Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
File: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft (raw, json)
Hash identifier: S7hyoL5XhaVAWZcHPz8JM3zrOaW+0H9F5aNLGuZ4V2k=
Subject key identifier: 37:B4:7A:43:E2:4F:89:11:3C:9D:C1:25:70:B9:63:4A:FC:44:01:D6
Authority key identifier: B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
Certificate issuer: /CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Certificate serial: 019FAB6368821703BE4646BFB8A283266EC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
Manifest number: 19D2
Signing time: Wed 29 Jul 2026 01:00:46 +0000
Manifest this update: Wed 29 Jul 2026 01:00:46 +0000
Manifest next update: Thu 30 Jul 2026 01:00:46 +0000
Files and hashes: 1: RxwpeJEtkWGwK-FiT9nGtEZel1w.roa (hash: nRWo2u6OOJDMeQ+Qn8P1QxPMq9RxzCeIuOjLATj51Ms=)
2: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl (hash: hNCBGbIaLBFVM1Nx/x+1j5KJC+0Oo3tY66zq2ioDgKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 01:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:68:82:17:03:be:46:46:bf:b8:a2:83:26:6e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Validity
Not Before: Jul 29 01:00:46 2026 GMT
Not After : Jul 30 01:00:46 2026 GMT
Subject: CN=37b47a43e24f89113c9dc12570b9634afc4401d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:38:e3:3c:08:af:60:64:1f:64:c6:a1:a3:5b:
30:26:04:9e:6f:e5:a3:f6:13:87:21:f8:70:15:dd:
bc:34:d0:70:bc:d1:60:77:bd:92:0e:e4:dd:66:c7:
21:37:79:a7:83:3b:52:54:e9:1a:ed:41:f2:05:85:
8a:c6:ac:83:cc:4d:47:95:80:fd:43:0f:d9:08:7d:
61:50:6d:00:95:96:71:72:8c:b4:5b:89:3e:3c:bd:
4e:cd:60:ab:38:35:b0:aa:a7:9c:9b:13:a8:5a:09:
96:04:bb:ef:95:82:28:da:aa:55:f4:4f:71:56:f2:
6c:29:87:3d:7b:21:93:d5:86:8e:7e:f6:32:94:e7:
fc:b4:33:03:28:cc:52:c7:ce:44:11:17:68:5f:d8:
89:74:0b:4f:c9:39:93:9b:1f:18:ee:db:f0:68:da:
b4:65:0a:74:1e:33:45:26:a0:a5:68:c8:82:53:d5:
36:d8:c2:97:05:13:52:4b:45:06:04:68:e8:3f:fc:
84:c6:46:32:69:1a:f8:48:c2:96:67:d0:c6:f9:86:
0c:63:65:d9:9e:d5:52:82:81:e8:fd:e2:be:23:5b:
9a:32:e5:d6:2b:01:ff:01:80:ef:14:52:6f:f4:8a:
8b:3b:b8:1a:40:41:4c:b2:06:03:e4:aa:bd:3a:39:
86:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B4:7A:43:E2:4F:89:11:3C:9D:C1:25:70:B9:63:4A:FC:44:01:D6
X509v3 Authority Key Identifier:
keyid:B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ca:bd:ba:d5:d7:9b:2b:b7:01:bd:ba:e8:4e:4e:5f:e9:3e:
13:15:52:a1:98:3a:20:d1:c3:79:26:f8:6c:b1:4f:d6:db:a9:
56:be:e5:9c:25:a8:d6:d9:7c:ec:d2:36:16:65:78:14:f7:39:
f5:4d:b0:f9:0e:e4:79:fc:b7:db:89:45:b5:e9:8e:cc:0f:f2:
c6:a0:36:10:6a:3b:e6:58:e9:12:e4:c6:31:5c:39:19:c7:01:
72:81:4d:8c:48:b9:23:13:0e:a4:88:d9:59:f5:7c:d3:31:19:
30:0d:a1:0d:10:99:7e:ba:70:e1:0e:64:e9:c1:dc:4d:72:d1:
6f:e1:d8:39:8d:46:8f:8a:36:d8:1b:75:ea:78:cd:13:d7:27:
0e:5a:10:1f:41:67:fc:e4:d3:e6:ca:ea:d5:60:19:53:49:46:
6f:ac:6f:7d:f2:4f:ce:8d:02:e6:66:e8:7c:42:b8:e3:4c:0d:
f5:54:f2:3d:30:d6:07:0b:3f:fd:97:83:65:51:b5:93:4a:5b:
c9:ff:63:f3:e1:15:ea:bf:df:d6:37:f3:45:65:1f:d8:ed:9c:
f6:fa:6e:a0:dd:73:5e:ee:6f:83:7c:37:5b:df:d6:ec:81:fc:
5a:c3:ec:93:59:be:18:d1:f7:09:63:08:1d:b4:f5:a6:93:a0:
72:54:25:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:37:48 2026 by rpki-client