
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
File: 234XcKOATHS58Sy5tvpwOW3pMp8.mft (raw, json)
Hash identifier: usJqIAohYyjhLw2cSwsAs5tgEtRNbQXEVgsX0nT7p54=
Subject key identifier: B7:91:5B:BE:56:CA:67:76:14:B9:80:42:E7:E5:E2:94:96:DA:16:77
Authority key identifier: DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F
Certificate issuer: /CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f
Certificate serial: 019E303B14EEAFC8E53751C65FD77EF969F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
Manifest number: 0671
Signing time: Sat 16 May 2026 10:00:38 +0000
Manifest this update: Sat 16 May 2026 10:00:38 +0000
Manifest next update: Sun 17 May 2026 10:00:38 +0000
Files and hashes: 1: 234XcKOATHS58Sy5tvpwOW3pMp8.crl (hash: O2pZSN6v0Ww7RoaiTdzWj/pWO/QJbRPKBJTTWCsSdmU=)
2: NnFd_WEgwW5v_Q4XnzqgHc73AUU.roa (hash: qPnnpRuZWwT2D2tSbOOn+WEnPUGhmP0A1leKPzarn0s=)
3: aJGaWlz_CFVJ2Nm0gy1yUmZTtS0.roa (hash: vHZJo0+5vZ38Mb8o++2KXKDyHid1BpZNVh84OdWoQD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:14:ee:af:c8:e5:37:51:c6:5f:d7:7e:f9:69:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f
Validity
Not Before: May 16 10:00:38 2026 GMT
Not After : May 17 10:00:38 2026 GMT
Subject: CN=b7915bbe56ca677614b98042e7e5e29496da1677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e8:9a:9b:57:c6:93:0a:24:37:a5:2c:45:5f:
f4:58:32:ac:72:19:5c:38:e4:ef:c9:13:99:e3:a7:
2a:1e:9c:9b:17:ca:08:35:40:2c:6c:1d:74:35:25:
e2:f1:fd:7c:83:b5:c8:2d:e9:1f:0b:ae:80:17:9a:
e8:1a:f0:e2:55:19:9a:76:96:73:23:b9:a6:f2:27:
74:f9:7f:ab:d6:c1:ab:99:c5:63:9a:21:7f:63:49:
4c:df:26:fd:6e:d2:53:c6:0e:12:46:a4:65:62:b6:
e5:03:12:1f:55:ca:56:cc:ed:07:f1:12:8c:c6:e9:
18:1a:e2:6b:9a:12:7a:ab:4b:8d:98:72:8f:b6:c1:
11:77:7f:81:f8:40:e7:04:8a:e4:85:4a:0f:a8:ce:
3a:a8:e0:3e:3a:1c:5a:47:11:1d:10:2f:dd:28:d6:
17:fc:cc:a5:c1:65:74:29:1e:b2:1c:0e:27:96:a8:
aa:94:96:d1:34:a3:98:f2:c6:d4:a1:76:47:e7:19:
ae:34:f6:af:d8:b6:45:bb:d2:0b:ac:fd:42:0a:ca:
3e:70:5b:f3:b9:a6:24:88:5c:69:88:93:c9:1f:31:
93:f6:d3:0b:67:09:f8:5a:92:6f:9c:0b:a2:dc:9b:
db:23:48:be:5e:f6:e7:71:54:c5:aa:6f:77:0d:f6:
5a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:91:5B:BE:56:CA:67:76:14:B9:80:42:E7:E5:E2:94:96:DA:16:77
X509v3 Authority Key Identifier:
keyid:DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:6a:99:81:79:39:7a:53:01:c0:28:4e:a9:bb:82:ea:a8:1f:
25:dc:77:5b:33:ed:a9:b8:37:bb:b3:42:2d:4b:ae:cc:27:e9:
1c:9c:e6:5a:61:e9:1c:fa:a8:7f:4b:e2:a8:0f:8c:17:32:04:
76:8e:08:da:4f:64:11:bd:6d:9f:60:71:5d:c7:e5:12:73:64:
d8:b3:fa:0e:09:44:47:c3:67:6a:5f:ea:0c:53:44:3f:d0:68:
be:67:80:4d:d1:dd:5a:50:94:77:52:77:27:dc:c2:6d:3e:16:
2a:9b:7f:d8:77:42:92:7b:60:d2:f1:b3:ce:5a:63:2c:22:8d:
de:ca:b5:94:b3:93:35:92:ae:41:76:af:88:e0:08:92:28:0b:
dc:af:bd:a5:d7:9f:98:bb:42:46:c8:df:30:99:03:45:06:4d:
4b:95:a7:88:57:6a:e7:bb:7c:bb:b5:45:5b:ff:8c:04:3b:0c:
ae:18:e1:10:10:40:e9:20:e5:03:8c:b3:45:17:8f:10:2f:b8:
f7:f3:54:33:bb:7e:80:d8:29:ec:cb:66:d2:7e:bf:ae:0c:a1:
38:d5:1d:47:25:b6:6b:3c:0d:ac:0e:9b:f6:b7:ca:07:71:92:
cc:88:f1:05:34:f9:62:1a:98:43:2e:44:36:be:7e:17:b4:1f:
03:e0:6a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:54:35 2026 by rpki-client