
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
File: v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft (raw, json)
Hash identifier: udL9Qz6QFhafRr+d55t99LeshGYgvb981BpDTYxWVLw=
Subject key identifier: EC:40:90:74:A7:84:C4:94:D2:92:CF:62:33:34:85:AD:BC:17:A2:3C
Authority key identifier: BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49
Certificate issuer: /CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149
Certificate serial: 019FAB2C77D5EC31D973AB7DC3B63B484997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 00:00:45 +0000
Manifest this update: Wed 29 Jul 2026 00:00:45 +0000
Manifest next update: Thu 30 Jul 2026 00:00:45 +0000
Files and hashes: 1: 440C9nJzfAwzFQHbbTSsKGKGkig.roa (hash: 9GaUDae42NdjzGOSW1+fUpuBNX675/CDIy2pT/BeZSI=)
2: v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl (hash: vm5gs8NFBV8dxEgOMeUNT24TgOxC1MqL9iaGPWHe/1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:77:d5:ec:31:d9:73:ab:7d:c3:b6:3b:48:49:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149
Validity
Not Before: Jul 29 00:00:45 2026 GMT
Not After : Jul 30 00:00:45 2026 GMT
Subject: CN=ec409074a784c494d292cf62333485adbc17a23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cf:58:38:50:34:46:cd:65:f4:6a:9d:d7:8f:
ca:cd:41:6b:b8:49:24:20:16:d3:34:c8:14:14:cb:
75:06:fb:a9:bb:ff:4a:a2:49:6f:82:8a:d2:5c:9b:
ec:52:d5:cf:e1:6b:8c:27:b1:ca:3f:40:7f:27:4b:
e5:40:53:c5:eb:d7:d8:2c:e6:54:18:ac:ab:fa:d9:
e2:21:e0:f6:d2:41:5f:64:b6:6d:e5:04:69:db:a6:
cf:c2:26:38:12:70:52:d4:34:b1:a8:b1:9e:94:ab:
80:45:7f:15:d9:ed:c6:cf:16:91:c7:bf:ec:06:1b:
e9:8c:89:54:f3:59:c7:98:ea:d7:0e:c3:a5:66:5e:
78:84:42:93:df:07:1c:f1:2c:6f:a2:fc:22:d4:e8:
87:0e:36:50:ca:2d:85:e2:51:c6:bd:4f:50:72:54:
f7:84:cf:69:9a:3e:92:34:35:a8:7e:d8:9b:aa:4c:
d6:10:76:33:56:56:65:42:f7:c5:97:c3:6e:c8:d9:
38:4f:88:9e:4a:45:33:e9:31:05:2e:54:f5:3f:b7:
52:ad:9b:ca:6b:76:61:39:5a:f7:45:21:e6:95:50:
08:d4:b1:2b:c6:03:c1:6a:15:d9:6c:40:fe:ed:15:
69:70:b9:a5:50:96:18:c8:40:a2:b3:db:2b:16:f9:
86:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:40:90:74:A7:84:C4:94:D2:92:CF:62:33:34:85:AD:BC:17:A2:3C
X509v3 Authority Key Identifier:
keyid:BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:29:d4:b5:8a:d1:2a:5b:eb:e8:35:5f:22:76:28:98:06:d1:
1e:ea:f8:5b:33:27:61:93:30:8f:f4:ed:f3:40:95:5a:2a:53:
ad:61:f2:09:9c:e4:61:f5:5d:37:f0:86:7a:5e:ee:68:b9:1a:
24:93:13:c9:84:87:93:cc:ee:82:35:13:5d:f4:5f:99:9b:27:
36:18:f8:4a:e5:96:04:1d:6d:99:76:54:af:bf:57:f0:95:e0:
49:f9:b3:c4:de:68:eb:db:25:16:b6:8e:82:a5:a6:e5:91:7f:
07:fc:55:f0:fb:be:8d:78:64:0b:0b:36:bc:54:ac:2a:64:b6:
d1:a3:c5:5b:b4:87:31:d9:0e:70:20:7e:b5:2f:5d:be:48:e8:
95:fe:a2:48:84:ef:80:74:13:1d:6e:4d:69:57:bc:97:36:f9:
b2:5a:85:2e:39:24:f0:bd:b0:37:88:54:59:f1:a7:bb:05:e4:
9e:3d:bf:74:48:b0:16:02:6b:b9:51:bf:c7:a1:3f:3c:23:9e:
c9:e4:23:a9:52:61:fc:1b:1d:c0:2f:ef:38:e1:ac:16:51:d5:
05:38:a2:a0:86:3e:5f:22:58:37:36:7a:db:af:6b:cf:13:d4:
66:05:4b:2d:0d:14:67:bf:fc:39:2a:a6:c5:55:ba:d0:a2:04:
0c:83:fc:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:27:31 2026 by rpki-client