Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
File: 201SqwmxbXL0w-SMxLSQJdCDZ20.mft (raw, json)
Hash identifier: IIajf+n6dBwxrlCWOmLki1croGYQWgJIUdsMYWxmXNU=
Subject key identifier: BA:FD:AA:C4:43:34:94:15:EB:7B:9D:E0:04:3B:E9:BA:C4:80:8B:60
Authority key identifier: DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D
Certificate issuer: /CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d
Certificate serial: 019F1830281C5F0CB43276A9C3A217DBEF04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
Manifest number: 198B
Signing time: Tue 30 Jun 2026 11:00:36 +0000
Manifest this update: Tue 30 Jun 2026 11:00:36 +0000
Manifest next update: Wed 01 Jul 2026 11:00:36 +0000
Files and hashes: 1: 201SqwmxbXL0w-SMxLSQJdCDZ20.crl (hash: VtEFe41/mVbK7cCx/JKM+rnlPIEdmS2WaKimY1njUno=)
2: DcpoOaI5WCtrBzEek9x3MtAQl4Q.roa (hash: LNpYxCyPAZU/q4OugE8iiZ5AnBZFDBNN2UC960my6+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:28:1c:5f:0c:b4:32:76:a9:c3:a2:17:db:ef:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d
Validity
Not Before: Jun 30 11:00:36 2026 GMT
Not After : Jul 1 11:00:36 2026 GMT
Subject: CN=bafdaac443349415eb7b9de0043be9bac4808b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b5:83:b2:ff:30:1d:ab:76:31:e6:f5:62:0e:
bc:63:0c:d0:e7:9e:8e:3a:16:f0:28:b9:57:22:96:
c4:83:38:0c:1e:c0:59:46:2c:42:f8:04:7a:6c:7a:
61:7a:7b:45:55:8a:46:ab:6c:55:de:86:bc:7e:6d:
18:42:80:2e:b2:62:73:12:44:58:15:94:f0:f5:0a:
b2:70:6a:93:01:09:14:9b:d0:61:e8:9b:c1:01:14:
2f:2b:af:a8:da:29:93:c8:e0:5a:40:34:43:13:ad:
d2:e4:81:48:fb:88:65:e2:2d:82:8c:f1:88:1d:9d:
41:13:72:5b:7c:ef:c0:d7:5d:b2:61:cf:5c:2d:c0:
ce:2a:da:48:ff:21:83:d1:15:12:3f:74:17:ea:59:
10:24:31:12:b6:62:c3:92:51:5e:90:f7:b9:bf:12:
c6:b0:a9:aa:c9:84:89:5c:d5:02:12:43:18:5c:dd:
c2:9b:e6:c8:ca:cd:8c:a4:d3:7d:b0:83:de:79:2f:
b0:76:0c:ea:38:fa:59:0d:a6:8a:a1:ea:dd:c2:b1:
13:30:42:d7:72:af:1f:3a:39:6f:40:c9:19:db:a6:
06:03:b6:ea:ea:fe:15:5c:90:52:69:2c:fe:55:e3:
72:4b:ce:b0:1b:72:e5:42:bc:6f:6b:e0:d5:5b:df:
c6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FD:AA:C4:43:34:94:15:EB:7B:9D:E0:04:3B:E9:BA:C4:80:8B:60
X509v3 Authority Key Identifier:
keyid:DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:08:ca:e0:f4:36:a2:e8:24:0b:9e:31:9e:2c:97:6f:6c:fc:
66:7f:7e:3a:d6:f4:99:20:f2:40:a7:44:d7:ca:27:f2:d7:b1:
e1:b3:67:b5:f5:fd:4a:24:f7:39:f8:3d:2a:aa:21:55:8e:20:
e7:86:04:e6:6d:3a:5f:ba:78:b7:c6:55:e5:b0:cb:e2:f6:2b:
71:b7:bc:8f:55:8e:38:4d:88:cf:76:43:4e:0c:bc:1d:f6:18:
54:ff:ee:bb:8a:4e:41:7a:f8:b0:d7:49:9d:80:5d:13:b4:f3:
38:d0:3d:92:79:92:c1:77:17:47:45:eb:0c:81:f4:db:9a:de:
71:cf:64:c7:d4:4e:c3:6f:f8:ca:07:cb:af:18:a4:2d:21:b4:
9f:dc:cd:5d:96:2c:de:f4:29:3b:b8:40:f9:b8:b4:32:c6:6d:
f6:ab:9d:c2:8b:cf:0c:44:44:0d:39:fb:cd:ad:a8:7c:95:fd:
a9:27:89:74:ec:b2:5c:03:73:80:b0:f4:37:cb:6b:35:bd:d4:
da:37:14:78:96:11:1d:07:21:d4:52:fe:f5:27:e9:9c:61:cb:
cb:a6:a4:14:ff:08:fe:ff:f2:d7:6c:66:9b:4e:67:10:70:1e:
7b:4d:ba:16:09:95:01:93:e7:f1:bb:89:c5:cf:f0:5f:d7:58:
fc:57:f2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:07 2026 by rpki-client