Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
File: 234XcKOATHS58Sy5tvpwOW3pMp8.mft (raw, json)
Hash identifier: 7stPssUcM5HcLC2IDGUlR9/0y+w75x8g93OSbrNeZ3Y=
Subject key identifier: F4:7F:66:B2:CB:9A:F2:2A:87:68:24:66:98:83:F1:DB:AA:D6:80:65
Authority key identifier: DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F
Certificate issuer: /CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f
Certificate serial: 019E1CEBA5441898D49961992DD1D5FDFB0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
Manifest number: 0667
Signing time: Tue 12 May 2026 16:01:05 +0000
Manifest this update: Tue 12 May 2026 16:01:05 +0000
Manifest next update: Wed 13 May 2026 16:01:05 +0000
Files and hashes: 1: 234XcKOATHS58Sy5tvpwOW3pMp8.crl (hash: syxRdJ1CRKK3U34REKiXhZygyG1tlq7mSYrP1lQ/MP8=)
2: NnFd_WEgwW5v_Q4XnzqgHc73AUU.roa (hash: qPnnpRuZWwT2D2tSbOOn+WEnPUGhmP0A1leKPzarn0s=)
3: aJGaWlz_CFVJ2Nm0gy1yUmZTtS0.roa (hash: vHZJo0+5vZ38Mb8o++2KXKDyHid1BpZNVh84OdWoQD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:a5:44:18:98:d4:99:61:99:2d:d1:d5:fd:fb:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f
Validity
Not Before: May 12 16:01:05 2026 GMT
Not After : May 13 16:01:05 2026 GMT
Subject: CN=f47f66b2cb9af22a876824669883f1dbaad68065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ca:b0:42:5b:60:59:c6:71:f8:0f:6b:3a:1d:
ad:cd:6e:11:89:f3:27:7f:cd:e0:c7:3d:61:f3:74:
66:8f:22:a9:f0:69:71:f2:99:ba:0e:b9:3d:33:d7:
63:79:65:46:51:65:a3:bc:e0:71:c5:6a:44:73:b7:
31:65:49:a2:b0:19:3e:81:47:61:73:59:19:84:e6:
10:85:18:de:f4:51:f8:9a:d2:60:24:8c:18:48:ce:
93:12:64:0d:83:e5:3c:5e:2b:fe:12:c2:38:26:ba:
72:95:56:41:fa:0f:83:fb:7c:0c:54:32:84:6a:6a:
ea:19:83:19:94:1a:a4:8c:b7:41:f5:fe:cb:a1:76:
71:df:17:ce:9f:a0:a7:a2:83:84:7e:df:9c:25:1a:
7a:1d:42:36:01:b3:bd:41:80:ca:0d:22:13:17:d8:
b3:e3:df:de:51:33:0f:8f:55:b5:f2:4a:5f:ff:a3:
5f:dc:78:ed:d2:f9:ac:e5:04:6a:11:ce:a0:df:04:
4a:47:fe:01:28:0c:37:a1:32:c3:fc:c6:96:d4:4b:
7b:6a:86:dc:40:f2:ab:2d:8f:e3:08:d7:92:1e:86:
6d:cf:c2:c0:3a:d1:ab:2b:44:73:29:45:09:5f:04:
6c:47:17:18:bd:66:65:2e:67:1d:c8:bf:b1:5f:99:
a3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7F:66:B2:CB:9A:F2:2A:87:68:24:66:98:83:F1:DB:AA:D6:80:65
X509v3 Authority Key Identifier:
keyid:DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:45:69:4a:b9:8a:c9:76:f4:40:4b:3f:b7:13:d0:d6:de:86:
85:6f:d0:e6:ec:b9:88:c3:92:6f:d2:83:cd:6e:0f:db:0b:d3:
f0:2e:8f:0a:fe:04:fa:5d:d9:3e:56:03:d4:45:f9:a0:84:6c:
23:53:77:c6:61:26:94:3c:fb:b3:99:c3:35:b3:e1:24:7c:bb:
51:b0:bf:69:1f:fc:af:fe:b5:a9:85:a5:b7:38:5e:90:8b:28:
61:a0:e8:f4:46:a9:a5:fe:1b:14:3e:6e:0b:a8:3b:71:5e:0d:
42:fc:cc:1a:9b:4f:de:30:fe:48:65:ce:99:47:58:c0:92:e5:
d1:94:97:9f:1e:a4:31:c7:b9:03:84:c9:c3:1b:f6:36:44:d1:
c6:6d:84:c0:3f:3b:a9:f0:c8:8a:07:c7:4c:ea:69:25:07:00:
d5:0b:f4:fb:a1:b2:24:55:44:8e:91:65:d9:69:77:33:28:c9:
dc:db:7e:75:24:56:c0:2c:15:6b:f2:73:fa:11:29:80:fd:6d:
1e:f3:ad:d8:fd:22:e3:80:30:71:13:4d:4a:d0:b4:f3:2a:91:
21:a2:34:ab:7f:20:d0:92:e9:43:5f:9d:a8:e0:56:f5:db:b8:
61:82:aa:11:80:3e:ff:54:a7:84:60:29:bc:6a:09:8b:4e:90:
63:a7:e2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:54:36 2026 by rpki-client