Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
File: DX08coAiI1d4gNOPBIyBiRImQDs.mft (raw, json)
Hash identifier: hF1zfxKsh7IklGh8RIwCWAsuT0yFI+4F8718s37mGEY=
Subject key identifier: D6:10:E5:4A:13:D4:77:52:C7:F4:1A:F9:14:A7:CC:98:22:AC:56:DD
Authority key identifier: 0D:7D:3C:72:80:22:23:57:78:80:D3:8F:04:8C:81:89:12:26:40:3B
Certificate issuer: /CN=0d7d3c72802223577880d38f048c81891226403b
Certificate serial: 019F93FFA9C6B15202D86B197960A78BA365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
Manifest number: 0E29
Signing time: Fri 24 Jul 2026 12:00:33 +0000
Manifest this update: Fri 24 Jul 2026 12:00:33 +0000
Manifest next update: Sat 25 Jul 2026 12:00:33 +0000
Files and hashes: 1: DX08coAiI1d4gNOPBIyBiRImQDs.crl (hash: FWGj9yyI52rsByMDVBXaeNR71APOqrXrkzu99QP/0DE=)
2: rmlQHSPR8QbJ4-lSxSii48UeNZs.roa (hash: xz18D6VTlXYgx+ypy0VFWQBhdsBWNVKOCFQd2upOGqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:a9:c6:b1:52:02:d8:6b:19:79:60:a7:8b:a3:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7d3c72802223577880d38f048c81891226403b
Validity
Not Before: Jul 24 12:00:33 2026 GMT
Not After : Jul 25 12:00:33 2026 GMT
Subject: CN=d610e54a13d47752c7f41af914a7cc9822ac56dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5a:47:5c:9c:ac:b5:bd:cc:3e:f1:8b:95:9f:
83:96:09:82:00:cb:34:de:75:8b:5c:53:a2:0e:ff:
48:2f:ae:c1:09:a9:c0:ed:92:e7:d8:32:b7:ab:00:
64:34:d3:7f:76:49:6c:96:a3:90:25:52:42:07:96:
00:06:14:e5:35:d6:49:84:58:bb:a3:ef:f1:8e:14:
85:64:17:ab:fb:23:1c:05:47:15:35:1b:fa:5f:c7:
69:d3:ac:ce:98:89:61:7a:5a:4c:36:f0:5c:dd:7d:
6b:bb:15:d1:14:32:48:d1:a3:28:e2:ab:c2:62:76:
10:26:65:f1:c1:47:6c:2e:99:cd:0e:f8:3c:dc:dc:
d2:a6:0d:c9:f5:5e:73:8c:28:7f:de:dd:ce:6e:e1:
3f:5a:2f:95:4a:38:f1:61:93:01:6f:22:e1:ef:a0:
ff:39:71:fd:a0:13:74:b8:7c:c7:1d:d7:f3:d5:e5:
57:38:ed:49:ae:56:e4:78:d9:06:95:d4:ca:37:20:
c3:f6:d4:84:38:3d:8e:a2:03:c0:70:ab:9b:9a:9f:
e0:aa:af:71:d3:e3:83:fe:58:11:07:0c:80:33:dd:
88:76:af:b6:57:fd:5e:f9:c9:0d:45:47:10:34:17:
04:a6:be:fa:98:be:08:fc:1b:0a:4b:97:75:41:f8:
8d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:10:E5:4A:13:D4:77:52:C7:F4:1A:F9:14:A7:CC:98:22:AC:56:DD
X509v3 Authority Key Identifier:
keyid:0D:7D:3C:72:80:22:23:57:78:80:D3:8F:04:8C:81:89:12:26:40:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a7:0d:a5:b5:6d:83:eb:5a:05:94:a1:9d:9c:03:1c:53:77:
31:e2:da:17:34:de:62:59:15:a5:09:a6:60:1b:25:8f:b3:cc:
c1:bc:71:12:e7:30:d2:9c:29:07:11:47:a5:0f:01:fa:d4:96:
31:a6:a7:e8:46:18:39:3c:e7:4f:6a:4d:83:c2:a5:6a:3a:1f:
f1:cf:dc:01:54:62:cd:c4:03:db:d8:99:d1:0e:36:6a:2a:59:
c2:44:13:1b:fa:0b:60:f2:a3:48:34:0c:84:29:5d:62:01:c0:
d9:38:34:bb:a7:ff:c7:3a:47:78:3d:10:ec:f5:fb:94:08:57:
95:fc:0c:59:7d:10:d1:2f:8f:68:a5:fb:95:71:e2:e1:13:9f:
2a:9d:58:f9:74:bf:45:d7:46:1a:62:4e:ce:ec:9a:3e:07:c3:
34:38:c8:23:d6:a7:78:bd:b2:e2:8b:51:21:0a:c7:03:12:1e:
9c:de:e9:fb:d0:5b:9c:f3:62:a9:db:78:30:8e:08:a9:60:4b:
d1:d8:2d:a4:ba:59:35:07:5e:ad:c1:0d:3c:83:a2:79:29:5a:
73:71:15:4c:ec:10:5d:e6:cb:6b:68:d4:8e:3e:ef:0b:00:fa:
e1:60:0d:a7:fa:82:05:5b:c1:52:ec:6a:43:80:e8:7c:c8:b7:
43:a4:fa:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:48:46 2026 by rpki-client