
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
File: _-cGk0VLwzSF3sadIZ0FAmVKwEo.mft (raw, json)
Hash identifier: WQmJoLuSXKrMEpfxGYnhdtaAfZUnaoznjldn8dUrF4o=
Subject key identifier: 12:D9:6F:28:F7:E6:5B:C1:3C:6C:E6:58:D7:64:5A:90:3F:6B:E4:8C
Authority key identifier: FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A
Certificate issuer: /CN=ffe70693454bc33485dec69d219d0502654ac04a
Certificate serial: 019F935C0CC41C8BBD2DFACC203B849B7A40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
Manifest number: 145B
Signing time: Fri 24 Jul 2026 09:01:51 +0000
Manifest this update: Fri 24 Jul 2026 09:01:51 +0000
Manifest next update: Sat 25 Jul 2026 09:01:51 +0000
Files and hashes: 1: _-cGk0VLwzSF3sadIZ0FAmVKwEo.crl (hash: CUAbKcOHfQGxwtl4A6wm0+FTRjBEVkJhNQ0Xt2p7xJo=)
2: x50nfPWrcxkZfg31dDtVSDNo-l0.roa (hash: Zf8Bocjkzb8ajAA1WIwAKEh12BnqmBQgyIDI1yF5zzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5c:0c:c4:1c:8b:bd:2d:fa:cc:20:3b:84:9b:7a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe70693454bc33485dec69d219d0502654ac04a
Validity
Not Before: Jul 24 09:01:51 2026 GMT
Not After : Jul 25 09:01:51 2026 GMT
Subject: CN=12d96f28f7e65bc13c6ce658d7645a903f6be48c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:51:af:5e:fb:55:4b:42:47:a1:cb:85:17:fb:
41:3a:a8:21:9b:08:df:3d:12:56:b4:09:46:c7:b8:
f3:48:28:ad:3e:08:60:6c:d7:d0:37:14:1d:3b:fa:
9b:cc:67:67:ec:c4:6d:1a:af:fd:55:7c:c5:95:06:
49:58:50:ce:3b:3d:56:be:89:84:1e:82:6c:56:e2:
f4:27:b6:9a:42:4a:c4:fc:63:4e:c7:37:94:cc:39:
71:65:de:d1:90:ee:24:71:b3:fa:8f:24:15:9c:4e:
6e:60:a6:4f:cf:60:87:49:a8:17:d7:5c:ce:59:23:
a1:de:1d:0f:0b:b4:89:fe:35:63:d9:37:0a:5b:21:
a7:eb:ef:18:02:6e:16:5d:df:d2:1c:c9:8f:a9:e2:
36:ec:2b:36:2b:fe:01:a0:d7:ae:28:9b:7a:24:9e:
48:c3:96:6b:5c:06:72:a8:a1:28:e0:9d:34:ac:70:
6c:94:37:ad:35:c0:f6:01:2c:b0:74:e4:0e:72:a1:
b6:53:82:79:f9:2c:4e:a6:d0:68:7b:62:f0:c3:24:
8b:3c:5a:9b:13:d6:d6:17:5d:e2:fe:82:1d:df:51:
ec:1d:6a:bd:b0:1f:3f:6d:46:ff:77:a9:20:bf:05:
c0:18:01:67:49:a7:ed:8b:7b:09:99:26:59:db:cc:
90:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D9:6F:28:F7:E6:5B:C1:3C:6C:E6:58:D7:64:5A:90:3F:6B:E4:8C
X509v3 Authority Key Identifier:
keyid:FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:2f:52:34:22:4b:cb:46:83:91:0b:f2:c5:21:41:f9:60:1a:
d9:8f:c8:40:1f:60:4c:8a:33:bf:f6:0b:2a:c8:d7:3f:91:ae:
06:c6:6a:ce:d8:40:58:bf:ed:c4:db:87:ce:ea:70:f6:1e:fb:
93:7f:df:7d:6a:8e:06:79:77:bd:4f:86:a8:fa:e0:62:00:87:
12:3f:b2:6c:bd:34:44:bb:9b:40:88:b0:d1:8b:66:51:64:9e:
d2:4f:4d:15:f3:f1:1c:da:25:9e:0b:21:e1:a2:ea:76:2d:2d:
5c:63:5b:34:b3:a6:ff:09:72:c3:9a:b1:ee:9d:da:f0:1e:10:
eb:64:fc:ac:61:cb:53:4e:93:70:45:e3:f7:f6:21:51:24:f7:
73:fb:08:e6:dc:f2:ca:f8:87:fa:8c:25:fc:36:93:16:49:fc:
37:26:f7:e1:43:4e:d2:af:ec:22:63:67:14:3a:c9:20:c2:46:
c3:dd:c9:a9:6b:eb:02:61:a5:dd:68:97:e9:26:d3:36:8c:80:
b2:56:06:c9:f0:82:cf:60:07:c0:bb:fb:f5:38:7d:b0:30:e7:
8e:24:f4:2a:f9:0a:f7:c5:a6:0f:eb:e2:33:1e:2c:f0:34:07:
eb:d0:fe:15:b4:39:6d:3a:de:41:26:3f:88:c8:cc:d4:73:d8:
a6:27:d7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:03:32 2026 by rpki-client