Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
File: 0627YSN4H_DjVBNEaseTHP9KSQ0.mft (raw, json)
Hash identifier: QDpjbpwHOn6xNsXnHZTJ6ECOI/xU4/cXSJZ2c8541SA=
Subject key identifier: 6E:DE:E0:7F:7D:17:CF:B2:71:66:38:9C:DE:24:5B:A5:3E:CC:2B:89
Authority key identifier: D3:AD:BB:61:23:78:1F:F0:E3:54:13:44:6A:C7:93:1C:FF:4A:49:0D
Certificate issuer: /CN=d3adbb6123781ff0e35413446ac7931cff4a490d
Certificate serial: 019E1D9098EC974FB5B4A5329A9CAA56C147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 19:01:15 +0000
Manifest this update: Tue 12 May 2026 19:01:15 +0000
Manifest next update: Wed 13 May 2026 19:01:15 +0000
Files and hashes: 1: 0627YSN4H_DjVBNEaseTHP9KSQ0.crl (hash: l8p1nbG7gjqoAuVFsH05TwE656wx4X+s7gQvDJdqPfg=)
2: uVyWlFLKciqrsAXXjZQjx39QcNU.roa (hash: jEDtg9ux39nelJUaz7u7+ZJxoa/PnUqwfRMuyqZC6j0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:98:ec:97:4f:b5:b4:a5:32:9a:9c:aa:56:c1:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3adbb6123781ff0e35413446ac7931cff4a490d
Validity
Not Before: May 12 19:01:15 2026 GMT
Not After : May 13 19:01:15 2026 GMT
Subject: CN=6edee07f7d17cfb27166389cde245ba53ecc2b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b6:81:e7:d1:b7:eb:8c:a9:30:7f:51:b6:37:
77:03:b3:1c:21:bd:40:07:61:67:dc:95:51:07:64:
e0:90:55:5e:2b:79:31:4a:a8:33:ef:9c:6b:8d:23:
90:50:23:49:b7:1d:ab:c4:64:cf:6e:47:c2:66:21:
a2:6e:43:7e:da:03:3c:ae:14:97:6a:ff:9f:11:ed:
3a:d1:1a:af:96:04:95:20:8d:04:70:26:31:70:b9:
69:43:f6:53:d9:70:b1:3e:9f:e0:97:90:c5:7c:fc:
06:8f:b5:c9:a5:d8:d2:aa:c4:0e:e6:6e:f8:b4:b8:
54:d2:b3:48:ae:a1:a0:83:5a:f8:54:8d:6f:82:bf:
a5:1f:ab:33:2c:78:af:85:bb:9a:1d:ad:16:58:b8:
f1:93:0c:4c:f3:8d:75:22:e4:f5:e9:0c:06:87:d0:
be:3e:92:6b:75:3a:29:e3:e0:cf:9d:b3:2b:f2:96:
c0:b0:9d:e7:5a:37:b9:7c:6a:35:5d:40:55:f0:18:
84:bc:02:d8:89:ac:25:ac:49:ec:0d:71:7a:23:ba:
36:35:eb:cf:e3:e3:23:fb:3f:e7:1a:f4:4e:bb:3d:
80:38:0a:5a:8b:a8:18:64:81:73:01:8f:16:2b:f1:
4b:19:5d:eb:aa:c8:e9:91:11:9d:02:ae:fe:4b:d9:
9e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DE:E0:7F:7D:17:CF:B2:71:66:38:9C:DE:24:5B:A5:3E:CC:2B:89
X509v3 Authority Key Identifier:
keyid:D3:AD:BB:61:23:78:1F:F0:E3:54:13:44:6A:C7:93:1C:FF:4A:49:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:14:9c:48:af:30:92:d2:9b:dd:ba:ed:79:0f:21:c6:b8:3a:
7b:02:c5:8c:dc:c2:ab:f6:83:49:1c:2d:72:73:17:a9:3a:19:
6b:09:b8:03:8e:35:4c:88:3d:c9:9e:ee:98:b2:7c:0c:49:a5:
f6:89:8b:77:4a:d8:34:a7:73:8a:b8:7c:e4:ec:c9:8e:e3:ca:
c5:0c:6e:05:a3:07:fd:38:7e:67:08:04:bd:d7:a0:0f:6a:7c:
c6:c9:3f:e7:56:b6:ec:f4:4f:ea:4a:66:dc:37:71:6e:85:38:
2f:44:4b:00:f8:34:2b:e8:d3:14:6a:77:d3:b9:46:41:1e:d6:
80:55:fe:e1:9f:97:af:67:c2:bc:53:64:f7:58:af:72:34:7a:
c3:2c:da:c9:7c:0d:ab:b7:de:01:5c:53:6c:88:b7:ba:bc:3d:
0e:93:7d:a0:d5:f0:ad:99:50:24:53:f2:dd:95:a5:6c:59:c4:
19:51:6e:6a:2a:52:7a:f2:9a:14:e5:3a:36:10:e2:a3:2f:b8:
77:69:13:47:9b:1d:26:6e:3e:8b:65:e9:7a:eb:ce:c2:bb:1d:
37:02:3b:a1:04:78:e6:6b:6f:a9:b9:93:fb:db:e0:58:44:89:
42:96:1e:95:c5:c7:bc:31:e7:7a:cb:8f:1d:21:49:77:3f:f6:
55:9b:8e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:08 2026 by rpki-client