Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/773c76-feef-4661-a435-388b7f796014/1/DB0Ac_gtn2QCabltJeqCi_7oGjw.mft
File: DB0Ac_gtn2QCabltJeqCi_7oGjw.mft (raw, json)
Hash identifier: grwmZTALaKnCL8+JO5eNuHD+nI0zrPTGnEjDuU23YKE=
Subject key identifier: 2D:DC:E2:9B:15:80:4A:D3:1C:F2:66:E7:09:BD:EC:2B:57:33:98:60
Authority key identifier: 0C:1D:00:73:F8:2D:9F:64:02:69:B9:6D:25:EA:82:8B:FE:E8:1A:3C
Certificate issuer: /CN=0c1d0073f82d9f640269b96d25ea828bfee81a3c
Certificate serial: 019F8FEBB656AC9637BB68F8D5C6DDFF8E67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DB0Ac_gtn2QCabltJeqCi_7oGjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/773c76-feef-4661-a435-388b7f796014/1/DB0Ac_gtn2QCabltJeqCi_7oGjw.mft
Manifest number: 72
Signing time: Thu 23 Jul 2026 17:00:17 +0000
Manifest this update: Thu 23 Jul 2026 17:00:17 +0000
Manifest next update: Fri 24 Jul 2026 17:00:17 +0000
Files and hashes: 1: DB0Ac_gtn2QCabltJeqCi_7oGjw.crl (hash: yQgTEvQWclwqRDjhT6Wci/SfGyBBBeD20KnX2lMNE4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/773c76-feef-4661-a435-388b7f796014/1/DB0Ac_gtn2QCabltJeqCi_7oGjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/773c76-feef-4661-a435-388b7f796014/1/DB0Ac_gtn2QCabltJeqCi_7oGjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DB0Ac_gtn2QCabltJeqCi_7oGjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:b6:56:ac:96:37:bb:68:f8:d5:c6:dd:ff:8e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c1d0073f82d9f640269b96d25ea828bfee81a3c
Validity
Not Before: Jul 23 17:00:17 2026 GMT
Not After : Jul 24 17:00:17 2026 GMT
Subject: CN=2ddce29b15804ad31cf266e709bdec2b57339860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f4:42:5f:a3:21:a9:77:10:a8:b4:59:e5:bb:
f6:7e:9c:0b:eb:06:10:a8:25:46:31:ad:9a:b5:ea:
fc:5f:be:d7:a4:85:e0:97:68:03:6d:e1:b5:a6:3b:
55:bf:78:6c:a0:55:7d:4e:b3:e5:e0:6f:08:f4:8e:
1a:57:dd:19:1c:06:c1:9f:77:d3:33:cc:bb:da:d5:
98:6a:0b:34:d6:8a:23:d3:b8:ce:30:b1:b0:37:11:
ef:35:1c:56:c1:58:0e:ab:b3:78:11:3a:8a:63:7e:
b8:3b:1c:27:10:41:a7:90:8d:5d:95:7a:a7:f7:28:
6e:0c:b8:c8:95:bd:c8:f0:e8:c2:26:05:3c:be:68:
25:c7:d8:ce:55:8f:e4:88:90:32:bf:c1:72:22:6d:
f4:25:ee:a7:00:ba:1f:8e:60:fc:47:8d:97:db:5c:
30:e2:77:ea:d9:19:7c:74:cc:b7:7b:fd:8d:86:99:
55:85:95:8f:a4:fe:24:23:33:7c:3f:37:bb:03:f4:
4b:14:d2:49:54:f2:56:e2:38:67:75:c8:23:2d:f3:
9c:37:a8:6d:7b:db:c7:2b:e8:7b:31:27:bf:69:24:
17:eb:b6:b6:39:4f:0b:9d:76:e8:25:1e:70:72:c2:
9d:63:7b:e8:3b:64:f2:cf:0d:7e:83:bf:39:92:76:
1f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DC:E2:9B:15:80:4A:D3:1C:F2:66:E7:09:BD:EC:2B:57:33:98:60
X509v3 Authority Key Identifier:
keyid:0C:1D:00:73:F8:2D:9F:64:02:69:B9:6D:25:EA:82:8B:FE:E8:1A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DB0Ac_gtn2QCabltJeqCi_7oGjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/773c76-feef-4661-a435-388b7f796014/1/DB0Ac_gtn2QCabltJeqCi_7oGjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/773c76-feef-4661-a435-388b7f796014/1/DB0Ac_gtn2QCabltJeqCi_7oGjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c5:a0:93:14:70:de:20:94:4d:7a:7a:71:75:fc:64:91:53:
fb:e2:4a:3f:9f:ff:65:51:89:23:e6:9f:b9:75:ff:56:9e:ac:
ee:ad:bb:bd:38:be:04:3b:ab:fe:bb:55:ba:70:94:06:b6:dc:
92:8e:8a:43:ad:bd:5b:f8:8e:ed:52:95:11:99:5b:47:91:c3:
ab:a7:6b:4e:84:17:4f:40:72:2a:6b:2d:40:16:d7:1b:87:19:
0e:40:df:d8:21:d1:c8:51:36:5e:ff:64:5d:bc:69:dd:82:a9:
cf:9c:74:a0:6e:b0:a8:c2:79:3f:12:f9:af:37:24:ae:72:72:
98:eb:d2:fa:b1:ad:6e:fb:ec:4d:a0:c1:ef:f1:31:4f:3f:ef:
4d:40:8d:b4:a6:45:2d:41:f7:fa:44:ba:83:95:32:76:55:6f:
d5:37:82:86:07:d2:13:61:24:0e:6a:0c:ce:14:95:6f:b1:a8:
9a:24:12:e1:a8:69:12:58:4d:0d:0e:3a:d1:d0:6c:ea:b5:3a:
1d:b7:5d:dd:83:43:35:57:34:e6:99:26:ae:eb:bf:8c:fd:3d:
ad:03:33:7c:8e:3d:27:9f:33:af:c3:4e:da:da:47:45:9e:71:
8c:50:63:6c:f3:7a:07:ea:94:9a:41:5b:b7:e4:09:84:0b:cc:
2a:b3:e8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:19:53 2026 by rpki-client