Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
File: DXj57XHKOklrjVS5fxR5GNrbnFQ.mft (raw, json)
Hash identifier: iUKqN3VNqnej6fL2u0xpZ2Nq2F6StwOZhLWkzKR4eKk=
Subject key identifier: 8E:93:64:41:DA:74:CF:8B:70:8D:5C:5C:FA:E2:03:14:5A:FE:C0:77
Authority key identifier: 0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54
Certificate issuer: /CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54
Certificate serial: 019F935BC92B7882D77B57E9F3D54942F2CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
Manifest number: 055F
Signing time: Fri 24 Jul 2026 09:01:33 +0000
Manifest this update: Fri 24 Jul 2026 09:01:33 +0000
Manifest next update: Sat 25 Jul 2026 09:01:33 +0000
Files and hashes: 1: DXj57XHKOklrjVS5fxR5GNrbnFQ.crl (hash: t/AOPmydWzCAa40GuLKsnoqCM0HKhKy+eTa4meZJ1kk=)
2: WBE9XqEf7MFyalSUqu-vF0MYUwE.roa (hash: dqMxE1BdW8dFl07KbG3IeIB419vd91Jj1Eyr9ex+Uk0=)
3: WBO5Gvlksp1h2Nj2XcuQWgWe3aM.roa (hash: 21Q33n7ktv9Mw0KQGNV5mbgpviM4S02U0e8hX8gzv14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:c9:2b:78:82:d7:7b:57:e9:f3:d5:49:42:f2:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54
Validity
Not Before: Jul 24 09:01:33 2026 GMT
Not After : Jul 25 09:01:33 2026 GMT
Subject: CN=8e936441da74cf8b708d5c5cfae203145afec077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:20:7f:03:a4:32:b6:c8:07:19:5c:9d:91:73:
70:36:73:34:60:70:57:8d:5b:d9:cc:6e:77:af:07:
8c:47:af:73:de:e9:6a:db:27:5b:99:90:2e:21:a3:
d3:26:68:76:ec:fb:aa:dc:cc:5d:2e:65:ec:21:fb:
d4:22:8c:dc:85:fb:68:87:ad:23:98:84:13:05:9c:
d5:1a:b0:3a:44:0c:a9:20:2c:b6:29:04:f1:08:95:
88:28:d4:a7:f4:98:9d:c2:9f:69:24:75:e7:26:c0:
8e:ad:c4:fe:8b:81:f2:cc:48:87:f5:eb:3c:d5:e6:
89:1e:e7:0d:a3:ef:3a:68:5e:b4:e6:fe:6d:2e:ab:
92:0d:d8:98:52:a2:19:af:4f:64:4a:3b:58:0c:97:
4e:06:ea:92:b6:0a:e8:a5:23:63:2b:75:d2:95:70:
77:4f:00:29:db:29:26:3b:61:a8:d5:f0:75:56:c1:
9c:71:9b:23:13:6d:5c:c9:66:3b:b6:e9:cc:94:29:
f0:12:c6:c5:43:fd:46:6a:39:d5:06:38:4e:b7:ac:
68:06:cb:81:1d:10:bd:28:ea:9b:46:4b:15:18:e8:
2d:74:4e:00:ae:84:c8:5e:64:03:5e:a0:d6:da:4a:
9d:d2:bb:89:43:28:d0:92:a1:f0:df:04:03:83:b6:
0b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:93:64:41:DA:74:CF:8B:70:8D:5C:5C:FA:E2:03:14:5A:FE:C0:77
X509v3 Authority Key Identifier:
keyid:0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:09:19:95:16:fe:6c:1e:68:65:f6:9e:8a:d2:98:17:bf:ed:
c7:53:65:8d:bd:85:97:90:bc:bd:ac:09:9a:56:65:48:5d:4f:
60:46:00:de:47:22:79:19:bd:6c:c4:96:26:c7:c5:c2:54:ff:
f2:e4:45:6a:e0:6f:ba:0b:d9:71:eb:d4:8e:92:35:47:67:56:
a2:eb:c2:03:b8:34:01:51:8d:63:dc:59:f0:11:6e:ad:27:17:
ca:6c:91:c6:76:93:ea:d6:81:13:75:e0:8b:1a:b4:21:df:bc:
1f:07:c5:de:43:36:56:17:98:1d:4e:7b:8e:50:16:8c:da:aa:
b3:5a:76:23:d0:18:f7:62:1b:05:54:30:f2:b0:c9:e3:4f:9e:
34:0e:2f:49:aa:48:42:32:3a:a0:61:40:27:82:16:15:b7:26:
59:9d:d9:04:31:84:52:38:44:2a:b6:f7:16:35:6e:87:50:c6:
71:b7:52:9b:fd:ec:1e:a7:ac:f1:83:72:24:e7:c7:bb:3a:27:
94:f7:61:48:d9:5e:98:57:75:a1:f0:36:57:bf:56:bc:fa:bc:
70:5b:48:38:31:b2:d9:70:e1:84:43:8b:df:60:5b:98:99:8d:
40:14:aa:eb:24:34:ef:22:49:f6:52:6c:f3:80:d0:df:4c:7e:
83:cc:41:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:43:01 2026 by rpki-client