Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft
File: d0972iMD4D6ANP52MfUEi5mF9n4.mft (raw, json)
Hash identifier: WwfgUjXbWB68cgZFRiZDJ5095UI9xSzeieATX7669sY=
Subject key identifier: 88:82:67:51:49:01:93:76:BF:45:96:62:BC:E4:3F:A1:55:F1:B5:7C
Authority key identifier: 77:4F:7B:DA:23:03:E0:3E:80:34:FE:76:31:F5:04:8B:99:85:F6:7E
Certificate issuer: /CN=774f7bda2303e03e8034fe7631f5048b9985f67e
Certificate serial: 019F91DA685529146EC95CB47A901B7DCBA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0972iMD4D6ANP52MfUEi5mF9n4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft
Manifest number: 0321
Signing time: Fri 24 Jul 2026 02:00:37 +0000
Manifest this update: Fri 24 Jul 2026 02:00:37 +0000
Manifest next update: Sat 25 Jul 2026 02:00:37 +0000
Files and hashes: 1: d0972iMD4D6ANP52MfUEi5mF9n4.crl (hash: P6ptruaDqtITTQDOpLyhKJJczwuAITGFpTjzBBFOK9A=)
2: vr-KcEvzFupIdELOEs6eVsczP7A.roa (hash: sVJX8b77ReEC5s9osN7ZZ4vvNkbfeOM17MUXGpuCdfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0972iMD4D6ANP52MfUEi5mF9n4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:68:55:29:14:6e:c9:5c:b4:7a:90:1b:7d:cb:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=774f7bda2303e03e8034fe7631f5048b9985f67e
Validity
Not Before: Jul 24 02:00:37 2026 GMT
Not After : Jul 25 02:00:37 2026 GMT
Subject: CN=8882675149019376bf459662bce43fa155f1b57c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9c:2c:39:75:f1:e8:5d:ce:0e:e2:1c:71:d5:
a5:5f:75:e3:f8:15:a0:18:03:3f:11:af:6e:87:70:
64:b5:14:be:dc:14:b6:31:64:09:55:82:97:b0:e0:
75:71:2a:a1:15:55:ba:da:9c:77:df:94:ee:cb:77:
19:f3:15:68:e9:19:9a:38:a1:bb:d0:1d:5f:c4:a3:
60:47:45:cd:96:c7:59:c2:2d:29:55:d2:17:c5:44:
d9:a4:e0:17:1c:f8:32:64:53:5e:05:56:67:6d:bc:
06:3e:50:50:25:4d:73:01:b4:cc:ed:59:37:cc:9f:
f4:39:3c:1b:5e:2d:1c:61:39:4c:cd:ed:8c:b3:f5:
1a:db:14:e6:dc:f1:e1:42:70:66:de:eb:25:ca:2e:
be:a5:ac:8f:e3:0a:b6:a7:df:f2:fa:bc:ec:1e:67:
69:32:c3:57:b3:c8:07:45:78:99:6c:99:a2:f4:3b:
1a:e1:d8:82:c4:6b:37:41:3f:da:da:98:27:87:44:
e8:c4:57:3e:51:4d:d3:a1:e9:d6:c4:c3:07:c9:53:
cc:38:4f:f0:93:4e:cf:4a:eb:7f:dc:26:a9:99:68:
8c:64:56:91:cd:6d:6d:62:bd:fe:ec:25:cb:00:92:
0c:64:ef:a3:f1:8b:a6:71:7f:25:1f:42:37:e9:7a:
74:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:82:67:51:49:01:93:76:BF:45:96:62:BC:E4:3F:A1:55:F1:B5:7C
X509v3 Authority Key Identifier:
keyid:77:4F:7B:DA:23:03:E0:3E:80:34:FE:76:31:F5:04:8B:99:85:F6:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0972iMD4D6ANP52MfUEi5mF9n4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:e0:76:85:76:27:ef:8a:d9:af:12:b1:af:bb:04:f9:b0:a7:
a4:b2:f5:45:49:f2:94:87:27:e4:c0:aa:9d:06:dd:4c:4e:67:
2b:51:5a:50:31:64:ae:b7:e9:95:2c:57:f2:01:3e:81:b6:5e:
8f:dc:e4:7f:c6:3f:13:1d:06:44:79:89:6c:be:bd:f9:0f:8b:
22:4c:4d:72:1d:83:0a:db:35:f1:85:43:e7:37:b6:7b:8e:32:
ce:9d:97:f0:00:5b:07:d9:65:64:e3:a0:62:41:b2:8e:8c:83:
24:31:17:83:cb:3b:22:7f:61:3f:76:94:a7:82:5f:f3:c3:dd:
09:37:9b:6f:49:d9:59:e7:4a:52:73:ff:33:43:b9:b5:db:31:
35:8b:1b:6b:3d:02:e6:9d:81:67:fb:00:91:2c:95:7a:b5:b0:
57:35:24:12:e0:c6:75:15:2c:94:96:07:25:18:b0:e2:a0:88:
16:04:b6:2d:cd:7b:88:d6:bb:77:ce:b4:c6:cd:cd:ea:35:40:
53:b8:0a:ba:c7:ce:1f:91:e2:aa:ef:9c:da:4f:c9:1f:85:19:
db:c0:0b:1a:01:b3:15:30:94:43:8d:ea:f8:18:28:ec:d9:6a:
9e:b4:2f:da:a5:e1:56:ab:77:8e:54:c0:90:83:56:9c:40:38:
a7:bc:52:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:18:26 2026 by rpki-client