Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
File: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft (raw, json)
Hash identifier: IqehNySP5n/npJ9JxSYdOSAU81BcVWATBiUfGhf5qzQ=
Subject key identifier: DB:FC:29:2E:6D:BF:43:7A:D3:60:A5:86:4A:31:70:60:11:48:E6:6A
Authority key identifier: A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
Certificate issuer: /CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Certificate serial: 019F91DAEE0C83F38C6DEE88ECA51A5A9BFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
Manifest number: 0DBA
Signing time: Fri 24 Jul 2026 02:01:11 +0000
Manifest this update: Fri 24 Jul 2026 02:01:11 +0000
Manifest next update: Sat 25 Jul 2026 02:01:11 +0000
Files and hashes: 1: jbAqNXtEEA5VMmJmYWIDy0wpLeE.roa (hash: heA9ElftnVcEx/Z56cUQXfy2JpdBhi/Gw5ToPa737lc=)
2: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl (hash: 7bbhsO8UiK34pciBc6VH4vLMOT4r7kisMFJOX0lLIxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:ee:0c:83:f3:8c:6d:ee:88:ec:a5:1a:5a:9b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Validity
Not Before: Jul 24 02:01:11 2026 GMT
Not After : Jul 25 02:01:11 2026 GMT
Subject: CN=dbfc292e6dbf437ad360a5864a3170601148e66a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:27:a6:b6:89:f3:de:34:97:26:2f:bd:02:4d:
c3:f6:44:46:8d:2b:0a:be:f3:1b:28:99:d5:fa:6c:
6e:e2:e5:66:d9:e5:e4:c4:3f:cd:ff:27:57:f5:b4:
0b:61:6f:c5:ff:6a:a1:6d:84:b4:ce:09:2c:25:93:
cf:6c:a8:bb:1b:b1:94:c9:50:6a:93:46:3c:73:7c:
fc:13:a6:e9:fb:21:85:2e:85:9f:a1:30:ab:d3:cb:
ee:2a:21:d0:97:d0:3a:e4:21:cb:0b:12:9d:67:95:
9f:ed:f1:5f:c3:d4:da:ee:a9:a3:56:e5:4d:92:e8:
fe:6e:0b:6e:b6:05:21:b9:7a:89:b2:c6:01:74:b0:
34:c5:07:53:85:93:9c:fb:c0:53:3f:1d:ad:fd:18:
1c:f8:35:8e:f9:10:b7:b2:7f:08:81:ea:bd:12:2b:
9a:4a:dd:93:29:c9:af:3b:ae:bc:cc:56:1f:70:02:
b8:88:4f:f4:fc:b0:0e:85:6d:51:84:a0:cf:fb:21:
46:80:55:bf:9f:bd:c7:53:fb:8b:ee:31:71:c8:44:
40:a9:85:f3:67:7c:b1:31:e3:67:d7:a7:fc:25:bb:
3a:b3:05:a8:7d:3a:d9:44:20:76:6f:aa:8c:51:b9:
aa:89:d6:10:5a:76:bd:94:c4:19:cf:b5:94:62:6b:
14:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:FC:29:2E:6D:BF:43:7A:D3:60:A5:86:4A:31:70:60:11:48:E6:6A
X509v3 Authority Key Identifier:
keyid:A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a9:1d:44:fd:65:0d:7c:9d:2e:2c:a6:55:d8:4c:9b:ae:2a:
81:52:29:83:39:c5:2b:dd:4d:b6:ed:7e:0e:2f:8b:99:2b:0f:
42:83:83:a8:01:b7:de:a0:23:20:57:f3:1a:30:95:9e:bc:7b:
b2:0d:e5:70:cf:c1:66:53:9d:31:e9:6b:c0:41:ab:63:aa:b9:
3c:6e:6c:92:40:16:74:01:f0:40:44:7c:a7:b8:53:ad:a0:9e:
b9:63:0f:88:69:4f:c5:aa:b6:a5:ba:23:76:e0:27:ee:ef:84:
e7:3d:6c:36:a4:34:59:96:ff:de:c9:b4:4d:58:f9:d7:03:44:
42:3c:82:91:6f:8b:15:f9:fd:99:d5:b0:13:ac:2f:34:2c:ec:
77:af:fe:e0:73:9c:f2:9f:4b:8d:cb:d6:89:c6:40:95:a8:3e:
a5:da:f9:e8:19:d4:6d:6e:df:c9:18:55:eb:da:0b:e8:6d:d8:
3d:31:10:97:20:47:5c:3a:ef:0b:86:03:3d:e5:51:21:dc:b5:
31:36:6a:2d:46:0b:2b:65:c6:fb:8f:cb:d3:12:a8:af:b9:14:
7c:70:3e:e1:5e:e1:a5:6c:c3:34:a1:9c:4d:13:98:8b:58:ed:
ed:42:f6:69:c8:df:59:4b:c3:62:fe:dc:62:5f:d7:ee:0f:bb:
0a:25:0c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:13:11 2026 by rpki-client