Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
File: D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft (raw, json)
Hash identifier: X0kiYv1nOAgA5lVVFRx08vEaeyLZv+I8yfTX3kjAZgs=
Subject key identifier: C2:0B:6B:39:0C:17:43:38:40:46:46:48:75:11:9C:E8:8F:14:F3:EC
Authority key identifier: 0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
Certificate issuer: /CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Certificate serial: 019FA229BCBBFF569B37D3EA9D7456B9C2D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
Manifest number: 1336
Signing time: Mon 27 Jul 2026 06:01:11 +0000
Manifest this update: Mon 27 Jul 2026 06:01:11 +0000
Manifest next update: Tue 28 Jul 2026 06:01:11 +0000
Files and hashes: 1: D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl (hash: mScq54atTloprDEcRbVSLn+0/2eSXf4g/Tp+YF0JKLo=)
2: bOTyO1jGNXvTUzXi3EztaGmz3K4.roa (hash: 5vKYEUvZMHjV6NuMxD9j9IkwxVI/1099N+1KTRpjjYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:bc:bb:ff:56:9b:37:d3:ea:9d:74:56:b9:c2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Validity
Not Before: Jul 27 06:01:11 2026 GMT
Not After : Jul 28 06:01:11 2026 GMT
Subject: CN=c20b6b390c1743384046464875119ce88f14f3ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e1:ac:ee:bc:e6:ee:f9:77:9f:4b:9d:bf:ee:
fe:22:af:ac:cb:f0:db:8d:a5:6c:a4:2b:87:d9:9e:
f4:97:92:5c:6e:51:b9:c2:93:11:22:a1:e9:f0:bc:
58:16:55:ef:95:22:dd:0d:92:e6:87:ef:fe:75:fe:
c3:f0:86:0a:f7:78:56:82:6b:e2:81:7c:77:01:b2:
5e:a5:3f:5e:4c:61:de:86:91:dc:1e:bc:b6:9c:ee:
56:44:49:33:a0:bd:a9:45:3d:04:46:bb:93:ad:4b:
f2:03:1e:53:da:a3:b2:08:fe:39:9a:62:d7:4e:46:
72:24:88:30:7c:20:0a:fb:43:85:e6:03:6f:2a:09:
1d:9f:0a:34:f7:0a:47:fc:41:2a:f8:63:e2:2d:55:
e7:80:77:4c:a7:6b:0a:63:ef:1b:d0:e6:20:92:29:
6a:88:a5:6a:ce:c8:38:6b:5b:90:b7:fb:14:38:aa:
f5:82:21:45:5e:a3:25:91:45:5c:be:f2:a5:d0:46:
e3:6e:ba:ba:bb:23:ca:62:57:51:28:4e:19:3b:df:
43:77:ec:22:62:53:f2:4a:20:27:54:d7:7b:03:34:
02:08:f0:da:80:c5:49:10:83:49:95:35:74:a2:2f:
39:41:bc:39:02:75:6f:0c:10:02:a5:64:83:10:cc:
b9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0B:6B:39:0C:17:43:38:40:46:46:48:75:11:9C:E8:8F:14:F3:EC
X509v3 Authority Key Identifier:
keyid:0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:52:2e:60:64:ab:2c:77:62:28:24:6b:05:82:7d:be:de:2c:
ca:6f:ca:72:59:e3:ee:e6:ce:c8:90:f8:b7:f2:a2:52:d7:f7:
28:35:53:4b:30:91:bd:84:33:86:50:46:5a:84:1d:a2:13:88:
16:ec:48:36:3d:17:9d:c6:bd:4c:fa:fe:07:e8:a8:98:7b:0c:
d2:e9:38:09:53:ca:4b:d1:32:a1:54:87:42:fb:0a:87:b2:ab:
00:35:62:a3:cc:a2:47:e5:c2:17:07:a6:d6:d5:a0:32:af:ed:
0e:7e:74:41:dc:62:8d:3e:ae:de:7b:24:1c:46:d0:62:a1:1e:
ea:26:86:0b:f9:fc:83:9f:d7:85:f8:09:7f:9c:95:ee:02:80:
7c:9e:6d:66:48:c3:8b:05:2e:58:05:e8:10:d7:55:f7:1e:5b:
c1:2e:cb:ee:1b:e8:17:56:ad:6d:9d:da:dc:84:2c:6e:52:77:
c1:4b:63:c2:e1:fa:e7:ab:ad:dd:a8:65:fd:e5:e9:19:c3:27:
a1:7c:97:3d:6c:1f:1c:c5:8a:15:e2:61:d9:82:3e:93:af:b1:
63:06:2e:6c:ba:08:26:e3:0f:90:c8:e5:f4:05:8b:40:94:db:
d3:57:b0:98:2b:07:fe:d7:3f:e5:dc:93:9c:f8:ca:76:14:a9:
d8:67:34:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:26:30 2026 by rpki-client