Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft
File: 0krezYS7F0i9NbmezqRncuAeyTU.mft (raw, json)
Hash identifier: TdhoduyOdx9eJLLUX9felqJ5n5GeiJB6xl3T6qhZLjU=
Subject key identifier: 16:77:16:EC:7C:9E:B5:B2:08:47:7C:4A:A4:AA:5E:A4:8D:E3:23:1F
Authority key identifier: D2:4A:DE:CD:84:BB:17:48:BD:35:B9:9E:CE:A4:67:72:E0:1E:C9:35
Certificate issuer: /CN=d24adecd84bb1748bd35b99ecea46772e01ec935
Certificate serial: 019FA82BFBBDC7A71E296AA48E51D3F95F10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft
Manifest number: 19D6
Signing time: Tue 28 Jul 2026 10:01:22 +0000
Manifest this update: Tue 28 Jul 2026 10:01:22 +0000
Manifest next update: Wed 29 Jul 2026 10:01:22 +0000
Files and hashes: 1: 0krezYS7F0i9NbmezqRncuAeyTU.crl (hash: 0UoxDd895LcQeoD93bfD22urGDXGITgqq8+uGu8Assc=)
2: q2viQQxnb5hv9cHSi6k5fpuWvhk.roa (hash: moDWR3w9AS8vgQ6/NXNmyaldf5yTsoXdPMVWWQQURXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:fb:bd:c7:a7:1e:29:6a:a4:8e:51:d3:f9:5f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24adecd84bb1748bd35b99ecea46772e01ec935
Validity
Not Before: Jul 28 10:01:22 2026 GMT
Not After : Jul 29 10:01:22 2026 GMT
Subject: CN=167716ec7c9eb5b208477c4aa4aa5ea48de3231f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e1:f4:9d:c3:ce:f6:8a:62:d6:1a:7e:27:d2:
55:08:6d:dc:af:84:ab:e5:d4:7c:05:97:0c:7c:53:
f2:b0:a6:34:a0:cf:5f:81:23:d3:4d:1c:ab:66:6a:
df:57:98:60:3e:be:a5:eb:df:44:47:c1:04:22:2e:
7b:5a:b4:0e:bf:87:b0:2d:e4:96:85:6f:c4:2c:6e:
7d:35:ea:9a:40:41:eb:b6:67:ac:ba:1a:a0:b9:f6:
b3:7d:93:56:92:aa:d9:10:e2:8c:4a:3e:42:d1:2b:
c6:d6:72:98:65:96:98:59:34:6f:03:35:d8:c8:52:
0d:50:8e:1e:72:10:72:01:c4:6d:5b:97:37:d4:0a:
7c:22:eb:25:61:aa:f7:a2:9b:e8:a4:44:0f:eb:a6:
50:0c:9f:c7:33:cf:f3:09:2d:97:b3:74:6c:de:7d:
db:3f:5d:0f:04:54:20:c4:4a:c1:2b:0e:92:18:0f:
a7:54:4b:e1:60:30:e9:eb:d8:03:5c:5c:c0:d4:11:
96:83:67:bd:57:eb:f7:9c:d6:81:b2:20:b6:f3:c7:
06:30:85:ba:d6:13:4c:00:5b:b2:b3:dc:1e:f5:7f:
dc:8c:76:e7:0a:8c:10:ca:5a:3a:7b:9c:d8:8f:97:
07:b3:f2:5f:40:4e:30:40:e8:2b:c8:91:12:f8:0f:
15:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:77:16:EC:7C:9E:B5:B2:08:47:7C:4A:A4:AA:5E:A4:8D:E3:23:1F
X509v3 Authority Key Identifier:
keyid:D2:4A:DE:CD:84:BB:17:48:BD:35:B9:9E:CE:A4:67:72:E0:1E:C9:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:e5:04:13:89:99:8c:c3:e3:2e:d0:5b:9b:fe:2f:bc:a3:d5:
b3:20:50:a5:cf:00:c9:dd:df:95:ac:e2:4e:6e:e5:61:ce:96:
57:83:25:f6:a2:fe:9d:dc:f0:ba:f3:a4:96:8f:25:c0:67:12:
08:b2:88:b5:06:b4:51:95:35:9d:e1:15:a4:92:f0:93:44:33:
5e:07:ac:7c:28:be:bc:6e:75:4d:55:a8:cf:5d:40:56:6b:26:
1f:7b:78:b8:12:e3:01:3b:19:24:3f:d0:e0:66:db:ba:df:84:
b1:3d:09:d9:ea:71:9c:50:a6:65:e7:41:cf:f5:e8:05:41:4e:
43:11:76:a8:49:a9:f0:e0:cd:e8:8d:e0:bd:26:27:a7:f3:f0:
3b:6d:dc:6d:6f:a0:67:2c:cb:39:d1:a8:ba:6e:6f:2a:e6:a5:
a8:8c:34:7d:d2:04:3b:ed:ac:11:87:fb:82:32:57:b4:ce:26:
76:c3:55:d7:5a:a8:ff:9f:e6:94:e9:9e:9a:e8:6e:55:99:b1:
0a:cb:0e:43:de:93:0e:28:9d:8f:af:e0:e9:53:bd:0b:f8:fe:
f9:3a:00:de:ea:92:91:e2:55:25:32:ae:35:48:ee:18:15:ac:
6c:39:3b:05:bc:18:1e:ad:47:ff:d2:a9:c2:bb:b0:12:d6:1a:
c3:59:22:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:12:59 2026 by rpki-client