Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft
File: D8T3CpLUasAsjf5_l1vkir1i56Q.mft (raw, json)
Hash identifier: t7RXyZIrJl32znpCPEptXBHIO5QsgAU7WlgaA4TI+PQ=
Subject key identifier: 18:7E:DB:71:97:D3:E7:15:67:E4:70:A4:FC:33:60:2F:40:A8:5E:19
Authority key identifier: 0F:C4:F7:0A:92:D4:6A:C0:2C:8D:FE:7F:97:5B:E4:8A:BD:62:E7:A4
Certificate issuer: /CN=0fc4f70a92d46ac02c8dfe7f975be48abd62e7a4
Certificate serial: 019F18D6B13298FCDD483601DD4BC17F5918
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D8T3CpLUasAsjf5_l1vkir1i56Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 14:02:30 +0000
Manifest this update: Tue 30 Jun 2026 14:02:30 +0000
Manifest next update: Wed 01 Jul 2026 14:02:30 +0000
Files and hashes: 1: D8T3CpLUasAsjf5_l1vkir1i56Q.crl (hash: NjnxM2GlkDpVZFhUve4puDlNmplMEbeAyHl5VROci6E=)
2: kMUpaCiTkh2kJr0mhaoFnVyiC30.roa (hash: SYX4r9LuobOamN0k+QFcLKBI8j/NR9w+wByXAqgbr74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/D8T3CpLUasAsjf5_l1vkir1i56Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:b1:32:98:fc:dd:48:36:01:dd:4b:c1:7f:59:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fc4f70a92d46ac02c8dfe7f975be48abd62e7a4
Validity
Not Before: Jun 30 14:02:30 2026 GMT
Not After : Jul 1 14:02:30 2026 GMT
Subject: CN=187edb7197d3e71567e470a4fc33602f40a85e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:71:04:b3:e6:e7:58:e1:4c:bc:36:1e:3c:82:
87:73:ea:ec:ed:7b:ed:04:ff:3d:12:47:70:c1:b2:
b7:47:2d:eb:04:c2:a0:e6:3d:2c:db:fc:bc:3c:05:
f9:53:26:22:17:cb:00:4f:05:db:e0:e7:e7:70:dd:
48:10:97:62:b4:bc:17:20:da:54:4b:6a:0e:b6:b2:
b4:75:0c:53:43:ec:86:75:3a:1d:9a:66:7a:a2:82:
5b:ad:82:f9:14:f1:e1:b9:3a:83:b4:5a:d3:70:00:
cf:e2:ad:5a:8b:da:ac:8d:7b:c7:50:16:13:aa:a3:
43:4e:21:4d:5b:bd:5c:95:df:74:28:f5:cd:cb:60:
96:68:39:44:06:0e:cf:a3:28:28:fc:55:7f:81:b8:
54:87:c2:2f:3d:f6:a5:40:35:cd:fb:93:0f:e6:16:
ed:68:32:dd:37:2e:06:9a:a3:d0:98:a8:44:63:0e:
b0:e0:c0:79:54:4e:bb:5f:d0:02:d0:f9:a7:f6:81:
4c:68:e3:48:b7:f7:57:31:df:27:39:c6:ee:07:91:
c6:07:11:41:39:a9:42:6f:c0:1e:b2:19:69:39:90:
03:56:8a:4f:4b:27:8b:c9:f4:8a:7b:b6:20:77:9a:
9b:f5:c1:44:c1:e8:41:66:a3:e7:fe:b4:88:42:ec:
8a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:7E:DB:71:97:D3:E7:15:67:E4:70:A4:FC:33:60:2F:40:A8:5E:19
X509v3 Authority Key Identifier:
keyid:0F:C4:F7:0A:92:D4:6A:C0:2C:8D:FE:7F:97:5B:E4:8A:BD:62:E7:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D8T3CpLUasAsjf5_l1vkir1i56Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a5:dc:cb:65:73:1d:ab:5c:8e:2f:2a:ab:1e:52:24:6a:20:
10:15:1c:2d:2e:51:e6:41:7e:01:c9:78:54:dc:4a:65:ff:3a:
89:6a:b1:68:fb:e0:58:98:2f:3f:83:da:52:0d:17:4d:08:27:
42:b6:ab:56:bd:bc:f4:6c:3c:91:cd:5a:e3:c6:66:1b:6c:67:
d6:98:ea:d8:5d:91:4a:6c:ca:5c:5b:28:ed:8f:ed:55:be:57:
cf:ed:3c:ce:b3:ba:3f:b1:a4:97:87:d7:c1:8c:1f:89:de:0e:
3e:8e:da:78:00:c9:cb:34:04:aa:ce:f4:c0:b2:18:32:d3:86:
37:d2:7e:bf:eb:6b:4c:0f:f7:2a:1c:f8:2c:22:b1:67:1c:15:
1b:0c:06:11:79:7e:85:2c:72:f6:f0:86:00:8c:e3:2a:13:3b:
bb:09:55:b2:ff:15:8c:41:cd:ca:58:2e:18:d5:11:37:d3:7d:
b8:a3:c4:51:64:69:77:a6:86:ce:dd:ee:9c:39:a4:ff:4f:08:
91:0d:55:99:48:c5:4a:e4:11:42:13:75:c9:b8:73:0e:33:e5:
c4:86:e4:d4:7a:fe:42:56:b5:6e:f4:6c:27:4d:b9:36:ca:f0:
77:68:2a:92:15:40:a5:8d:47:a9:1e:22:43:99:e9:05:a4:2e:
a4:86:89:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:18:28 2026 by rpki-client