10:d7:58:9a:
e7:30:00:53:f8:93:e7:9d:4f:28:ad:18:be:1b:cc:
f4:b3:9f:4d:2f:8a:17:94:76:05:d9:66:a3:6c:b0:
2a:6e:e1:2a:bc:56:4b:70:8e:ed:3e:b6:d2:58:7d:
f4:9c:9a:97:91:cd:34:fc:ea:3b:f0:96:0f:e8:50:
75:52:55:e3:41:25:90:2b:c8:46:0b:1b:74:72:07:
02:9b:d3:8a:9b:08:aa:dd:fb:84:90:a0:f1:3c:70:
16:c8:ad:22:76:15:b1:55:91:11:2a:4e:b7:90:f6:
ca:31:fd:26:1a:94:b0:dd:9a:7b:35:22:10:da:48:
10:5c:1a:97:c2:af:21:6f:b8:89:15:2a:38:8d:70:
f1:c6:02:23:84:1d:4b:f9:1c:05:73:ed:b6:5e:1a:
bf:83:72:ac:52:d1:b7:c9:6b:67:85:89:ad:e7:34:
3a:a5:75:0c:bf:65:40:45:4f:36:f8:8c:8a:3d:2a:
6f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:64:BC:F0:2A:8A:6A:F1:BE:2C:0A:62:08:27:CB:E4:42:C6:FA:36
X509v3 Authority Key Identifier:
keyid:0D:9E:34:B1:49:47:7D:55:EF:0B:59:62:A5:E5:E0:0C:DF:B5:84:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZ40sUlHfVXvC1lipeXgDN-1hIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b7:06:be:ec:20:d7:35:91:cd:c3:05:b1:04:d1:8c:6c:5a:
f0:c7:dc:37:75:4a:c7:83:24:2e:ec:fd:bb:5f:8d:84:ce:97:
c0:67:47:41:02:24:d9:0b:4e:2e:21:15:b2:5a:24:5d:48:f7:
b2:cc:fc:9b:9b:07:02:12:5a:bc:bb:58:1c:3d:6c:48:eb:53:
fb:ae:39:e3:0b:c4:69:46:c4:c0:2d:dd:65:56:f9:a0:56:35:
41:06:c5:12:49:68:83:f0:88:40:00:2e:ee:14:6e:42:6f:95:
2b:f7:e3:ce:9e:ae:50:7f:15:3f:e3:d2:89:df:82:c1:65:71:
ee:c0:05:79:d9:24:2b:da:1a:4a:38:c3:5a:6e:3d:43:a5:6c:
f0:26:22:7e:2d:ed:e5:18:d0:37:01:e9:0d:17:f5:8d:d2:54:
c7:83:2d:eb:61:e8:cc:6d:08:de:5d:25:2f:20:ee:9e:bd:6f:
3b:70:8e:0e:60:02:3f:55:89:99:0f:81:74:2e:ea:c6:c9:b8:
69:bb:a5:09:1a:23:07:67:5a:85:06:a4:1f:76:eb:d0:a4:3f:
3c:d7:3e:97:c7:7b:fe:2d:f4:62:79:20:ac:8b:65:c4:39:7c:
f4:01:c1:c9:14:62:f5:d4:97:2a:ce:c5:37:92:50:f8:9a:14:
16:d3:9e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:42 2026 by rpki-client