Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
File: MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft (raw, json)
Hash identifier: qz5IbIjGWWqsWbeOuSjF7egIwCLswbvkLu1+vLckk+M=
Subject key identifier: 31:56:6A:46:EC:36:B4:4A:69:24:A6:61:8B:0A:B3:4E:3F:D8:33:0B
Authority key identifier: 31:D7:D9:D2:9C:EC:F8:E5:91:22:23:3D:71:6E:6B:05:0E:71:84:78
Certificate issuer: /CN=31d7d9d29cecf8e59122233d716e6b050e718478
Certificate serial: 019FAC7605C3672EA76F7F7246A1F5649897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
Manifest number: 05B1
Signing time: Wed 29 Jul 2026 06:00:43 +0000
Manifest this update: Wed 29 Jul 2026 06:00:43 +0000
Manifest next update: Thu 30 Jul 2026 06:00:43 +0000
Files and hashes: 1: 9jfmZ8bQaVGPFDWRFHvQHmnS8fo.roa (hash: /DXZZnlzFxIqpfLKa2jzn4JOmraJhYpvlatvoWLWvdY=)
2: MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl (hash: NkGjR6F4NzSrjWPtj8pmGMc3PSJnYX9wgOPTa+rV6No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:05:c3:67:2e:a7:6f:7f:72:46:a1:f5:64:98:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d7d9d29cecf8e59122233d716e6b050e718478
Validity
Not Before: Jul 29 06:00:43 2026 GMT
Not After : Jul 30 06:00:43 2026 GMT
Subject: CN=31566a46ec36b44a6924a6618b0ab34e3fd8330b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:29:fa:04:d7:85:a2:72:17:44:fc:ea:41:89:
11:fd:d4:80:ea:41:5d:ba:9c:b4:5d:b3:a7:11:19:
e9:1d:7a:e8:20:0b:00:a3:df:33:6d:97:62:8b:59:
bd:94:10:a0:79:4d:59:9a:ec:8f:17:2e:58:bb:44:
d9:21:a5:f6:72:ca:b3:52:fc:7a:23:a8:38:e2:b2:
06:44:cc:cc:5f:21:d0:e8:62:bc:d1:54:34:e7:39:
a0:1c:e3:29:48:0b:84:4a:eb:df:ab:45:ef:ea:7c:
0b:cc:16:e4:9d:28:dc:3b:13:1f:68:85:9d:ad:23:
36:be:7b:17:62:5a:55:38:82:45:7f:1f:89:48:9a:
b9:cf:c5:c8:66:15:3c:c1:2e:25:6b:b8:76:ab:7d:
8e:83:4a:e8:8c:12:22:a7:98:b2:43:a2:e2:b9:53:
b8:31:84:62:68:11:19:e5:2d:31:3d:80:0b:6a:72:
e5:9e:22:0b:e1:b8:6c:a2:0c:e0:53:75:b6:bb:a8:
79:93:38:f1:d2:f5:c0:27:53:c1:88:65:27:ed:42:
04:fd:1a:7a:58:0d:a3:88:3d:5c:12:62:5d:6a:e7:
1d:2e:bd:fa:64:f0:62:31:bc:c1:99:a5:de:2d:e6:
c0:c0:5f:e7:bc:31:87:50:8c:9a:d1:9f:fd:57:a5:
8b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:56:6A:46:EC:36:B4:4A:69:24:A6:61:8B:0A:B3:4E:3F:D8:33:0B
X509v3 Authority Key Identifier:
keyid:31:D7:D9:D2:9C:EC:F8:E5:91:22:23:3D:71:6E:6B:05:0E:71:84:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b2:d4:78:b2:1e:88:46:36:e1:b6:25:55:e4:33:c1:89:c4:
81:42:fe:ca:76:43:7f:b3:d6:e4:4d:a7:e8:44:ab:ad:d2:c1:
89:5a:d5:c2:2b:cb:22:c7:cf:70:91:de:c5:04:52:d2:05:8d:
4e:e9:fd:6c:bd:cd:1d:01:2a:d7:d7:eb:a6:50:4f:11:a6:b5:
23:56:12:c5:e0:1d:f3:84:a1:a0:4e:b1:b7:89:7f:4e:8d:d1:
d9:c3:a6:70:3d:82:59:f7:1d:e0:ce:08:16:e1:ea:09:e4:b6:
e7:db:ac:0b:91:4c:3a:be:97:3d:6c:e6:32:e5:7e:59:31:8d:
91:9f:89:0b:43:bd:1a:13:7f:eb:89:91:40:77:49:b1:ef:73:
ae:ca:d7:2d:e8:c2:e2:df:9a:c7:b9:29:1e:ec:65:3b:a7:39:
e8:c4:f4:de:07:e5:81:fd:18:e7:5d:e5:62:31:f1:c1:0a:2b:
b4:a4:03:e3:44:ae:c4:32:8f:10:d2:4e:4a:c3:e2:63:f8:24:
31:60:a4:36:d0:4d:a2:58:c6:40:39:92:fb:db:89:31:c7:2d:
ab:4a:34:80:41:a9:f4:28:29:c2:ef:ec:b8:08:53:ac:76:6f:
2e:be:d7:97:85:58:f9:9e:df:3e:0b:8a:90:2e:5f:f3:15:be:
f3:83:5f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:59:34 2026 by rpki-client