Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
File: dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft (raw, json)
Hash identifier: g/z8m7LFNiCZ9UcFowepCCOYU8k7fjVpw81Mfd1RnGk=
Subject key identifier: D5:65:78:08:51:B5:34:2F:BA:F3:84:B1:2B:4A:57:21:20:AF:D4:A8
Authority key identifier: 74:A5:9B:7F:B4:E0:34:F6:77:75:F2:87:5E:FB:FC:9E:FF:24:7E:8E
Certificate issuer: /CN=74a59b7fb4e034f67775f2875efbfc9eff247e8e
Certificate serial: 019FABD177E108CA51064E4BDE41A4923308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
Manifest number: 12B2
Signing time: Wed 29 Jul 2026 03:00:59 +0000
Manifest this update: Wed 29 Jul 2026 03:00:59 +0000
Manifest next update: Thu 30 Jul 2026 03:00:59 +0000
Files and hashes: 1: dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl (hash: KjBQn14lzWp2Z1Mcj9FhG5mSeKJ2uT8JEvbCYglqbaE=)
2: uWzsh13780WlQ44M3rfglByUCB8.roa (hash: yGLdoL/Xc8KKRv7LLREr+ACqHv9uN9Icl3Uh1WiiuFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:77:e1:08:ca:51:06:4e:4b:de:41:a4:92:33:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a59b7fb4e034f67775f2875efbfc9eff247e8e
Validity
Not Before: Jul 29 03:00:59 2026 GMT
Not After : Jul 30 03:00:59 2026 GMT
Subject: CN=d565780851b5342fbaf384b12b4a572120afd4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:18:d0:da:76:62:76:7d:87:83:71:df:d7:38:
86:0e:7d:d5:4a:89:58:56:46:d8:4c:4d:9a:18:b3:
87:e4:4b:56:b3:55:6f:17:a5:6f:b1:2e:ee:1c:ed:
66:8d:96:b5:e1:d2:49:3f:5f:7a:17:77:a4:f1:28:
25:70:d1:4d:17:54:47:3f:74:12:f3:d6:0a:6b:30:
ba:d0:65:d0:ad:13:8c:45:db:58:64:04:e5:0f:df:
62:13:b1:5e:ce:f9:7b:d4:1e:9a:5f:ab:12:c0:e5:
88:06:2d:e4:4b:ec:c5:a6:e3:a0:f5:69:ac:6e:ba:
5c:d8:c0:25:a4:32:da:06:9f:89:c0:48:4a:78:20:
26:53:7f:5b:05:4a:af:fa:c3:26:3d:c1:54:fe:be:
68:29:1f:c4:67:cf:1a:e8:38:97:0b:5b:10:46:f8:
b3:d9:39:e0:86:7d:32:54:f8:fb:fd:3c:52:f4:98:
ba:9a:47:b1:29:85:2c:d4:9e:54:4b:2d:1a:b3:09:
41:e7:75:6f:ad:c5:43:ab:48:5a:44:7b:ef:57:18:
d6:47:99:32:86:9a:29:6a:92:96:05:59:2c:e0:5a:
8a:b2:fc:e8:e7:2a:5c:3d:9b:e3:05:0a:6a:fc:f7:
9e:45:a6:c7:20:ce:ac:24:35:6b:86:a6:52:99:0b:
d2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:65:78:08:51:B5:34:2F:BA:F3:84:B1:2B:4A:57:21:20:AF:D4:A8
X509v3 Authority Key Identifier:
keyid:74:A5:9B:7F:B4:E0:34:F6:77:75:F2:87:5E:FB:FC:9E:FF:24:7E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c0:11:62:67:b4:a7:b2:5b:7b:85:cf:98:53:f5:fd:b0:05:
3c:09:4a:1b:c2:34:ac:ca:3b:84:7b:b8:45:92:70:ff:c5:0d:
d9:a2:3e:4e:c5:4c:f9:51:5a:7a:09:ea:db:97:55:43:21:be:
65:0b:db:96:cc:50:4c:5a:c5:8a:00:8d:2d:5d:ce:2a:f3:ca:
b4:53:cc:4e:2c:b0:19:81:ef:5a:35:6d:26:33:55:b3:d4:9b:
b4:22:08:ad:6a:d2:35:82:c3:5c:83:3b:c4:c8:fb:f4:4a:a5:
6c:c5:ac:0a:77:da:c7:2b:0f:28:27:86:ab:6b:70:fb:b4:c5:
02:93:7b:0d:56:de:6f:22:fd:20:57:51:79:d8:f6:53:fd:c0:
44:e5:a4:33:f9:18:2f:e5:dd:1a:c8:cb:61:b6:57:31:04:f0:
ec:40:d1:e6:b3:af:a4:fb:ca:c1:11:f2:c3:62:e6:7f:4a:68:
1d:96:e7:40:1a:cb:52:65:23:9b:60:ea:3c:84:dd:b5:a9:8c:
e9:84:70:19:4d:23:01:49:ad:c7:4c:e1:f3:f5:45:f6:fe:cc:
eb:b8:da:2a:a9:f9:bd:af:78:49:3b:6c:d0:85:0b:71:fd:15:
76:4d:91:60:df:79:2d:a3:c2:94:bf:e8:68:df:33:33:45:fd:
6b:39:52:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+r0XfhCMpRBk5L3kGkkjMIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YTU5YjdmYjRlMDM0ZjY3Nzc1ZjI4NzVlZmJmYzllZmYy
NDdlOGUwHhcNMjYwNzI5MDMwMDU5WhcNMjYwNzMwMDMwMDU5WjAzMTEwLwYDVQQD
EyhkNTY1NzgwODUxYjUzNDJmYmFmMzg0YjEyYjRhNTcyMTIwYWZkNGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRjQ2nZidn2Hg3Hf1ziGDn3VSolY
VkbYTE2aGLOH5EtWs1VvF6VvsS7uHO1mjZa14dJJP196F3ek8SglcNFNF1RHP3QS
89YKazC60GXQrROMRdtYZATlD99iE7Fezvl71B6aX6sSwOWIBi3kS+zFpuOg9Wms
brpc2MAlpDLaBp+JwEhKeCAmU39bBUqv+sMmPcFU/r5oKR/EZ88a6DiXC1sQRviz
2Tnghn0yVPj7/TxS9Ji6mkexKYUs1J5USy0aswlB53VvrcVDq0haRHvvVxjWR5ky
hpopapKWBVks4FqKsvzo5ypcPZvjBQpq/PeeRabHIM6sJDVrhqZSmQvSlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNVleAhRtTQvuvOEsStKVyEgr9SoMB8GA1UdIwQY
MBaAFHSlm3+04DT2d3Xyh177/J7/JH6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEtXYmY3VGdOUFozZGZLSFh2djhudjhrZm80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8yYjE5NWUtMGFiYS00N2Q0LThlM2It
YWQzMmVmNDlkNDE5LzEvZEtXYmY3VGdOUFozZGZLSFh2djhudjhrZm80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8yYjE5NWUtMGFiYS00N2Q0LThlM2ItYWQzMmVmNDlkNDE5
LzEvZEtXYmY3VGdOUFozZGZLSFh2djhudjhrZm80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj8ARYme0
p7Jbe4XPmFP1/bAFPAlKG8I0rMo7hHu4RZJw/8UN2aI+TsVM+VFaegnq25dVQyG+
ZQvblsxQTFrFigCNLV3OKvPKtFPMTiywGYHvWjVtJjNVs9SbtCIIrWrSNYLDXIM7
xMj79EqlbMWsCnfaxysPKCeGq2tw+7TFApN7DVbebyL9IFdRedj2U/3AROWkM/kY
L+XdGsjLYbZXMQTw7EDR5rOvpPvKwRHyw2Lmf0poHZbnQBrLUmUjm2DqPITdtamM
6YRwGU0jAUmtx0zh8/VF9v7M67jaKqn5va94STts0IULcf0Vdk2RYN95LaPClL/o
aN8zM0X9azlSJA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:50:02 2026 by rpki-client