Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
File: dv4wVehykAAOMof3q1iDgCpapto.mft (raw, json)
Hash identifier: GOEm97KZEModL+FtEejP0mOw6ZgqShDRC563lvcVhFs=
Subject key identifier: E3:17:FB:C4:54:5A:FC:6C:9A:25:B6:46:47:1E:5E:4A:B5:3E:83:7C
Authority key identifier: 76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA
Certificate issuer: /CN=76fe3055e87290000e3287f7ab5883802a5aa6da
Certificate serial: 019F97A631EA526F35BB9D1D1FDB005CEBC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
Manifest number: 0CF2
Signing time: Sat 25 Jul 2026 05:01:19 +0000
Manifest this update: Sat 25 Jul 2026 05:01:19 +0000
Manifest next update: Sun 26 Jul 2026 05:01:19 +0000
Files and hashes: 1: 0ySGeIDrXtZFxjKASUMVzdc0Dlc.roa (hash: l2+MJdgyr6VqnECFLRIqzXDoWHq/3WTx2ApaEcFXd9c=)
2: 2MIYePrvuVOPunZ0cCU587P-UNo.roa (hash: 87FdzdFETynQoJd/9d3TWFG9LHhJseAqTkXpKmEANyg=)
3: dv4wVehykAAOMof3q1iDgCpapto.crl (hash: 4sNzAsbT+Ib+4iOHRR3MnbgvlhUOtKz7QJSW+gy/g5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Jul 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:97:a6:31:ea:52:6f:35:bb:9d:1d:1f:db:00:5c:eb:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76fe3055e87290000e3287f7ab5883802a5aa6da
Validity
Not Before: Jul 25 05:01:19 2026 GMT
Not After : Jul 26 05:01:19 2026 GMT
Subject: CN=e317fbc4545afc6c9a25b646471e5e4ab53e837c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:69:c1:98:b3:62:90:03:cd:0b:90:a4:0c:ae:
60:bd:34:9e:66:0d:aa:0e:60:ac:d9:bf:d7:6e:9d:
1a:ae:03:80:62:02:9a:bc:6b:5a:84:e1:ab:10:5b:
5e:aa:9e:b8:ea:20:2a:a6:79:f0:43:23:ef:8b:76:
72:fc:b8:b3:c3:10:ac:46:9d:2c:29:a2:55:36:3f:
18:b8:48:22:27:0e:2b:39:b6:ac:ec:99:fb:5a:8f:
e7:4c:1a:c0:c0:e3:c2:5b:cf:31:63:f2:6d:ff:35:
3f:5b:68:8f:d9:5d:c8:99:c9:44:86:b0:7d:2f:dd:
3f:3b:55:b9:7b:2b:d2:4f:a6:cc:97:6f:36:ae:f7:
a6:18:5d:8f:d0:99:37:a3:af:cb:25:81:74:19:11:
34:66:1e:8c:b7:9c:0a:ea:d0:11:4e:8f:7d:eb:62:
15:87:d3:a3:8a:81:95:0d:d3:b3:67:96:05:25:f2:
be:8c:38:83:7c:fc:94:ed:1e:91:a0:85:21:d2:ad:
92:3e:ab:32:74:ef:18:40:dd:83:bc:d8:6a:57:e8:
d7:39:0c:cc:1e:e2:cc:7a:95:31:94:91:f5:e9:8b:
eb:90:8b:85:db:0d:8b:76:80:be:2e:41:6e:58:06:
30:0a:f1:c1:1d:ef:49:23:9a:21:13:6a:5b:7f:95:
38:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:17:FB:C4:54:5A:FC:6C:9A:25:B6:46:47:1E:5E:4A:B5:3E:83:7C
X509v3 Authority Key Identifier:
keyid:76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:db:8d:02:8c:4f:81:92:0c:35:eb:3e:a9:ca:33:c1:9f:a9:
62:1d:e7:ca:9b:d8:a0:e0:46:99:11:6f:7e:ef:dc:09:c0:1a:
d9:22:00:36:c1:48:ec:bf:c1:91:8e:1e:f7:c5:e2:47:75:05:
fd:2c:65:b0:4d:4a:5a:3c:28:37:66:f2:3c:c5:a2:d8:78:d2:
5d:f1:a0:a2:91:86:df:d4:be:84:58:d1:58:69:55:a2:fc:78:
6b:95:79:32:a1:cb:e6:f8:71:71:7e:70:da:f6:30:61:b5:70:
28:d8:16:a7:51:a9:ba:b0:f7:87:4c:d4:d8:38:2e:b8:22:c7:
ab:31:94:d9:2b:96:2d:79:22:94:c8:f9:7b:44:43:87:ba:eb:
f2:2d:fd:3c:78:04:ba:0e:42:82:0b:6b:ee:1c:30:1a:dd:94:
f3:a2:65:69:cf:f4:92:6f:97:63:fe:0f:36:74:e0:bd:42:01:
4c:c3:40:ad:3b:9a:da:52:a1:d6:78:cc:d9:9a:fe:ce:34:7a:
dd:ac:e1:90:29:79:fd:45:80:64:ea:04:83:9a:b3:71:e5:72:
b9:6e:5c:9a:e8:b1:6f:15:d7:f8:9c:20:bc:f0:0f:f5:19:7d:
ad:4b:ab:15:8e:ba:1a:30:f2:e0:38:b5:83:a7:28:92:6d:90:
00:95:36:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 07:52:07 2026 by rpki-client