Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
File: 0DjDOLEo-Drewvadk8MsU1PKA5g.mft (raw, json)
Hash identifier: qHwmzm3qNclkSHSOrxRkqagTWaraiFoKcOgI3iJ82Nk=
Subject key identifier: 57:55:90:A9:F4:89:F7:31:B7:89:48:79:1D:49:99:6B:2A:98:6C:8E
Authority key identifier: D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98
Certificate issuer: /CN=d038c338b128f83adec2f69d93c32c5353ca0398
Certificate serial: 019F8F10B5F6F41A12568D1BA15F5E24CCD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
Manifest number: 1663
Signing time: Thu 23 Jul 2026 13:01:04 +0000
Manifest this update: Thu 23 Jul 2026 13:01:04 +0000
Manifest next update: Fri 24 Jul 2026 13:01:04 +0000
Files and hashes: 1: 0DjDOLEo-Drewvadk8MsU1PKA5g.crl (hash: FHDM8VOJRJbZ2N8zh5gagFnfQW1uj0wK/2Tt/5+O+Fs=)
2: iYtloRWl9kFypd8JJUfmPgfj4cA.roa (hash: S73CmXUZ6HVY4mwA83JVTETkq549rHQpfRMzqNjQiJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:b5:f6:f4:1a:12:56:8d:1b:a1:5f:5e:24:cc:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d038c338b128f83adec2f69d93c32c5353ca0398
Validity
Not Before: Jul 23 13:01:04 2026 GMT
Not After : Jul 24 13:01:04 2026 GMT
Subject: CN=575590a9f489f731b78948791d49996b2a986c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:cb:45:0a:9d:b7:70:56:e3:f0:02:c1:2b:da:
e1:e5:b6:ff:c4:b3:29:8b:03:9a:b1:db:81:39:15:
9d:69:9f:2b:c0:07:fb:df:da:4c:bb:ca:dc:a6:e5:
42:57:46:32:86:d3:69:8b:19:6e:8f:9d:0a:7b:cf:
da:12:72:e5:01:dc:13:ba:88:0a:f9:0e:48:8f:f4:
94:82:5d:53:d5:64:7c:31:39:5d:e3:fd:ea:87:e8:
55:ac:3e:e5:88:20:c0:9c:78:6b:4d:ac:63:90:99:
6d:da:60:46:07:c2:18:04:70:91:04:84:50:90:6f:
c6:f9:9c:4f:e1:d1:40:10:0d:4c:c8:5e:89:8d:4c:
1f:c6:76:90:fa:18:c3:c0:b8:fa:59:18:36:fb:97:
3f:06:90:55:c0:90:26:eb:6b:56:1a:dd:b0:18:e4:
b9:e9:e3:af:3d:eb:fa:09:f9:c0:4d:73:ac:5e:0a:
22:2c:e0:53:e4:c4:0f:af:b4:a2:99:30:e9:8f:6d:
4e:cd:57:fc:85:2a:e8:a9:9f:cd:95:10:4e:36:43:
84:39:d5:28:48:31:80:ee:7e:7f:b9:91:73:a4:d3:
e5:ef:78:e2:48:9a:b2:78:3a:95:01:4b:2b:a2:46:
01:d7:c0:6d:f1:e2:38:d2:f4:15:72:13:10:13:f9:
29:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:55:90:A9:F4:89:F7:31:B7:89:48:79:1D:49:99:6B:2A:98:6C:8E
X509v3 Authority Key Identifier:
keyid:D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:dd:2d:2b:fc:2e:ff:ed:ec:71:90:da:32:08:f8:21:57:0f:
dc:fa:18:83:b8:14:4d:af:9c:99:c6:f6:6a:44:3c:e9:76:f4:
fe:93:a7:bb:7b:b3:f3:60:b0:d8:0d:ff:ad:9e:82:b6:ab:da:
19:25:b3:9e:08:4f:c3:93:9d:08:31:29:0b:b8:22:cf:57:75:
e0:d7:20:86:bf:d8:57:6e:fc:f8:96:43:2d:1a:8c:ca:50:05:
66:7d:5e:81:fb:9b:2a:35:af:b6:dc:f2:c6:ae:bd:35:4f:00:
65:d5:b4:a5:60:ae:4e:7f:44:ed:9a:73:23:bc:3c:9c:c6:18:
61:f8:22:42:87:28:66:f4:77:76:e3:c7:ad:68:9a:62:b7:c2:
a1:33:3e:0a:87:49:e3:3c:f2:8d:de:83:7d:82:86:43:9f:36:
cc:82:cb:4d:c6:21:5d:95:d0:f5:e8:9b:5a:25:5b:c0:8c:8c:
a2:2e:bd:fd:9e:61:78:21:d0:09:5f:b2:29:e1:96:65:4d:23:
9b:70:6d:2e:62:b5:c3:d2:15:3d:41:7e:4d:9b:c9:61:fc:eb:
ca:46:6a:17:15:ce:58:c3:a3:19:b7:ec:f8:19:2b:f5:11:11:
55:05:4e:37:0a:d9:72:02:e8:02:b2:9f:30:c5:46:38:e4:07:
12:bb:89:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:50:08 2026 by rpki-client