Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
File: 234XcKOATHS58Sy5tvpwOW3pMp8.mft (raw, json)
Hash identifier: +qPZvk0LTZiOjv53kaTzq6912RtaA5G59+wNGLiofHk=
Subject key identifier: 31:E7:C9:C3:55:C5:30:58:AC:79:71:D7:B4:C4:D7:A9:B5:46:C9:96
Authority key identifier: DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F
Certificate issuer: /CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f
Certificate serial: 019F91A362D4F5A3BAC7382A5B345FD18401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
Manifest number: 0728
Signing time: Fri 24 Jul 2026 01:00:31 +0000
Manifest this update: Fri 24 Jul 2026 01:00:31 +0000
Manifest next update: Sat 25 Jul 2026 01:00:31 +0000
Files and hashes: 1: 234XcKOATHS58Sy5tvpwOW3pMp8.crl (hash: VB4I0l5IfcNEJxbyvAcMytxkqKd9GdmmwPnefw5fmDs=)
2: NnFd_WEgwW5v_Q4XnzqgHc73AUU.roa (hash: qPnnpRuZWwT2D2tSbOOn+WEnPUGhmP0A1leKPzarn0s=)
3: aJGaWlz_CFVJ2Nm0gy1yUmZTtS0.roa (hash: vHZJo0+5vZ38Mb8o++2KXKDyHid1BpZNVh84OdWoQD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:62:d4:f5:a3:ba:c7:38:2a:5b:34:5f:d1:84:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f
Validity
Not Before: Jul 24 01:00:31 2026 GMT
Not After : Jul 25 01:00:31 2026 GMT
Subject: CN=31e7c9c355c53058ac7971d7b4c4d7a9b546c996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:94:5d:81:c7:61:63:53:c4:96:b0:62:84:b2:
5a:d6:b5:ba:a7:be:48:b6:3d:6f:b3:7c:2d:67:3d:
a3:62:8c:4e:52:1a:68:bc:e1:63:8b:6c:ab:d5:59:
f5:77:88:2f:ed:f3:62:07:29:60:9e:39:cd:0f:49:
8f:ac:cc:80:33:08:b7:14:8e:c8:42:5c:f0:db:cf:
48:58:d5:84:52:0c:ff:dc:99:61:c0:70:db:0d:27:
10:59:fd:30:47:79:44:ff:ba:07:63:eb:7c:58:d3:
0c:d0:a9:51:77:fc:c0:92:80:50:b6:52:f0:01:c7:
57:87:7d:29:7b:be:5d:b6:43:bd:30:93:de:27:9a:
a0:2f:e6:93:76:89:75:0e:35:21:94:b4:bc:15:f4:
2c:76:05:b9:d1:29:a8:d3:f4:84:d8:3f:6d:d9:c0:
e4:5e:99:e0:1c:88:0b:da:28:96:7d:bb:9e:d4:b6:
cd:a9:cb:6c:e7:ba:12:b1:fd:16:65:9a:b7:90:90:
5b:d1:06:b9:f0:83:98:71:b3:1c:83:14:ae:b1:d8:
21:9c:f8:ac:41:0e:fc:41:ed:8c:82:b9:1d:b3:ad:
1e:ec:b9:8a:83:17:4c:68:7c:03:9d:0c:8d:34:87:
98:ca:81:04:26:dd:0a:06:95:b1:83:e1:c8:ad:fa:
aa:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E7:C9:C3:55:C5:30:58:AC:79:71:D7:B4:C4:D7:A9:B5:46:C9:96
X509v3 Authority Key Identifier:
keyid:DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:47:40:ed:43:7b:f0:80:a7:4f:f5:5a:3a:62:b1:e0:76:58:
2b:b3:fa:52:f5:70:f4:18:3e:e1:4e:8e:e8:ad:be:f7:21:98:
70:42:60:c3:d5:a2:1d:76:d2:15:3f:ff:6c:4d:49:43:46:ec:
c8:e6:12:e6:4c:4d:41:62:59:1b:3e:1e:04:3c:58:78:9d:fe:
84:99:d0:a0:17:24:a8:fb:67:55:ac:3e:cc:fb:c0:87:a1:32:
1f:7f:d5:bc:37:95:0d:35:fa:0f:54:da:34:0b:f3:43:22:a5:
37:d8:1a:e9:00:d1:84:7f:33:cc:e9:ef:23:48:3e:c2:fd:4f:
df:0e:0c:39:a7:be:34:95:2f:15:f5:51:1e:e3:73:80:b5:1d:
eb:2e:c3:ab:94:3c:10:fb:04:54:c8:36:98:6d:d5:ce:f3:ae:
16:a0:b6:7d:3e:12:53:30:86:4a:31:df:5c:b4:95:42:4c:c9:
ef:9a:4d:34:8a:2d:6b:84:73:8e:f7:68:38:89:54:c8:ba:b7:
7f:55:a6:90:84:81:23:39:b2:96:87:f1:34:0d:f2:58:86:43:
d4:39:67:85:21:fd:dd:f1:03:f1:02:9b:53:91:85:0d:f7:02:
ed:47:48:7b:22:f3:64:8c:fe:3d:2a:b5:1e:bc:91:b7:e2:d1:
ca:8c:f5:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ro2LU9aO6xzgqWzRf0YQBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiN2UxNzcwYTM4MDRjNzRiOWYxMmNiOWI2ZmE3MDM5NmRl
OTMyOWYwHhcNMjYwNzI0MDEwMDMxWhcNMjYwNzI1MDEwMDMxWjAzMTEwLwYDVQQD
EygzMWU3YzljMzU1YzUzMDU4YWM3OTcxZDdiNGM0ZDdhOWI1NDZjOTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJRdgcdhY1PElrBihLJa1rW6p75I
tj1vs3wtZz2jYoxOUhpovOFji2yr1Vn1d4gv7fNiBylgnjnND0mPrMyAMwi3FI7I
Qlzw289IWNWEUgz/3JlhwHDbDScQWf0wR3lE/7oHY+t8WNMM0KlRd/zAkoBQtlLw
AcdXh30pe75dtkO9MJPeJ5qgL+aTdol1DjUhlLS8FfQsdgW50Smo0/SE2D9t2cDk
XpngHIgL2iiWfbue1LbNqcts57oSsf0WZZq3kJBb0Qa58IOYcbMcgxSusdghnPis
QQ78Qe2Mgrkds60e7LmKgxdMaHwDnQyNNIeYyoEEJt0KBpWxg+HIrfqqtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDHnycNVxTBYrHlx17TE16m1RsmWMB8GA1UdIwQY
MBaAFNt+F3CjgEx0ufEsubb6cDlt6TKfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjM0WGNLT0FUSFM1OFN5NXR2cHdPVzNwTXA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kMTEzMGUtZTA3Zi00OWJhLWJlZjQt
NmM3NjdiOTJjOWE1LzEvMjM0WGNLT0FUSFM1OFN5NXR2cHdPVzNwTXA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9kMTEzMGUtZTA3Zi00OWJhLWJlZjQtNmM3NjdiOTJjOWE1
LzEvMjM0WGNLT0FUSFM1OFN5NXR2cHdPVzNwTXA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd0dA7UN7
8ICnT/VaOmKx4HZYK7P6UvVw9Bg+4U6O6K2+9yGYcEJgw9WiHXbSFT//bE1JQ0bs
yOYS5kxNQWJZGz4eBDxYeJ3+hJnQoBckqPtnVaw+zPvAh6EyH3/VvDeVDTX6D1Ta
NAvzQyKlN9ga6QDRhH8zzOnvI0g+wv1P3w4MOae+NJUvFfVRHuNzgLUd6y7Dq5Q8
EPsEVMg2mG3VzvOuFqC2fT4SUzCGSjHfXLSVQkzJ75pNNIota4RzjvdoOIlUyLq3
f1WmkISBIzmylofxNA3yWIZD1DlnhSH93fED8QKbU5GFDfcC7UdIeyLzZIz+PSq1
HryRt+LRyoz1sg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:04:19 2026 by rpki-client