Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
File: aDei-kt4dzpmIA_qTFhQepLzEgM.mft (raw, json)
Hash identifier: TZaE/aUuWmH6haB3Mg7ABCvKpDNt2dilNnsgi7uCJuk=
Subject key identifier: 35:0A:31:35:CA:09:14:5C:F7:49:2D:BC:1E:53:2D:3F:90:17:91:CD
Authority key identifier: 68:37:A2:FA:4B:78:77:3A:66:20:0F:EA:4C:58:50:7A:92:F3:12:03
Certificate issuer: /CN=6837a2fa4b78773a66200fea4c58507a92f31203
Certificate serial: 019FA8623853F4D916B937A1AC485A3FAD60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
Manifest number: 0724
Signing time: Tue 28 Jul 2026 11:00:36 +0000
Manifest this update: Tue 28 Jul 2026 11:00:36 +0000
Manifest next update: Wed 29 Jul 2026 11:00:36 +0000
Files and hashes: 1: 4iNI26R-dGov0Tl2yDZjMNRLbfA.roa (hash: Mbs7tF0S261BkHnLQzWDasyVwFU+7wR+ArpU3P29zD8=)
2: aDei-kt4dzpmIA_qTFhQepLzEgM.crl (hash: Ws9+dZCw8FneM17g1a4eWGwNW9t/G0/DJJVKXwWJvKg=)
3: dE-JGprnxw6rfyqiHGwVstJ3B-s.roa (hash: P5+Wa8hBNG0OAzbkWpR9P6pZV6VqpgnBr0Mr7oMWvCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:38:53:f4:d9:16:b9:37:a1:ac:48:5a:3f:ad:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6837a2fa4b78773a66200fea4c58507a92f31203
Validity
Not Before: Jul 28 11:00:36 2026 GMT
Not After : Jul 29 11:00:36 2026 GMT
Subject: CN=350a3135ca09145cf7492dbc1e532d3f901791cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:20:04:cb:77:92:63:af:7c:96:7b:b2:0f:23:
d3:77:3f:27:e4:a4:41:fa:40:d7:2a:e0:fe:88:98:
99:ed:95:53:20:d1:c9:b5:11:6c:ca:4d:78:b0:88:
df:f5:46:ed:74:c4:2b:4e:05:e6:e7:7a:9f:fc:84:
ec:44:ee:a3:c6:2b:e0:4e:50:75:04:9a:1d:0c:9f:
d0:87:10:e9:b7:70:72:b0:2c:8f:74:56:cf:04:41:
07:36:6a:44:e7:81:d1:ed:46:30:93:ce:a2:b3:6a:
14:77:fc:57:0e:64:5d:ea:64:4c:e4:df:c0:f2:41:
41:95:0f:77:23:cf:a2:5e:37:db:4b:02:f6:54:76:
7b:ee:dc:74:f0:25:b2:82:f0:1a:56:ab:f9:2a:dc:
85:ad:45:f9:e2:7b:55:eb:5b:fd:44:ec:f4:93:84:
8c:40:86:ee:9d:a8:6f:da:7f:df:ee:8f:66:db:1f:
3e:09:c9:45:e7:18:b7:02:32:80:be:45:4c:c1:8c:
52:9d:a8:72:16:55:ca:6c:27:36:81:b7:85:cb:d7:
93:be:7f:56:d8:fb:23:ae:47:07:22:ca:48:ff:68:
f5:73:9c:7b:86:44:26:3f:d6:f8:0a:4d:93:9d:64:
e2:0f:50:b4:c7:4d:f8:27:c7:b5:2f:3a:d9:eb:dd:
c8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0A:31:35:CA:09:14:5C:F7:49:2D:BC:1E:53:2D:3F:90:17:91:CD
X509v3 Authority Key Identifier:
keyid:68:37:A2:FA:4B:78:77:3A:66:20:0F:EA:4C:58:50:7A:92:F3:12:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:08:70:4d:5a:82:a3:b6:eb:37:98:08:01:19:8f:0c:64:07:
aa:8c:d4:ae:35:e1:5c:26:52:c0:4b:eb:50:62:fd:7b:c6:d2:
09:6e:7b:78:cb:e8:4e:9d:0f:12:34:51:ac:62:54:fc:ed:03:
b9:4b:9f:6d:29:c6:29:a6:a1:60:98:d2:ac:5c:f1:1b:c9:8b:
67:87:12:c2:64:8a:8e:0c:b2:95:42:21:93:9a:11:83:e0:80:
44:ac:a2:c4:3c:34:f9:e0:48:36:59:2a:3d:08:d6:f9:29:bc:
d6:64:a0:6f:11:ca:bf:f0:7c:0e:a5:2f:14:b5:cf:ba:c4:55:
0f:53:14:1a:dc:37:6d:73:44:10:27:a9:2d:8a:2a:6e:ed:69:
b1:42:6e:10:3b:0e:cd:a5:d6:fb:ad:f7:3c:07:b8:d6:77:94:
ec:12:24:57:bf:fa:87:dd:4c:43:de:ad:71:62:86:a7:99:c9:
62:fd:4f:42:92:48:b1:d1:a2:c7:d9:a2:25:8d:85:60:bf:11:
56:af:e0:54:68:3b:2f:ea:21:ff:34:6c:d2:73:07:b4:f0:5e:
ff:3e:f3:a4:33:e6:88:8c:0d:dc:5a:5d:10:42:68:4f:32:4d:
12:61:db:8c:10:21:93:6c:ba:36:1d:ad:47:b0:e9:94:68:47:
ec:a6:48:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:17:42 2026 by rpki-client