Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/v99XKOyr1W70Y3NWlVhmylRoaRo.mft
File: v99XKOyr1W70Y3NWlVhmylRoaRo.mft (raw, json)
Hash identifier: g6O1N37KJDcpRh7+6TyRam+viE5xA5/9s4BJwsL6lhM=
Subject key identifier: 33:FA:E2:F3:B5:6C:69:5D:7E:64:2E:62:AF:C2:1D:BB:C2:6B:E8:28
Authority key identifier: BF:DF:57:28:EC:AB:D5:6E:F4:63:73:56:95:58:66:CA:54:68:69:1A
Certificate issuer: /CN=bfdf5728ecabd56ef4637356955866ca5468691a
Certificate serial: 019FAA19D769DC4B16A84ED34E3DF05E2A6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v99XKOyr1W70Y3NWlVhmylRoaRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/v99XKOyr1W70Y3NWlVhmylRoaRo.mft
Manifest number: 05F6
Signing time: Tue 28 Jul 2026 19:00:47 +0000
Manifest this update: Tue 28 Jul 2026 19:00:47 +0000
Manifest next update: Wed 29 Jul 2026 19:00:47 +0000
Files and hashes: 1: 3BcGBZCHDgJs9gSoEvIJqO6Wdng.roa (hash: QqrBTNsjue3924ijEFZUnNRSzA8ZRhSOavKbIrZOqys=)
2: v99XKOyr1W70Y3NWlVhmylRoaRo.crl (hash: WbgXO+gYZ4SvfhreGp6tRloQ0x5J4kNDRRvTqiD+614=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/v99XKOyr1W70Y3NWlVhmylRoaRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/v99XKOyr1W70Y3NWlVhmylRoaRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/v99XKOyr1W70Y3NWlVhmylRoaRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:d7:69:dc:4b:16:a8:4e:d3:4e:3d:f0:5e:2a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfdf5728ecabd56ef4637356955866ca5468691a
Validity
Not Before: Jul 28 19:00:47 2026 GMT
Not After : Jul 29 19:00:47 2026 GMT
Subject: CN=33fae2f3b56c695d7e642e62afc21dbbc26be828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ef:52:65:0b:9e:b3:14:dd:18:de:4d:9b:71:
4f:ab:a6:2d:80:a3:a2:6c:d7:1c:44:28:b3:4a:56:
ce:f3:26:42:d2:52:31:4d:52:a7:bc:cb:47:f8:65:
a4:cd:da:77:e0:6c:36:43:50:4b:3b:f6:61:eb:b9:
53:b8:8b:0d:35:22:33:0c:3e:d5:ec:ae:4b:08:44:
8a:82:e0:68:f2:b8:d5:26:b4:3d:c4:62:c1:63:93:
d1:cf:82:aa:8f:31:6c:0e:8b:5c:b5:ca:74:f8:08:
87:93:c4:8b:64:b5:6a:b0:35:a7:dd:5c:2c:1a:be:
be:cf:b1:ea:9c:0a:cb:43:ed:b9:22:31:fc:b4:b1:
89:2d:2c:5a:28:e4:f7:09:ba:81:0f:1e:cb:8a:df:
85:92:4d:ec:13:ef:f8:7a:de:3e:be:62:2b:ce:47:
52:77:5b:2e:76:0b:1b:65:09:2a:ae:91:9a:d4:97:
47:48:39:49:18:01:aa:ca:80:7e:48:fe:7e:26:27:
6b:3c:a3:34:b6:9e:e5:8b:5f:0e:17:85:15:33:e7:
00:23:bc:7b:bf:14:73:d9:da:e1:44:ed:d7:61:1c:
c2:01:31:42:85:22:23:3d:ac:1f:5c:cb:51:d1:9d:
cc:d6:56:5c:a1:34:ad:ad:4f:f1:1d:dc:d3:a5:2b:
6b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FA:E2:F3:B5:6C:69:5D:7E:64:2E:62:AF:C2:1D:BB:C2:6B:E8:28
X509v3 Authority Key Identifier:
keyid:BF:DF:57:28:EC:AB:D5:6E:F4:63:73:56:95:58:66:CA:54:68:69:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v99XKOyr1W70Y3NWlVhmylRoaRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/v99XKOyr1W70Y3NWlVhmylRoaRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/v99XKOyr1W70Y3NWlVhmylRoaRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:58:68:da:76:7a:60:ae:37:1d:61:c2:ce:a9:5a:e8:09:31:
8a:a7:35:8b:9b:60:49:d5:b9:72:9c:b0:72:8f:69:fb:bf:41:
fd:0e:66:0b:03:bc:50:67:dc:dd:7e:fc:f9:41:73:05:b3:01:
68:6c:40:de:8d:6b:d8:ba:b1:77:7e:50:32:f3:19:6f:69:52:
87:86:a1:80:80:67:6e:1b:ae:97:b9:c4:d2:70:dc:c5:2d:0b:
ca:cf:87:ac:77:4f:eb:0f:15:f4:d8:cc:4e:42:e5:39:74:05:
89:ee:b8:97:09:3c:60:56:e2:cf:a1:22:00:68:57:8b:1f:d3:
80:58:58:a0:e5:eb:64:eb:a2:a7:31:65:1c:b8:47:c7:bd:57:
8a:b1:50:a7:33:58:59:4b:29:22:d6:d2:90:aa:bc:15:8b:73:
bb:45:45:ac:c4:7f:b9:8d:a2:1d:2f:66:fc:3f:42:a8:36:dd:
c7:4f:82:03:91:a3:6c:84:6c:47:11:7a:b9:da:61:51:c2:d6:
d5:99:ba:22:22:82:65:6b:2f:27:18:cf:0e:ed:b3:c2:47:20:
8b:a6:a2:96:76:d1:7c:b0:86:b5:fc:e9:46:3e:e8:4e:03:e4:
74:c3:74:d5:fd:b9:6a:d5:74:b8:25:90:dc:df:12:ff:dc:74:
88:b7:39:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:44:10 2026 by rpki-client