Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
File: DXj57XHKOklrjVS5fxR5GNrbnFQ.mft (raw, json)
Hash identifier: 8/Nx/VB5T4fVBzVRLs+0spyxJo86EkRcemTgRAvpJGs=
Subject key identifier: 0B:7B:9B:9D:82:31:46:71:BE:30:AD:DD:76:F7:82:6A:BC:B0:C0:4F
Authority key identifier: 0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54
Certificate issuer: /CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54
Certificate serial: 019EFACC60F4C6BCA6193057CD3AEC4482E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
Manifest number: 0510
Signing time: Wed 24 Jun 2026 18:02:38 +0000
Manifest this update: Wed 24 Jun 2026 18:02:38 +0000
Manifest next update: Thu 25 Jun 2026 18:02:38 +0000
Files and hashes: 1: DXj57XHKOklrjVS5fxR5GNrbnFQ.crl (hash: wECKl0BzsWKnJ9YSNoLUgvZ2cYi37BvDiW1fOPtcNpg=)
2: WBE9XqEf7MFyalSUqu-vF0MYUwE.roa (hash: dqMxE1BdW8dFl07KbG3IeIB419vd91Jj1Eyr9ex+Uk0=)
3: WBO5Gvlksp1h2Nj2XcuQWgWe3aM.roa (hash: 21Q33n7ktv9Mw0KQGNV5mbgpviM4S02U0e8hX8gzv14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 14:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fa:cc:60:f4:c6:bc:a6:19:30:57:cd:3a:ec:44:82:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54
Validity
Not Before: Jun 24 18:02:38 2026 GMT
Not After : Jun 25 18:02:38 2026 GMT
Subject: CN=0b7b9b9d82314671be30addd76f7826abcb0c04f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fe:9f:ab:4c:da:3a:4b:a0:93:63:03:86:9d:
71:61:50:dc:24:ae:63:9a:f6:85:44:6e:a1:37:c9:
16:4b:d4:98:37:9c:46:5b:5b:f5:14:a6:6d:82:56:
b6:e4:3a:f1:9e:88:5e:79:9a:3e:21:58:7f:2a:80:
65:a9:48:7c:14:28:c6:9e:4b:bd:87:f8:2b:8d:00:
28:97:cd:d6:a1:47:1d:46:02:b5:77:85:0b:1a:34:
26:5a:54:cc:e3:d0:e9:b5:70:f9:f2:f3:96:c5:47:
a3:b0:0c:44:cd:8b:2f:b1:d2:f1:bc:f6:9b:88:8d:
f4:d8:b0:35:3a:97:22:35:79:59:26:6f:6c:cd:45:
e9:cf:01:01:7c:84:4e:59:2f:dd:38:98:c3:6b:6b:
a8:8a:02:fd:8f:09:34:d5:2b:7a:da:6d:df:cb:fa:
e4:e2:91:41:55:73:fc:8d:ba:fe:0d:e1:35:4b:29:
ff:79:9b:a1:97:d7:0c:c2:63:6a:3d:2d:0a:fd:e7:
fe:72:44:15:7f:38:e4:a6:14:31:01:ab:ce:15:ae:
72:d6:39:a1:b0:d5:59:b3:b4:05:6d:a6:79:4d:86:
5e:fa:cd:06:1b:c8:36:b3:15:57:31:f9:0b:c8:78:
d6:22:56:15:4d:97:f9:a7:e0:a5:4a:3c:7c:01:4c:
b5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7B:9B:9D:82:31:46:71:BE:30:AD:DD:76:F7:82:6A:BC:B0:C0:4F
X509v3 Authority Key Identifier:
keyid:0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c3:e1:3d:bf:e6:7d:41:f5:c8:ca:d0:6f:fc:ef:56:da:07:
ca:bc:2f:e7:cd:31:f8:4e:74:11:59:1c:ef:a3:f4:0d:b2:d0:
83:fe:01:1a:90:ab:e4:a8:69:ea:ed:83:8e:5d:f4:e8:65:fb:
a4:c2:34:7a:b1:fc:21:45:8f:12:4d:96:67:6d:68:f2:00:1d:
5b:48:3e:5d:c8:da:c9:60:3b:db:7c:e0:5d:59:a0:68:94:2f:
96:77:31:07:1f:44:bb:46:b3:9c:1f:6c:6e:cb:d2:64:4c:c2:
c7:a9:29:b6:c8:a4:10:e0:e3:1d:b5:d0:d1:5f:00:d7:1c:bb:
59:bf:ae:c5:32:0c:19:e4:07:bc:62:4d:ee:d7:41:da:81:1c:
ba:b3:5e:22:68:71:66:99:39:79:0f:9a:52:96:c1:aa:82:f2:
42:9b:15:52:5e:6d:e9:50:47:89:23:71:3e:e6:fa:6e:96:00:
7a:74:ec:98:cb:19:18:c2:9f:0c:01:e1:f2:65:4a:d7:b7:ce:
d6:8c:27:5b:a1:d2:69:44:78:84:54:96:d8:66:f1:3e:49:ec:
2c:6f:25:70:f5:07:af:df:8f:f1:8e:1d:d6:a5:e2:30:0d:83:
b6:8c:03:4a:e2:3b:df:29:e7:cd:64:ec:6f:e1:8b:62:d9:95:
59:0e:3d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 21:20:16 2026 by rpki-client