Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
File: D33TJ3nBqbKX4oywNf1nmrsZFtE.mft (raw, json)
Hash identifier: E83qAVe7agePxt6BsGexTYEjxJby235PtRw54tVRMvY=
Subject key identifier: A0:C9:B5:8D:09:B8:D0:D7:EB:6A:5F:7B:CE:E2:2C:9D:1F:BC:1A:8E
Authority key identifier: 0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1
Certificate issuer: /CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
Certificate serial: 019F9022BB92927544F0BFADA9DE28CF606F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
Manifest number: 072D
Signing time: Thu 23 Jul 2026 18:00:22 +0000
Manifest this update: Thu 23 Jul 2026 18:00:22 +0000
Manifest next update: Fri 24 Jul 2026 18:00:22 +0000
Files and hashes: 1: D33TJ3nBqbKX4oywNf1nmrsZFtE.crl (hash: PH8JFLcxyYoH+x1jlTHzl/x3AG0aBJGZBHOTYogaxfw=)
2: P-p2NxW9TFmZAwW03gw6xGVVFZc.roa (hash: VYJ/qjVSy2HmGtgmvHoLOPXTUBBAf8syxAzQSjcRmvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:bb:92:92:75:44:f0:bf:ad:a9:de:28:cf:60:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
Validity
Not Before: Jul 23 18:00:22 2026 GMT
Not After : Jul 24 18:00:22 2026 GMT
Subject: CN=a0c9b58d09b8d0d7eb6a5f7bcee22c9d1fbc1a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:95:bb:87:a6:2f:2c:63:2c:d9:d6:0a:ba:e4:
1c:d1:04:97:c4:35:b1:0a:dc:37:5c:88:25:50:87:
2d:6b:40:47:aa:51:32:d4:ec:f7:ae:05:73:7e:95:
f8:94:a2:93:8b:28:50:38:f3:06:7c:52:e6:39:9d:
01:d8:47:f5:69:44:f3:33:7c:42:65:64:04:83:54:
36:1c:b1:e1:09:69:e0:c7:8b:ce:70:d6:ef:2e:83:
bd:ec:9d:c2:a5:50:44:c6:d8:8e:12:f7:10:1d:56:
32:ed:e4:b6:60:75:47:49:60:b7:09:d4:c7:d8:c6:
25:56:52:5a:97:12:e1:1e:c2:f2:e7:24:6e:06:64:
08:aa:97:c9:e4:96:12:de:d4:ec:8c:01:c1:b1:7c:
e5:79:f0:f6:24:ea:97:bf:e1:dc:81:87:28:4f:2f:
89:28:09:43:a8:ec:03:ac:8d:50:79:0c:b5:03:23:
a6:91:66:1a:ad:3b:fc:97:37:8c:bc:ac:e2:27:02:
bb:46:fe:6e:d1:57:c1:f7:b2:a9:7d:3e:c6:53:52:
92:b8:1c:cf:33:e5:55:c7:ef:03:af:49:bf:1e:26:
14:c4:f7:5c:bb:a3:52:7e:ea:f4:85:32:ab:f6:a9:
60:3a:32:0e:91:1f:5e:81:02:17:0c:a1:e9:76:4d:
93:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C9:B5:8D:09:B8:D0:D7:EB:6A:5F:7B:CE:E2:2C:9D:1F:BC:1A:8E
X509v3 Authority Key Identifier:
keyid:0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:44:e5:15:2a:17:92:38:45:c6:1d:32:29:d8:a1:b5:34:64:
0d:52:d4:7a:36:dd:da:cc:48:5c:6d:13:49:25:8e:49:65:39:
c6:9d:4b:a8:db:9b:c6:e3:82:60:07:eb:0e:01:28:d9:1f:15:
55:ca:5b:eb:a8:aa:2c:c1:b4:05:2e:6b:fc:dd:aa:6a:63:8c:
72:fd:08:d6:6f:fc:68:4e:44:f4:a5:26:fa:e5:d0:12:5d:c1:
44:09:a8:a9:ed:b2:ba:6a:37:2e:3d:3c:1e:76:d8:b9:f6:97:
45:c9:84:df:55:52:c4:de:dc:e9:47:18:92:60:14:04:e9:a9:
03:db:1a:00:93:92:f8:45:46:f8:ad:80:20:28:8c:c7:17:f8:
79:0c:b5:db:9c:e8:05:4f:5a:59:58:48:59:11:60:ae:78:11:
50:4b:a4:be:ba:ff:59:80:1c:be:c0:5a:9c:8d:cc:60:a5:83:
78:08:3b:17:48:25:72:b1:2b:8c:89:2f:8b:2c:81:ab:11:cb:
12:06:2c:bd:28:b6:c1:cf:98:a3:63:d7:64:f6:bc:1c:62:bd:
8f:90:98:d1:9f:ea:9a:24:3a:78:4c:86:a1:08:a6:5a:d0:c9:
bc:f5:75:1e:9f:14:f2:01:e4:33:90:96:70:55:fd:94:8d:65:
2f:46:35:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:05:27 2026 by rpki-client