Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.mft
File: 53OfCEQuIkRmIbiaV2ObNUK6NNw.mft (raw, json)
Hash identifier: Y62YGecEx6jA0cgAvukdxHDitjl+c96Re1I/XYcBMIE=
Subject key identifier: BF:00:48:8C:D9:FA:1F:46:93:49:70:B8:BE:55:33:84:9F:CA:3A:7D
Authority key identifier: E7:73:9F:08:44:2E:22:44:66:21:B8:9A:57:63:9B:35:42:BA:34:DC
Certificate issuer: /CN=e7739f08442e22446621b89a57639b3542ba34dc
Certificate serial: 019FA9E315F0FD224970CE02E4D8E3CD1D17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53OfCEQuIkRmIbiaV2ObNUK6NNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.mft
Manifest number: 07F0
Signing time: Tue 28 Jul 2026 18:00:59 +0000
Manifest this update: Tue 28 Jul 2026 18:00:59 +0000
Manifest next update: Wed 29 Jul 2026 18:00:59 +0000
Files and hashes: 1: 53OfCEQuIkRmIbiaV2ObNUK6NNw.crl (hash: Oa/9ErR+nER/tgS/NH/ZliOUBh2NAd0AgupUL5J/Qvw=)
2: nS12X_FMQVUUwkWnLYmgJW732kk.roa (hash: GXbiX9J7KWPFCiPzKs7zINZFOvfmZgRDxvmBON8Kk10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/53OfCEQuIkRmIbiaV2ObNUK6NNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:15:f0:fd:22:49:70:ce:02:e4:d8:e3:cd:1d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7739f08442e22446621b89a57639b3542ba34dc
Validity
Not Before: Jul 28 18:00:59 2026 GMT
Not After : Jul 29 18:00:59 2026 GMT
Subject: CN=bf00488cd9fa1f46934970b8be5533849fca3a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c2:e0:b4:39:c4:2b:e6:61:42:24:29:6d:4f:
aa:62:3e:22:5e:2d:03:5f:80:76:17:e8:a0:aa:03:
bf:51:88:d2:7e:64:14:34:06:48:1c:68:29:31:4f:
2d:52:52:a2:0b:63:57:4d:92:65:17:7c:fc:2a:5d:
34:70:2b:7f:96:7e:e5:fc:80:1e:43:ce:d0:54:04:
f8:26:e2:59:af:4a:dd:3c:f2:37:b5:60:01:19:2f:
dc:55:5c:be:da:59:78:ea:97:38:50:c6:99:b8:f8:
93:1f:30:ba:c1:6d:39:f7:e5:d9:6e:3a:98:b9:aa:
5f:24:24:f5:35:94:02:60:32:e2:4e:82:fd:6f:05:
f8:3d:29:03:db:20:be:63:68:6f:86:2b:ed:df:a5:
c5:50:55:27:90:01:2b:45:1b:53:8d:20:85:83:d1:
05:a0:1d:28:3e:ea:de:62:98:cf:70:c5:ef:e2:f7:
a3:27:59:03:93:e7:e0:fb:ee:8b:5c:6f:0f:95:e3:
55:ab:5d:05:1f:72:b2:1e:32:b1:08:57:96:26:1f:
a4:66:e8:20:56:82:35:85:89:f2:05:5e:79:1b:85:
ed:24:bc:9b:6f:2b:23:23:be:f0:a2:e0:41:61:af:
68:57:c9:11:da:c3:01:27:c1:be:f2:b3:48:72:8f:
6b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:00:48:8C:D9:FA:1F:46:93:49:70:B8:BE:55:33:84:9F:CA:3A:7D
X509v3 Authority Key Identifier:
keyid:E7:73:9F:08:44:2E:22:44:66:21:B8:9A:57:63:9B:35:42:BA:34:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53OfCEQuIkRmIbiaV2ObNUK6NNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:18:fc:df:16:40:fe:54:a8:6a:6c:93:18:41:3b:74:4b:98:
58:da:b2:b2:7d:5b:4f:34:3f:1a:a2:f9:90:52:23:33:65:0a:
39:7f:12:68:8f:bd:65:3a:a9:56:0d:59:5e:49:17:72:ed:de:
4a:74:d0:cd:01:fc:d5:a8:00:6f:0f:14:10:e8:f6:cf:a8:5b:
5f:95:3a:28:4c:ff:50:7e:a7:d2:82:bb:d2:a4:83:2f:f9:ce:
ce:f0:8b:4b:32:fb:dc:5d:25:d9:59:4f:ea:44:e6:64:28:78:
b8:6f:6e:b8:c9:af:db:35:ad:ea:f1:aa:35:ec:0c:88:de:47:
8d:c5:52:59:ff:ff:c7:1c:07:5a:99:36:db:0d:93:06:cd:04:
80:fb:e7:4f:fc:60:78:9d:93:0c:87:6b:ba:92:3d:e4:d8:3d:
91:fa:7c:c0:70:79:25:d8:51:a8:c8:bb:24:ae:dd:a1:76:0f:
b8:65:fa:23:93:1b:33:dc:8f:62:b2:1e:95:03:1b:8c:f0:2e:
5f:63:7e:1d:b8:49:31:07:7a:bb:cb:a9:e3:1b:84:51:85:bb:
03:1d:de:50:08:44:f0:41:c7:67:3b:43:74:5e:42:34:b6:56:
31:95:f4:73:32:5a:ac:49:ac:45:ab:55:bf:91:f9:ee:a0:d7:
7f:47:b5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:30:59 2026 by rpki-client