Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft
File: D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft (raw, json)
Hash identifier: zL0Otixa1gKPh3O1WQxUDYXipOseVlPqarXrURF3Vfk=
Subject key identifier: 55:9E:FA:6A:E4:3E:2C:2C:55:DA:D5:AB:17:13:C2:C3:4F:D8:33:43
Authority key identifier: 0F:B7:CD:B0:52:82:B0:89:B4:76:75:9F:69:ED:4A:43:6B:45:63:62
Certificate issuer: /CN=0fb7cdb05282b089b476759f69ed4a436b456362
Certificate serial: 019EF5DB2767E39C8BD4C0484CD3FA4F5BFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7fNsFKCsIm0dnWfae1KQ2tFY2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft
Manifest number: 0221
Signing time: Tue 23 Jun 2026 19:00:40 +0000
Manifest this update: Tue 23 Jun 2026 19:00:40 +0000
Manifest next update: Wed 24 Jun 2026 19:00:40 +0000
Files and hashes: 1: D7fNsFKCsIm0dnWfae1KQ2tFY2I.crl (hash: gBZvzLXbFL/GosijuUXlzn9b3fucE/0nm0ewIFtNTT4=)
2: Jv84iN2B8ANANDflC9HEXw5LA8Y.roa (hash: qNF0F5ELDvVzv6IS3eSh9XZM4TiIIZIYRSv7YJ85pZA=)
3: llmMHNqMSoDUXRxE5hAlr6D6GAE.roa (hash: R5kL9/aM+FrgRUOf+AsKqKfQFvEpHbyhgcOmGd1LC1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/D7fNsFKCsIm0dnWfae1KQ2tFY2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Jun 2026 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f5:db:27:67:e3:9c:8b:d4:c0:48:4c:d3:fa:4f:5b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fb7cdb05282b089b476759f69ed4a436b456362
Validity
Not Before: Jun 23 19:00:40 2026 GMT
Not After : Jun 24 19:00:40 2026 GMT
Subject: CN=559efa6ae43e2c2c55dad5ab1713c2c34fd83343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d4:9c:2e:05:20:49:f5:eb:f7:61:ba:0a:41:
51:82:c7:a3:ed:0b:cb:24:86:1e:5e:d0:51:8b:90:
55:85:8a:da:53:48:e9:b3:b8:6f:52:26:4d:47:7c:
d3:09:92:b2:5c:a9:96:59:e8:f7:85:a0:79:78:e0:
1a:b4:59:8b:49:07:fc:8b:1d:02:e9:84:29:af:05:
50:be:65:41:79:ef:58:b1:cb:ef:93:c3:44:d4:f2:
0e:f7:8a:30:9b:bb:5e:bb:72:d4:0b:b9:d7:6d:04:
af:59:1d:8d:26:14:b1:0f:05:8b:95:e2:b1:56:5a:
a3:fb:48:83:fc:90:7d:a0:a8:71:29:0b:01:1e:94:
9d:e5:eb:3d:d6:ed:56:20:40:34:5a:98:22:ad:01:
e5:6d:b1:6a:8f:1e:c4:c0:92:fb:d1:fa:7d:0d:1f:
1e:c5:15:37:f0:36:27:07:7a:5d:b4:fd:34:26:fc:
94:67:b4:5e:e1:55:ad:39:5b:05:bc:18:ea:8d:e5:
84:5d:07:2b:f7:ac:5b:ee:c1:2f:d0:50:53:55:b4:
ad:ae:6a:25:11:0f:31:f5:3f:6d:49:93:69:ec:cd:
ee:5c:81:ae:60:cd:bf:9f:b9:de:88:a3:43:ed:7d:
7e:08:4e:25:98:2e:6f:80:3f:c2:89:27:42:33:d9:
c0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:9E:FA:6A:E4:3E:2C:2C:55:DA:D5:AB:17:13:C2:C3:4F:D8:33:43
X509v3 Authority Key Identifier:
keyid:0F:B7:CD:B0:52:82:B0:89:B4:76:75:9F:69:ED:4A:43:6B:45:63:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7fNsFKCsIm0dnWfae1KQ2tFY2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:8e:d3:9f:9a:5a:d5:fb:a6:26:49:2e:44:26:d3:a2:ef:fa:
75:12:92:ca:3e:4f:1b:4d:a3:d9:47:31:0a:9e:94:eb:a1:38:
ed:2b:d7:86:3e:26:11:82:31:c1:cc:5a:9e:cf:05:0e:8c:ce:
3f:f6:e8:0d:f1:94:77:29:2e:c8:cc:d3:e0:38:16:65:37:df:
de:ab:f5:db:04:46:0b:a7:05:d3:f6:a6:75:ab:7f:a9:2d:a9:
af:04:7e:8f:71:4e:90:58:78:33:c8:ce:37:89:3d:98:64:e0:
f6:09:8b:3e:fc:a2:72:5d:bd:48:37:2d:cf:a9:88:ef:8d:25:
6a:4f:12:a2:59:db:42:0e:6f:91:fe:a0:f6:06:45:be:62:14:
4c:88:a0:9b:96:26:d2:55:4c:37:40:dd:c4:d1:ee:0a:85:9b:
7c:e4:55:d8:3f:de:ab:16:8a:c2:81:b8:99:8e:e8:91:3d:b6:
5c:6b:4f:54:f8:b5:24:17:e3:40:8e:6b:11:92:ad:fe:90:51:
aa:3f:f5:6e:cb:bd:af:0a:31:fd:20:e4:cb:71:be:ec:0b:76:
e0:a2:c9:b7:bc:78:e6:06:0c:1f:c2:b3:4d:eb:57:b6:88:1d:
c7:ef:a4:1b:65:af:ff:3a:43:9f:25:60:19:34:7a:79:8d:20:
93:48:a2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 01:47:28 2026 by rpki-client