Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
File: 0SFb_EiHbDZRg1bv1uKAJVod7jw.mft (raw, json)
Hash identifier: QR1Za0sVn2iGzrDFsm0GMf42KW1L+x3B7j60sD+qKUA=
Subject key identifier: 12:EE:27:2B:D8:AF:98:C5:4F:1D:5B:34:FE:42:43:06:C9:3F:20:79
Authority key identifier: D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C
Certificate issuer: /CN=d1215bfc48876c36518356efd6e280255a1dee3c
Certificate serial: 019FA907828D0943E4A9F9A4DCF9E00146E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
Manifest number: 114E
Signing time: Tue 28 Jul 2026 14:01:09 +0000
Manifest this update: Tue 28 Jul 2026 14:01:09 +0000
Manifest next update: Wed 29 Jul 2026 14:01:09 +0000
Files and hashes: 1: 0SFb_EiHbDZRg1bv1uKAJVod7jw.crl (hash: WR87JDlnv+8UnyidNhndFOXSMP5OOyjJlFdkkscvUVg=)
2: V85y9LeDqS5T_7Jp3kZ3KBVJA_Q.roa (hash: dqwbGll0ZQp3qCkA8FJVoE9Przjq1Z276l8w8WiwoPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:82:8d:09:43:e4:a9:f9:a4:dc:f9:e0:01:46:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1215bfc48876c36518356efd6e280255a1dee3c
Validity
Not Before: Jul 28 14:01:09 2026 GMT
Not After : Jul 29 14:01:09 2026 GMT
Subject: CN=12ee272bd8af98c54f1d5b34fe424306c93f2079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fa:ef:89:0a:7c:c9:54:ef:d1:6d:db:35:e8:
f3:ca:3a:45:99:e7:28:57:44:e7:c8:b0:d8:f2:5a:
bd:64:44:5c:a3:51:8e:3d:4b:bf:a7:43:fe:92:ec:
a8:26:ed:1e:15:ca:06:b6:51:ad:f4:0f:f9:27:f2:
e2:dd:0e:3d:67:3e:cf:a9:cd:b9:22:84:26:9c:b1:
bd:a8:95:cf:30:62:d6:a0:4d:8f:16:10:9b:dd:e8:
8d:6e:40:bd:30:f4:6f:11:6c:28:c0:71:4c:94:27:
04:bc:2a:d6:da:e8:71:e3:10:22:4d:fa:66:da:b6:
a4:5d:80:4a:c7:5d:d8:b9:ae:b7:96:16:63:80:73:
3e:46:ca:6b:6a:ca:21:e1:c8:78:82:ec:a6:7e:f1:
fa:92:e9:0b:b5:c1:f7:4f:c5:60:17:96:73:cf:ab:
65:83:14:07:ce:51:38:b9:da:5d:b4:70:d5:70:b8:
08:74:df:01:d6:84:67:21:3b:53:46:86:7e:0e:f7:
44:87:15:c3:3a:d1:90:ec:e8:64:d7:3e:34:20:b9:
4f:24:32:0f:d3:83:15:5f:57:7e:62:8a:63:ad:d5:
3a:80:e6:58:6c:a1:43:b7:98:0c:a0:7a:e1:c4:f3:
e0:a6:1a:7b:16:7b:bc:0e:68:f6:1c:e6:24:71:d9:
f1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EE:27:2B:D8:AF:98:C5:4F:1D:5B:34:FE:42:43:06:C9:3F:20:79
X509v3 Authority Key Identifier:
keyid:D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:19:4c:40:c5:19:d5:ae:04:07:1b:7d:8d:df:3e:25:ec:a6:
db:2e:b1:bb:b9:7a:e6:5c:3b:d9:30:b5:86:98:4d:1a:e7:0c:
52:de:00:b1:76:3d:83:d3:75:f9:54:3b:4c:b0:30:cd:67:33:
8a:00:be:e2:3b:f5:ff:a9:05:47:d8:c1:e6:82:38:17:e9:04:
cc:70:65:e1:dc:60:3b:80:e5:5a:d6:29:d6:2b:a5:f4:8f:66:
27:45:34:ee:36:eb:10:f0:23:e2:73:eb:fd:a4:1f:f2:00:95:
66:19:a5:9a:5d:89:a7:ec:34:28:75:22:69:b4:77:3f:9a:ef:
99:09:5a:6a:ba:37:48:5e:f3:6b:e2:de:61:27:ee:24:b0:86:
e0:0b:31:af:1e:29:bb:7d:b0:29:3b:76:65:74:d5:03:83:42:
6f:c2:1e:59:c4:c6:62:3b:ab:7f:28:1f:ca:fa:ef:eb:dc:39:
e3:54:3a:db:58:a9:9d:48:a3:fa:47:12:32:c0:b2:c5:a8:ff:
6d:88:1a:32:7d:1b:3c:77:e5:2a:ef:c2:7d:8b:ee:91:fe:cc:
d9:35:e6:e6:eb:40:32:98:63:73:0d:dc:2f:98:57:f6:b6:7a:
3c:21:18:34:3f:cc:72:e2:6b:44:4d:a2:3c:71:13:32:24:67:
92:3a:1a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:13:31 2026 by rpki-client