Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
File: 493Ty2SL60JR1HzEtlvNZLCajUs.mft (raw, json)
Hash identifier: Q74W2QZtYWan5KEk7cu+JAsE5PFLF5NJyL/U1i8UmEE=
Subject key identifier: 35:A6:0B:AD:85:6E:91:64:8F:C0:D0:D2:A1:4D:E6:AC:DB:EE:D0:67
Authority key identifier: E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
Certificate issuer: /CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Certificate serial: 019F90C80C108D53107F057349B0A3C9A1FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
Manifest number: 122E
Signing time: Thu 23 Jul 2026 21:00:57 +0000
Manifest this update: Thu 23 Jul 2026 21:00:57 +0000
Manifest next update: Fri 24 Jul 2026 21:00:57 +0000
Files and hashes: 1: 0NQU1ASarAJo1UIvicGr69EoQz8.roa (hash: WdkEuOIrig9vUDyn2CAOyE+4Fo/rEVr4Pv+Aia51hm8=)
2: 493Ty2SL60JR1HzEtlvNZLCajUs.crl (hash: J/V9xidWlSYEuMniDAVP5jA3RUYB+zw3clnWswSavfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:0c:10:8d:53:10:7f:05:73:49:b0:a3:c9:a1:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Validity
Not Before: Jul 23 21:00:57 2026 GMT
Not After : Jul 24 21:00:57 2026 GMT
Subject: CN=35a60bad856e91648fc0d0d2a14de6acdbeed067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a8:c3:a1:18:17:5d:97:3f:f3:ae:78:09:bd:
7e:86:5a:67:fa:b2:44:1d:99:0f:35:f9:c7:96:5c:
11:89:90:41:59:72:ce:b2:c6:b5:3e:d2:9d:aa:00:
5e:99:98:d8:50:6a:05:7b:30:f5:3a:a0:d0:d1:38:
29:52:78:20:2a:ef:b6:f7:ca:36:ea:c4:48:4e:a2:
f7:da:f3:9b:97:c0:e7:e2:d9:37:86:3d:69:da:d1:
b5:0a:d9:f5:e5:be:28:9b:42:12:7d:27:a8:9f:6f:
16:d2:0a:b5:a4:10:a5:18:76:bd:5a:8e:4b:d0:48:
22:10:f3:2b:e0:54:99:d8:84:1a:97:7d:9a:73:48:
6d:1b:10:49:56:7c:05:ba:96:a7:3f:09:d5:49:7c:
17:50:87:e8:8c:44:08:f5:ef:5a:f4:5b:fe:22:d9:
5e:2b:08:b8:43:5c:58:ef:e2:b6:bb:2d:cd:23:c2:
5e:02:89:f1:56:61:bb:0a:c2:11:b7:f0:cc:bd:13:
7f:47:ea:bc:29:5d:04:94:56:12:02:64:a1:40:d8:
42:ac:35:48:1f:43:23:c1:99:e1:83:af:90:05:a4:
3f:cd:5f:1a:e8:99:81:d4:3e:ce:60:48:3e:bd:b4:
51:20:d3:4e:4f:de:04:d4:bf:2e:d7:09:18:69:14:
0d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A6:0B:AD:85:6E:91:64:8F:C0:D0:D2:A1:4D:E6:AC:DB:EE:D0:67
X509v3 Authority Key Identifier:
keyid:E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:d5:18:51:c7:e1:ac:d9:08:76:18:09:e6:e8:ac:b7:0a:90:
3c:48:c8:41:af:5c:71:9d:6b:fb:cb:54:c9:fb:47:c1:b0:83:
f3:24:63:bb:9a:61:7a:a3:7f:7a:46:d3:1e:dd:a9:6e:53:fc:
6a:50:1c:a1:15:6b:70:3f:6c:3e:ca:ff:72:e1:ff:51:b4:cb:
e7:80:1c:d0:11:c6:1a:f6:cf:c9:eb:71:1b:5b:4b:94:40:a1:
02:b4:df:c0:89:68:bf:75:e9:d6:79:9f:b8:87:f5:a2:4f:bc:
24:30:94:03:3a:04:58:2c:0a:9b:8d:fb:07:db:e4:ea:f3:6d:
8f:0b:3a:47:ba:35:87:2f:13:73:46:a9:3a:50:e4:89:65:b9:
e7:19:33:40:71:0d:44:c7:6e:44:fe:12:ab:ca:85:9a:7b:1e:
bd:da:7b:d1:6e:62:e8:43:40:6e:96:b9:0a:87:45:e6:14:97:
78:2f:8f:17:3e:5a:18:91:2c:11:5f:93:a2:8a:14:9b:8f:54:
97:f1:d1:40:38:03:1b:44:4a:08:fb:57:8d:e7:c3:48:59:4d:
87:b8:ba:ab:95:f0:2b:2a:a4:3e:fc:24:d0:89:36:56:b4:56:
76:5c:f6:02:04:08:53:f6:2f:4b:cc:5b:d3:bf:e9:46:e6:b5:
3d:34:c9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:03:31 2026 by rpki-client