Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
File: D-cy5rJJCT55oaUHy82BlvAYF_o.mft (raw, json)
Hash identifier: 0S/XZUr5rwmykyYYg4/GMPHhXc/F3q2i7bQw+Di4hqY=
Subject key identifier: 8C:4D:BA:A9:38:30:05:4F:11:12:64:4F:AB:26:28:12:41:38:86:58
Authority key identifier: 0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
Certificate issuer: /CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Certificate serial: 019FAB2CB3AA1C1317DE91CB608B9BA50ABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
Manifest number: 146B
Signing time: Wed 29 Jul 2026 00:01:01 +0000
Manifest this update: Wed 29 Jul 2026 00:01:01 +0000
Manifest next update: Thu 30 Jul 2026 00:01:01 +0000
Files and hashes: 1: D-cy5rJJCT55oaUHy82BlvAYF_o.crl (hash: x7piVzzkZZCe4vPp/rq1bD50IWXSOx9oXWVo8FJ5Kzg=)
2: KRcQChyIkdk17z-o88DTXwkNu_Y.roa (hash: k4ZBkPTraQNZ31kK5NnaOy56WVAVKO/c8Q/xt3FDIoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:b3:aa:1c:13:17:de:91:cb:60:8b:9b:a5:0a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Validity
Not Before: Jul 29 00:01:01 2026 GMT
Not After : Jul 30 00:01:01 2026 GMT
Subject: CN=8c4dbaa93830054f1112644fab26281241388658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:57:9d:47:1e:bf:69:8f:f4:54:67:03:cf:00:
bf:83:68:24:43:4a:24:16:e8:1c:43:cb:f6:73:fc:
bd:5e:df:31:c7:2a:3a:2b:73:ca:fa:ba:d4:4a:17:
bb:3f:9b:bb:e7:8d:92:85:5b:dc:37:fd:0a:07:f8:
2b:9f:4d:c2:25:f1:f5:10:6d:94:0b:28:bb:7f:dd:
ae:57:4f:32:9e:07:88:87:f7:4b:04:d9:50:4e:90:
9d:fe:cd:9e:cf:53:e7:f8:6d:9c:bd:d1:64:e2:27:
6a:32:e2:a6:32:b3:90:d2:31:af:ad:75:bf:cc:8b:
5c:cb:28:d5:4d:2c:1c:a1:20:5e:e0:93:4e:16:8d:
e1:24:8d:68:4d:c2:e9:65:97:00:e9:13:94:25:4e:
76:2f:bb:5a:ee:1e:9f:8d:ef:e0:e0:99:53:4b:9a:
5e:5d:27:fd:b6:31:85:2e:3a:3e:a6:58:20:65:8a:
99:4a:30:3b:e2:95:35:2a:f4:8c:4d:49:d0:74:e1:
fb:b6:f8:9d:a7:8b:68:3e:8f:f4:16:e4:42:d4:c0:
d4:cf:7b:0f:1d:d6:2f:d8:04:b3:69:2a:6a:46:53:
ef:e9:98:f7:c4:05:8b:7e:e9:69:6e:d4:dc:1c:a1:
be:d4:38:4c:fb:e1:fe:3b:34:ac:90:d0:26:48:4e:
56:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:4D:BA:A9:38:30:05:4F:11:12:64:4F:AB:26:28:12:41:38:86:58
X509v3 Authority Key Identifier:
keyid:0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:08:2a:88:77:2d:c2:b1:d3:09:1a:10:3b:1f:ef:7a:57:07:
15:d8:a2:b5:3d:3a:b0:31:a1:fc:b7:26:5b:72:23:27:7e:ce:
6e:cb:66:4c:3d:68:47:e5:16:b5:e3:e1:85:a3:9f:c4:02:85:
eb:23:c8:e0:95:d8:64:56:75:67:71:c7:5b:b0:06:b6:ae:71:
6f:0b:c9:99:64:76:94:1c:0d:6c:ba:2a:0c:25:cd:fa:98:a0:
7c:0f:f5:f3:9f:f9:68:04:0a:e0:aa:a2:74:3c:e1:91:e3:d9:
4c:14:0d:c8:01:e7:e6:53:9c:d6:3f:44:ca:bb:10:59:34:53:
2a:6c:8d:63:e3:aa:90:fd:41:78:b7:de:2f:74:45:03:d1:7b:
40:82:38:20:43:c4:cf:be:db:b0:44:88:08:4a:76:ca:e5:38:
01:fa:d9:e0:ad:9d:95:8b:46:c7:02:ee:66:b1:4a:84:ca:21:
3d:de:15:3b:f7:b4:b2:d7:67:95:be:d4:85:d2:a4:72:1f:b9:
7e:2e:64:1a:f9:6d:f8:29:21:46:8a:97:fc:93:48:45:02:d9:
47:98:fe:6b:04:6d:04:f8:da:69:03:8a:6c:16:22:a4:38:f8:
77:33:a7:92:49:c4:1b:6a:51:64:b2:a6:e6:d7:06:e2:e8:e1:
10:79:3d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:32:00 2026 by rpki-client