Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
File: DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft (raw, json)
Hash identifier: Fba/65dnzb/QsGiDOghfvfRJq7kLAVfO6gMBgvIcm+0=
Subject key identifier: 3A:6D:70:3E:02:83:FE:BA:8E:F7:81:FD:A8:8E:10:F5:C8:AB:B9:C8
Authority key identifier: 0D:78:4B:D9:6A:44:BC:36:1D:13:34:4D:54:C8:BC:51:FF:67:A8:02
Certificate issuer: /CN=0d784bd96a44bc361d13344d54c8bc51ff67a802
Certificate serial: 019FAA506ADDCB8E2304DAF9C35E17739887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
Manifest number: 1137
Signing time: Tue 28 Jul 2026 20:00:24 +0000
Manifest this update: Tue 28 Jul 2026 20:00:24 +0000
Manifest next update: Wed 29 Jul 2026 20:00:24 +0000
Files and hashes: 1: DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl (hash: s59GhO2pGq6kkAaVD3BSQvDCH8B5iFcaqtABscaOMAs=)
2: x5ebKc9_3qA7pEOC0_BnOS1B8oI.roa (hash: AqP1AEgenjD2KrPY+QLH5krFzTJA90JozOTpwzG6a5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:6a:dd:cb:8e:23:04:da:f9:c3:5e:17:73:98:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d784bd96a44bc361d13344d54c8bc51ff67a802
Validity
Not Before: Jul 28 20:00:24 2026 GMT
Not After : Jul 29 20:00:24 2026 GMT
Subject: CN=3a6d703e0283feba8ef781fda88e10f5c8abb9c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8b:c8:53:19:e3:c4:6a:c6:d7:9b:65:be:5a:
09:54:87:ea:5c:3f:63:c2:8d:e5:a1:1f:d1:79:b2:
c8:0f:ad:ec:71:8b:15:4f:a6:1c:39:53:a2:30:75:
6a:50:39:f5:0c:3a:70:20:ab:8e:79:49:4f:a1:32:
04:c2:02:cc:a1:ac:fb:76:7a:cf:e7:64:d3:d7:81:
38:df:d2:5a:88:32:a4:a5:45:a5:e2:87:9f:b6:4b:
f5:b7:2b:5f:48:b3:23:31:a8:20:e3:34:00:9a:6e:
ce:a0:9f:2d:a5:cf:55:f0:a2:e5:7a:81:b1:d7:07:
2e:67:cb:15:bd:bb:eb:48:37:56:fa:bf:72:2b:c1:
99:ef:76:71:20:9c:64:03:9f:7c:c4:af:98:1b:33:
e5:b9:14:c0:90:8e:60:ff:93:09:cd:1d:e6:a6:45:
df:37:9b:fd:b5:a6:77:08:4a:e7:c2:99:10:30:2f:
c7:23:b2:7a:92:9f:91:4c:24:4d:3f:4d:36:ff:7a:
4c:7d:b4:fc:ab:01:8d:15:87:f5:22:c2:24:8e:29:
4c:31:0e:f6:6a:02:2f:35:13:79:2a:18:0e:8a:7b:
ef:bf:0a:96:5e:97:93:9b:80:c9:1f:25:4c:03:63:
f5:08:77:03:af:c1:e3:3b:5c:92:f9:24:04:f0:0c:
a8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6D:70:3E:02:83:FE:BA:8E:F7:81:FD:A8:8E:10:F5:C8:AB:B9:C8
X509v3 Authority Key Identifier:
keyid:0D:78:4B:D9:6A:44:BC:36:1D:13:34:4D:54:C8:BC:51:FF:67:A8:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b8:15:fc:38:d8:cc:e1:ee:03:27:51:4b:eb:6d:ad:84:7c:
0f:64:67:32:73:b7:3c:07:13:4e:e0:e3:fd:f1:eb:37:03:2e:
fb:b8:05:60:a3:8e:4b:23:a5:7f:45:55:58:46:8b:36:06:43:
ff:8f:e5:b5:77:4c:36:ba:85:b5:89:16:a1:9e:f5:85:ac:ca:
fa:8a:1f:1e:f8:af:3e:9a:0f:9d:07:29:c5:4c:90:77:ca:da:
3b:0f:73:06:01:bb:9e:47:e3:2a:6f:37:83:e6:3d:6a:0b:da:
17:f9:52:fb:d1:a4:1a:1c:a0:22:21:7e:12:5b:98:6c:af:6f:
25:85:f3:01:5a:f3:82:f0:d9:31:0a:82:9d:5f:80:a8:c6:32:
27:82:ee:bf:e0:de:b9:0d:64:6a:0f:bd:c4:8b:b9:7a:11:e9:
df:14:9e:15:9b:fa:b4:63:39:d7:76:25:04:56:66:eb:4b:a3:
54:7c:71:34:a4:6b:6f:be:6a:d6:63:42:c2:44:fa:bf:3a:fd:
19:06:19:fd:6b:99:2d:6d:da:68:fe:65:68:55:a0:a0:9d:71:
ea:4d:43:99:ae:f3:fa:d4:ce:69:9f:0f:87:80:25:4f:05:7c:
cc:34:f8:3e:da:86:16:b6:f4:1e:18:55:7a:69:91:f8:cb:97:
39:f5:26:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:54:36 2026 by rpki-client