Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
File: 23uiovC_o6dvXJkaR82YaMbR674.mft (raw, json)
Hash identifier: n5i4MIONFXQS41AnrM0O1TDeUgubxu7z3qejYsZ2XuU=
Subject key identifier: 47:CA:4A:82:B1:B0:E7:C5:E2:65:A5:E3:E6:15:9D:F9:92:5B:A1:2B
Authority key identifier: DB:7B:A2:A2:F0:BF:A3:A7:6F:5C:99:1A:47:CD:98:68:C6:D1:EB:BE
Certificate issuer: /CN=db7ba2a2f0bfa3a76f5c991a47cd9868c6d1ebbe
Certificate serial: 019FA9AC0DC4324999731E9BC03525E5C080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
Manifest number: 1685
Signing time: Tue 28 Jul 2026 17:00:52 +0000
Manifest this update: Tue 28 Jul 2026 17:00:52 +0000
Manifest next update: Wed 29 Jul 2026 17:00:52 +0000
Files and hashes: 1: 23uiovC_o6dvXJkaR82YaMbR674.crl (hash: +2Bf3Yg7DkqOJTCmy/5VbSga92cAofESEEKbf4K/mzw=)
2: NRwgJUwXk3BWkcpGjCMp97lO_U4.roa (hash: cqI/kILVJcAeJ0Tz95y2zzvYBTUTuf7X5Zw7I2eBtl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:0d:c4:32:49:99:73:1e:9b:c0:35:25:e5:c0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db7ba2a2f0bfa3a76f5c991a47cd9868c6d1ebbe
Validity
Not Before: Jul 28 17:00:52 2026 GMT
Not After : Jul 29 17:00:52 2026 GMT
Subject: CN=47ca4a82b1b0e7c5e265a5e3e6159df9925ba12b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6c:65:cd:84:3a:a5:65:5d:cd:f4:43:c6:62:
8e:96:50:a6:cd:ba:fd:07:6e:53:2e:fb:82:1d:da:
8b:6d:2d:51:ff:2a:c5:ca:6e:15:27:75:63:0b:29:
f7:ca:67:29:e3:f1:c1:ba:59:7a:ba:4f:ad:39:a6:
ec:16:48:b4:24:57:1d:e7:34:05:b5:87:df:c0:5a:
88:8d:cf:65:72:ea:a2:26:69:b7:4e:99:03:37:d9:
cf:00:a9:29:bf:39:8c:a1:b9:47:5b:b0:9a:63:43:
a3:c2:2e:e6:09:6b:6f:8e:df:13:10:f2:0f:7a:1c:
e3:9e:b6:b5:9e:4d:00:ca:53:b9:14:3b:3c:12:3e:
bf:de:42:13:3c:93:58:e0:b2:61:e8:f9:b6:ad:be:
63:18:0f:17:96:7e:19:76:fb:7d:f9:c0:5b:e6:50:
3a:98:bc:3d:49:60:1d:d2:80:f2:c3:ad:5a:fc:73:
16:86:cf:c7:71:9b:20:26:51:31:c1:8e:3a:fa:88:
c5:b7:60:2c:a8:e1:4b:a6:fb:1f:97:65:77:68:da:
1f:95:d3:ca:60:32:2e:71:bd:d2:d9:06:3a:f7:46:
7e:67:d2:26:de:e8:47:10:20:40:49:02:c3:54:50:
6a:e7:3b:b9:19:8a:0f:8d:ce:aa:92:2f:ec:bc:2a:
3a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:CA:4A:82:B1:B0:E7:C5:E2:65:A5:E3:E6:15:9D:F9:92:5B:A1:2B
X509v3 Authority Key Identifier:
keyid:DB:7B:A2:A2:F0:BF:A3:A7:6F:5C:99:1A:47:CD:98:68:C6:D1:EB:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:28:b3:5e:60:2c:0e:d2:53:3d:06:a5:ad:36:4d:59:f6:e1:
d4:c9:08:72:cd:f3:e9:35:34:ac:2d:3a:1c:a4:be:f5:6f:48:
b1:25:0b:b9:e2:d9:12:56:1e:72:15:50:47:09:ad:35:64:69:
be:18:75:dd:74:ea:eb:1b:08:1c:9d:dd:45:b0:e2:8c:11:ad:
4c:3e:a0:ad:73:df:17:9f:d3:99:6d:2b:87:dd:1d:c9:63:b1:
a9:f2:58:5d:b5:b3:5f:ba:7d:ab:14:72:e5:c5:ee:61:76:f0:
b0:29:d9:39:f6:20:41:c1:8c:92:10:55:19:e5:52:8d:30:0e:
f3:9d:2c:34:dc:58:2f:5e:be:5d:d8:a7:10:ca:33:32:8a:90:
74:56:6a:97:ef:b9:12:20:fc:46:6e:66:f6:78:c5:2b:c5:85:
d8:af:51:8d:f5:d0:24:48:9a:ae:f0:00:af:c7:45:92:c2:7c:
0d:87:24:cf:3c:34:b8:d8:fa:ca:fa:ac:8b:be:60:dd:90:b7:
ec:00:f6:84:bd:47:80:a9:13:12:f7:cc:76:5a:43:8e:06:44:
0a:e7:be:5f:1b:23:21:1a:49:f1:e9:aa:82:55:6a:df:58:76:
07:3f:d6:84:22:51:65:bd:04:5c:ce:7d:74:80:9a:cd:3a:bb:
49:c9:62:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:27:39 2026 by rpki-client