Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
File: 1DsiEwqpp3NCVHaewTv-Fx-h4os.mft (raw, json)
Hash identifier: zGlrsXcdG9wLCCwgKMcKAJgGapWzoFqWtOMdQVK7kOI=
Subject key identifier: 11:42:DF:42:64:08:C1:42:6F:CB:5A:DE:A1:CF:16:02:F3:7F:5A:3D
Authority key identifier: D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B
Certificate issuer: /CN=d43b22130aa9a7734254769ec13bfe171fa1e28b
Certificate serial: 019FA9E2DDFFE6406B3554B8C16C5024398E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
Manifest number: 0EE2
Signing time: Tue 28 Jul 2026 18:00:45 +0000
Manifest this update: Tue 28 Jul 2026 18:00:45 +0000
Manifest next update: Wed 29 Jul 2026 18:00:45 +0000
Files and hashes: 1: 1DsiEwqpp3NCVHaewTv-Fx-h4os.crl (hash: AYM4Scwe5tS20CQV2sdYijkplI8MFMpJwj16IYkD5QY=)
2: 3SGaIwhtWysQLWn0sQ-j25aYWzk.roa (hash: 6nFcHI9+JyUVi2ufE9HEixwgDofNaQHxTSquSnDsJV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:dd:ff:e6:40:6b:35:54:b8:c1:6c:50:24:39:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d43b22130aa9a7734254769ec13bfe171fa1e28b
Validity
Not Before: Jul 28 18:00:45 2026 GMT
Not After : Jul 29 18:00:45 2026 GMT
Subject: CN=1142df426408c1426fcb5adea1cf1602f37f5a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4a:5e:51:51:75:01:1b:29:7f:51:ae:f1:f2:
36:17:7e:e2:52:c3:c7:be:67:2b:2e:14:20:ea:3e:
ad:41:90:cc:cd:d5:b8:a8:4e:fe:fa:41:52:42:df:
00:b4:bc:a6:4f:8c:8f:f0:f0:68:98:c5:f8:b1:37:
b1:6a:fd:87:a1:58:e7:11:3a:d2:aa:40:06:89:2a:
76:d5:30:e0:2c:20:9e:ad:e5:ca:ed:6b:83:4a:83:
6c:56:77:4b:04:ea:ef:85:0e:30:63:27:fc:46:bd:
5d:64:4c:79:43:fe:22:39:f1:e5:78:21:6b:5f:8a:
dd:55:0a:40:32:4a:29:37:0d:e4:a5:62:8a:d1:df:
10:74:c2:cf:93:b8:63:74:ec:be:81:f8:75:7a:06:
4d:02:17:58:13:2a:25:d2:92:6c:39:19:68:13:da:
1e:93:52:75:f4:c7:98:6e:69:82:1a:c9:09:89:7b:
39:b0:79:bc:09:88:df:c0:ff:46:8b:c8:4c:ed:be:
d3:4d:03:d4:00:fb:c8:9c:5f:83:aa:00:68:b6:96:
13:4d:9f:c4:c2:3a:2a:ae:27:b7:1e:aa:46:de:4b:
59:ca:b7:43:97:5f:90:84:d0:67:0b:e5:c9:60:42:
de:27:df:c4:ff:fc:7c:de:12:c5:be:d0:b8:b7:31:
ff:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:42:DF:42:64:08:C1:42:6F:CB:5A:DE:A1:CF:16:02:F3:7F:5A:3D
X509v3 Authority Key Identifier:
keyid:D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:46:8f:78:e4:fb:91:94:62:3c:e9:b3:3d:32:ef:fc:59:37:
f6:98:fc:69:49:0f:f9:fd:03:8d:07:1c:8b:2f:bb:e6:77:33:
7b:c5:1f:6f:54:ee:85:6c:45:67:56:d6:f3:fa:11:f3:1e:35:
d5:fc:c4:fb:ae:a9:a7:9f:f0:83:f8:b8:e0:22:e4:38:c8:fa:
41:61:c0:6e:bc:b1:45:9b:7d:8e:2a:ca:2e:8e:fc:30:ef:66:
86:24:c6:2f:f9:83:31:76:30:6d:0c:7b:f6:e2:2a:a2:ad:3c:
e7:9e:77:32:58:df:64:3b:6f:ab:ec:f3:7a:67:84:46:cd:ab:
93:15:58:1a:91:33:09:15:2c:e6:60:6f:07:e7:8e:60:84:e9:
33:5f:19:48:db:f9:fc:3b:58:b8:34:9d:d5:7f:de:53:71:68:
8a:a4:c9:70:ad:cd:ca:fa:6d:37:e5:d9:19:a7:b4:1a:27:a7:
2e:be:bb:1c:c9:9b:9c:51:17:4d:07:f3:a7:dd:0b:29:21:c3:
16:12:f1:57:7f:11:5c:3c:44:3a:d7:fa:49:ed:78:26:e9:03:
c7:6d:c5:1d:37:c3:f4:1b:65:e4:09:65:1f:60:64:af:ef:91:
ea:b4:8a:a2:57:e3:ac:cb:30:1f:b0:1e:d2:da:8f:d4:9b:08:
ad:be:7a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:04 2026 by rpki-client