Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
File: 0dvzH9k3nKtcUK_TkqLukFcYg18.mft (raw, json)
Hash identifier: T7+O5Y/QibhOp6Gz/jGpBcYoEgR/pH/SqDmptRh09qI=
Subject key identifier: B8:A4:00:75:DC:88:AD:DD:31:8E:57:0A:0C:94:7F:78:70:21:A3:C0
Authority key identifier: D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F
Certificate issuer: /CN=d1dbf31fd9379cab5c50afd392a2ee905718835f
Certificate serial: 019F927FB8F5B18F7E91050A47EA2671EC2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
Manifest number: 14DE
Signing time: Fri 24 Jul 2026 05:01:11 +0000
Manifest this update: Fri 24 Jul 2026 05:01:11 +0000
Manifest next update: Sat 25 Jul 2026 05:01:11 +0000
Files and hashes: 1: 0dvzH9k3nKtcUK_TkqLukFcYg18.crl (hash: fejoWQmjPLGdjfwk5Q/ugW2XUko9tMZLhfoUf3l9VEQ=)
2: vTP-a1JInjsi0zs43YUjMr0tQhw.roa (hash: AksN4qlHwN45fSCKy9ilLdGULzgppZOt64KCaKI1vlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:b8:f5:b1:8f:7e:91:05:0a:47:ea:26:71:ec:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1dbf31fd9379cab5c50afd392a2ee905718835f
Validity
Not Before: Jul 24 05:01:11 2026 GMT
Not After : Jul 25 05:01:11 2026 GMT
Subject: CN=b8a40075dc88addd318e570a0c947f787021a3c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c0:97:62:d5:9b:78:2e:78:44:49:49:be:01:
69:93:3b:b2:78:2e:18:fb:bc:91:37:d2:52:c8:10:
05:80:26:43:3e:53:b5:f6:35:ef:86:e5:34:84:e8:
38:68:f3:bc:c3:a8:e7:6d:d1:5b:a6:33:56:5e:3a:
48:cf:bd:db:12:84:91:5b:47:a4:64:35:4f:38:12:
3b:84:34:30:77:66:bb:c0:d5:01:11:40:7d:ac:5b:
99:8f:3c:d3:8d:05:87:45:32:fc:41:6f:31:7c:60:
89:0d:5a:30:d4:14:ff:06:a1:35:c2:a1:28:c0:43:
fe:2d:17:ed:81:fb:61:65:54:89:6a:16:a0:29:6f:
37:f5:59:60:dd:cf:db:40:11:94:9f:b7:5e:51:5a:
c9:c7:3c:1c:bf:5c:93:f3:29:f2:f1:e9:9b:fc:7a:
5f:5b:80:f7:dd:69:02:12:ca:c5:f8:3e:d7:2c:93:
3a:97:9b:67:2f:6f:25:88:0a:87:78:06:f2:08:b1:
2e:ff:98:01:e0:bb:3d:ff:1b:f6:11:24:44:c7:25:
94:03:e1:6c:3f:72:3a:8a:53:f0:46:1b:4f:58:f5:
d5:18:06:bb:f5:f6:c5:6b:26:03:7d:f4:41:9f:01:
8f:94:3a:11:a0:26:dc:10:3d:6b:e8:4a:fb:42:a6:
6f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A4:00:75:DC:88:AD:DD:31:8E:57:0A:0C:94:7F:78:70:21:A3:C0
X509v3 Authority Key Identifier:
keyid:D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:65:d7:98:05:b9:34:18:37:f1:e6:55:d3:9a:1f:60:91:dd:
bb:13:48:e2:5a:a8:c9:09:53:5d:1e:44:04:f5:35:90:c7:8c:
42:e8:4b:a7:71:c9:36:da:b5:ee:98:26:a8:46:2c:95:d9:e9:
5d:0d:42:28:c3:88:9e:a9:a3:ed:54:94:f3:a6:e0:23:e1:17:
e1:95:2c:cc:48:fa:4a:91:d1:ba:92:1a:b9:9d:0d:67:82:a5:
05:67:ea:46:e8:85:73:18:3c:d5:7f:ba:47:82:38:f3:37:23:
91:1a:c9:88:72:7f:31:e3:db:2e:76:6d:eb:8c:ae:6c:95:c2:
d3:c0:85:c4:03:38:08:46:47:ad:af:a2:0e:d2:86:81:59:f1:
ec:39:7e:40:1b:d9:a4:af:3f:d4:89:ea:fc:8c:ea:a3:e7:a3:
c2:1c:93:98:fc:2f:13:c4:2c:6c:7f:41:a4:97:f3:db:a4:2c:
f9:d8:4f:6c:66:1a:8e:1b:a5:57:8a:a1:bf:d0:95:30:16:92:
89:2f:13:bc:0e:8e:a9:54:f9:72:05:cc:ee:c4:42:10:6f:e8:
81:9d:e6:9b:13:5a:63:f1:43:82:51:0e:c9:1c:76:c1:7c:af:
41:ef:c2:e6:ed:7b:8b:21:8f:58:82:74:d9:e2:46:fb:4b:1a:
75:dc:c5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:58:32 2026 by rpki-client