
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/c_-bDajLqCMr_Xx3EPBFN2eInp0.mft
File: c_-bDajLqCMr_Xx3EPBFN2eInp0.mft (raw, json)
Hash identifier: dgREf5ju45H4pJR5ogxnDs0xwuar/dN2FolE7o8ObLA=
Subject key identifier: FF:14:3B:78:84:B9:00:1A:76:AF:F5:BE:50:13:BE:99:4A:79:C6:F8
Authority key identifier: 73:FF:9B:0D:A8:CB:A8:23:2B:FD:7C:77:10:F0:45:37:67:88:9E:9D
Certificate issuer: /CN=73ff9b0da8cba8232bfd7c7710f0453767889e9d
Certificate serial: 019FAC75DE21EB02098D4B65C12D4C7913D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_-bDajLqCMr_Xx3EPBFN2eInp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/c_-bDajLqCMr_Xx3EPBFN2eInp0.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:33 +0000
Manifest this update: Wed 29 Jul 2026 06:00:33 +0000
Manifest next update: Thu 30 Jul 2026 06:00:33 +0000
Files and hashes: 1: c_-bDajLqCMr_Xx3EPBFN2eInp0.crl (hash: f5qYtns/V2xm9saUHISkHwxH1Aq/BoF8qo8+YcR08fw=)
2: vTX4iIqH_CJW3BVeMGACQiGfVBw.roa (hash: B07mgx6eQq4EygaQx3Hss2ApntF23K/SLlLex5sG5XA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/c_-bDajLqCMr_Xx3EPBFN2eInp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/c_-bDajLqCMr_Xx3EPBFN2eInp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_-bDajLqCMr_Xx3EPBFN2eInp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:de:21:eb:02:09:8d:4b:65:c1:2d:4c:79:13:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73ff9b0da8cba8232bfd7c7710f0453767889e9d
Validity
Not Before: Jul 29 06:00:33 2026 GMT
Not After : Jul 30 06:00:33 2026 GMT
Subject: CN=ff143b7884b9001a76aff5be5013be994a79c6f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c9:a0:f1:4f:8b:a8:d3:3b:d6:5f:57:c9:48:
14:60:9d:3f:dc:00:bb:14:eb:60:28:c5:5b:e3:6d:
b3:48:12:37:a1:12:70:63:05:81:6f:e6:9c:ad:d2:
9d:fa:5f:2b:18:09:3b:eb:7a:0a:90:65:ea:ef:d8:
8b:76:a5:1f:18:8b:44:ef:f1:43:dc:e0:5a:03:5e:
33:f8:ad:db:ed:53:63:ae:04:58:21:48:f2:4a:21:
ac:4f:14:3a:f1:8a:13:c1:b9:63:bf:12:d4:1e:64:
44:a7:87:88:4d:11:73:b6:e2:e6:9e:59:df:a8:98:
c7:4e:e8:c4:c1:24:09:f9:10:ca:a5:45:34:85:9d:
8d:11:ce:dc:f5:63:da:20:e5:da:4a:af:7e:3b:da:
f6:17:f7:6c:ca:72:9e:1c:82:84:f2:35:60:3f:4d:
04:12:ab:2e:56:fc:10:a8:02:f4:10:08:ad:de:42:
bc:0d:3c:66:8f:ef:ab:6d:b6:b1:48:28:b0:42:a8:
ca:ff:46:6d:18:da:79:68:35:5b:c7:94:e5:87:08:
5c:05:06:25:a3:6d:0f:eb:c5:52:b1:c8:ec:99:b2:
e6:d7:42:98:c0:a5:30:86:49:b6:3a:9d:63:26:6a:
97:dd:c3:20:36:6f:5f:5f:5b:d0:b4:7d:ef:45:f4:
8e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:14:3B:78:84:B9:00:1A:76:AF:F5:BE:50:13:BE:99:4A:79:C6:F8
X509v3 Authority Key Identifier:
keyid:73:FF:9B:0D:A8:CB:A8:23:2B:FD:7C:77:10:F0:45:37:67:88:9E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_-bDajLqCMr_Xx3EPBFN2eInp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/c_-bDajLqCMr_Xx3EPBFN2eInp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/c_-bDajLqCMr_Xx3EPBFN2eInp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:0b:02:fe:d2:20:b6:f4:64:fd:e1:01:09:0d:a0:e2:1a:62:
21:77:6f:02:4a:ed:78:bc:0a:f5:c5:25:c5:cc:9a:90:c9:f1:
a4:cd:e3:78:ce:93:c9:f5:93:c0:44:fc:b2:2c:4f:45:19:a6:
32:4d:ba:0c:0b:e8:e1:80:32:98:d0:53:6d:aa:74:32:50:be:
0f:1e:d0:2d:da:e9:6d:4b:9d:83:5c:53:0d:5e:9f:0a:77:6b:
47:12:68:59:47:8f:6a:4d:fa:31:86:88:ca:e3:e5:9a:b1:bd:
d9:a4:08:c7:7c:a9:54:f2:3e:91:47:ae:77:8e:53:ed:bd:10:
64:5b:11:51:2a:2e:ff:a6:cc:fe:82:fa:50:b3:ce:2b:f9:bb:
2a:2d:3a:ad:68:9b:23:95:74:42:c8:01:fd:12:19:ad:87:79:
4a:55:25:9d:c4:88:93:b7:d3:ff:8f:eb:40:8b:c3:20:be:fc:
57:8c:81:b8:87:05:2a:53:d1:b3:07:a4:5b:9e:b0:ab:67:42:
59:08:e1:54:9e:9b:be:f8:16:e5:8d:11:2b:e7:39:f2:4f:8d:
34:b4:23:c3:bf:30:2d:15:e3:23:d4:9b:48:b1:63:76:1e:8e:
fe:88:94:20:e4:35:90:c5:b6:4e:c1:26:b2:72:7e:12:de:8f:
03:d7:d2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:19:27 2026 by rpki-client