
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
File: 234XcKOATHS58Sy5tvpwOW3pMp8.mft (raw, json)
Hash identifier: af2fP/GZM5dVxN68v69x23jaBCQzZGTdhzR7BcL4wfI=
Subject key identifier: BC:74:F8:66:CE:59:35:23:C2:57:C4:6D:9C:30:86:98:E8:BE:A5:4A
Authority key identifier: DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F
Certificate issuer: /CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f
Certificate serial: 019FA116490D75AAB499D210D25CFC7BD49D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
Manifest number: 0730
Signing time: Mon 27 Jul 2026 01:00:20 +0000
Manifest this update: Mon 27 Jul 2026 01:00:20 +0000
Manifest next update: Tue 28 Jul 2026 01:00:20 +0000
Files and hashes: 1: 234XcKOATHS58Sy5tvpwOW3pMp8.crl (hash: Je3J7JZIv99+VAGvW2sUyrM96RAJM3dLRWNTEMRfRvs=)
2: NnFd_WEgwW5v_Q4XnzqgHc73AUU.roa (hash: qPnnpRuZWwT2D2tSbOOn+WEnPUGhmP0A1leKPzarn0s=)
3: aJGaWlz_CFVJ2Nm0gy1yUmZTtS0.roa (hash: vHZJo0+5vZ38Mb8o++2KXKDyHid1BpZNVh84OdWoQD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:49:0d:75:aa:b4:99:d2:10:d2:5c:fc:7b:d4:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f
Validity
Not Before: Jul 27 01:00:20 2026 GMT
Not After : Jul 28 01:00:20 2026 GMT
Subject: CN=bc74f866ce593523c257c46d9c308698e8bea54a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:12:14:7a:43:35:a7:1c:0f:b5:95:06:6f:25:
f8:51:b6:fd:0e:8b:08:27:5a:0c:f3:b2:ed:94:90:
68:19:42:cb:af:7b:3f:3a:b9:ed:29:c7:13:1a:54:
7d:79:0b:f0:17:1d:e0:0e:c7:57:8f:a1:db:d5:94:
f8:7d:f7:74:b1:4e:57:5d:f2:9f:34:a0:a0:cb:63:
fd:58:56:bf:b5:c6:c6:13:96:d8:46:c2:8d:c2:72:
1b:5c:7e:a9:9f:76:c8:63:2f:b2:da:e8:a6:ca:86:
8e:31:5f:44:8a:20:a0:a4:81:cb:1c:6b:c5:ce:c1:
18:23:ec:0b:bd:64:da:58:b8:2e:c1:1c:9a:7c:56:
08:9b:62:d0:d4:72:a9:59:5f:1f:e7:6e:ef:fb:be:
95:ed:db:6f:c2:a9:06:ab:06:48:fd:84:d5:14:dd:
97:09:4e:76:1c:51:6c:9d:88:02:b0:08:35:13:b0:
01:18:af:7c:d3:64:39:54:e3:b8:f8:1d:50:a7:7a:
f0:e4:be:c1:49:4a:4c:b0:46:6c:4d:b5:85:4b:a3:
5b:b1:71:92:6c:51:9a:a8:cd:10:72:ba:3e:55:08:
c4:c6:75:26:23:74:39:65:e0:e0:98:42:03:f9:7f:
b3:ae:d2:be:df:b3:bb:5e:36:18:06:48:fc:e9:3e:
74:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:74:F8:66:CE:59:35:23:C2:57:C4:6D:9C:30:86:98:E8:BE:A5:4A
X509v3 Authority Key Identifier:
keyid:DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f3:72:99:ba:b6:e2:6f:e8:eb:30:08:85:91:0f:26:5e:d1:
e8:30:a5:63:b2:15:1c:a9:a4:a7:d4:5c:f7:7b:a3:84:7c:85:
c8:59:9d:3a:d6:07:33:97:af:04:e8:c3:9a:1b:e8:dd:3e:cf:
01:63:35:9b:25:dc:77:6c:22:9c:81:73:3e:1e:69:1e:5e:6e:
de:07:1f:f5:b5:c4:38:29:30:9d:fd:18:2f:c7:eb:8f:92:7d:
c5:f8:f7:81:be:8c:9f:7c:b4:b6:22:ad:ed:a1:d8:a1:c2:13:
b8:f8:20:ab:96:d8:ce:cf:ec:a0:0b:c5:49:fa:7e:2d:af:f9:
41:a2:c8:ff:f9:e7:0c:f6:1b:23:b4:f9:56:47:56:1e:a2:22:
2f:9b:69:c8:34:9c:1a:eb:6a:a7:56:72:c6:a7:57:ed:76:f5:
ef:27:76:35:38:4d:cb:66:2d:80:43:fc:6c:a8:85:7a:b8:79:
31:1a:c2:bd:25:77:45:ad:c6:66:6d:aa:83:6f:ad:66:b8:fc:
47:03:4c:ce:f0:18:7e:53:48:a7:61:25:0c:8b:ef:4f:50:29:
02:a5:2e:55:f1:4f:44:77:5d:04:7f:9a:34:17:96:b5:19:5f:
1d:6a:61:7f:1e:5a:9b:8f:ef:6c:88:51:ba:70:38:d6:eb:57:
92:50:9f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:16:51 2026 by rpki-client