Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
File: cd9sdT6ghb7zcrOSYw90uldpbuU.mft (raw, json)
Hash identifier: hPuciYt2bHKXnT/3gPANWD/pw3JABZetTdB+VUzCAQE=
Subject key identifier: B4:86:43:C4:1C:D2:5A:3A:65:E9:4E:1A:15:5D:5C:D9:79:DB:AA:5F
Authority key identifier: 71:DF:6C:75:3E:A0:85:BE:F3:72:B3:92:63:0F:74:BA:57:69:6E:E5
Certificate issuer: /CN=71df6c753ea085bef372b392630f74ba57696ee5
Certificate serial: 019FAB9A493549C29992AA6EA03DC4558045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
Manifest number: 16E5
Signing time: Wed 29 Jul 2026 02:00:42 +0000
Manifest this update: Wed 29 Jul 2026 02:00:42 +0000
Manifest next update: Thu 30 Jul 2026 02:00:42 +0000
Files and hashes: 1: 90fOLXtBv8zjOyjcz26gkbyoNvE.roa (hash: Ru1YTQpQd39yRjLzCahK22aUJjQHLniT2w2j16/8ijY=)
2: GNQd5Bm0mjUJd67uPNG6cQdgvFk.roa (hash: 0ulANNIaOCC2eudb71uMMJn10FX8G4OgvsoxQ5AP27o=)
3: cd9sdT6ghb7zcrOSYw90uldpbuU.crl (hash: E/j1XXg+FJMLtYMeUDSRBxH8aqAj+MgopAsFAldJBdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:49:35:49:c2:99:92:aa:6e:a0:3d:c4:55:80:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71df6c753ea085bef372b392630f74ba57696ee5
Validity
Not Before: Jul 29 02:00:42 2026 GMT
Not After : Jul 30 02:00:42 2026 GMT
Subject: CN=b48643c41cd25a3a65e94e1a155d5cd979dbaa5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8b:e8:53:40:9e:e1:ed:82:5b:7b:55:11:33:
01:a6:b1:42:00:c2:52:c8:bb:7e:60:c1:8c:84:4d:
7b:b8:5b:3a:b5:85:a9:80:ff:1b:08:15:17:91:7d:
d8:d4:b5:e3:7e:6c:6a:aa:2a:ce:68:ec:c0:cb:57:
cb:f7:f1:ee:15:f9:97:c5:5e:12:5b:03:dc:8b:0a:
15:13:57:d0:d4:4e:31:7d:92:18:a9:ec:bc:ba:f4:
50:bd:6c:01:39:28:4c:2a:aa:a1:f7:bd:15:03:27:
fb:7f:b8:46:ac:e5:80:13:c7:5c:3b:ef:da:a5:3c:
db:8e:19:81:a3:39:3f:4e:33:61:3c:9f:d3:44:f2:
b8:cf:ce:ae:2a:1e:d2:00:dc:9e:4b:d9:de:45:22:
c0:03:27:5e:e9:37:8d:46:a6:b2:15:97:16:3c:bb:
10:e2:d4:58:7a:01:86:2b:29:4b:eb:76:a4:25:29:
3c:16:68:d3:2a:62:c7:2e:82:ff:02:cd:58:e1:08:
05:50:fc:6e:78:ce:c4:ba:6f:4d:27:68:b7:d2:15:
21:75:59:85:f6:01:14:c2:55:7f:3c:ba:d8:60:c3:
ec:cc:70:7d:ba:0f:db:0f:ad:b8:59:f6:4c:a4:06:
fd:5c:ac:91:8c:ee:ef:1d:a8:ba:03:7c:88:30:9b:
85:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:86:43:C4:1C:D2:5A:3A:65:E9:4E:1A:15:5D:5C:D9:79:DB:AA:5F
X509v3 Authority Key Identifier:
keyid:71:DF:6C:75:3E:A0:85:BE:F3:72:B3:92:63:0F:74:BA:57:69:6E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:8d:e3:88:a1:1b:e0:ca:38:53:d4:27:e2:74:e4:26:36:47:
69:f6:47:41:33:ae:36:63:b1:2e:6d:5e:91:f4:cc:24:05:f6:
26:bb:a7:69:69:da:97:0b:ca:aa:f3:89:da:25:ff:5e:9f:e5:
68:fc:f9:ff:50:3c:9c:48:ba:d5:6d:7a:f5:9f:cd:b3:84:ff:
65:fc:63:91:46:d6:52:55:06:b6:5a:e6:54:63:47:21:f5:7b:
0c:01:4c:2b:b0:7c:75:87:77:64:6e:bf:31:0c:60:16:20:db:
c6:2e:bf:1f:ff:d1:ee:fe:37:aa:a9:39:11:7a:1b:fa:d0:65:
87:98:f2:7c:c5:e3:97:dc:c7:d4:ad:25:d3:e1:d2:99:47:a7:
92:e6:ba:34:26:15:e3:b6:31:b8:ec:92:c0:37:7c:0e:5f:bf:
b4:6e:ae:9b:41:b0:b9:01:f2:c7:5d:09:cc:a4:fc:1d:42:8a:
df:4a:5f:cd:d6:b4:1b:e1:92:ca:b0:fe:3e:cf:08:42:30:5c:
52:e8:c5:bf:8a:37:7c:fd:3d:ad:fa:60:56:10:c4:5f:01:be:
30:9d:d0:95:28:1b:19:68:66:c6:63:69:25:c3:df:05:c1:b8:
7b:89:d1:47:30:84:e0:a9:56:3c:42:79:1a:06:c8:cf:29:57:
09:4a:40:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:42:40 2026 by rpki-client