Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/_-BD2zfqJckthc5lp20aTlE2JKo.mft
File: _-BD2zfqJckthc5lp20aTlE2JKo.mft (raw, json)
Hash identifier: ozwy7QHC+t3Xios9AsK2RiuwqAbemRqDujxUYf5L5GA=
Subject key identifier: 84:B5:E0:87:53:93:2D:31:8D:4C:D1:D6:01:3C:8A:93:04:2E:CE:4F
Authority key identifier: FF:E0:43:DB:37:EA:25:C9:2D:85:CE:65:A7:6D:1A:4E:51:36:24:AA
Certificate issuer: /CN=ffe043db37ea25c92d85ce65a76d1a4e513624aa
Certificate serial: 019FAA888A62B0B01E0C699380FDE0B6D372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-BD2zfqJckthc5lp20aTlE2JKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/_-BD2zfqJckthc5lp20aTlE2JKo.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:42 +0000
Manifest this update: Tue 28 Jul 2026 21:01:42 +0000
Manifest next update: Wed 29 Jul 2026 21:01:42 +0000
Files and hashes: 1: 9StrTLCfqGV3R6lUHBbjcUPbtgE.roa (hash: hKyGuDQdq7Wwmsr9xKC9vViQNuynbDmlDvA0XQY2P9E=)
2: Qagt2LqaMAntgU09nCJSjOteJGI.roa (hash: hVVNYLozOrGf2eg6nP90ee7AH3HGnRwNnmP01BLSjaQ=)
3: _-BD2zfqJckthc5lp20aTlE2JKo.crl (hash: E9q6g+FtJVrWhk8LpzAmsp3/y6XklNoGu7VFKzK5ra4=)
4: jGolEufnyPDfW166GsYrvcDadWI.roa (hash: MhUSPPX1/ZIFQ+uQDE4vWXmxQ4zd9lEULvZBslHM2Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/_-BD2zfqJckthc5lp20aTlE2JKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/_-BD2zfqJckthc5lp20aTlE2JKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-BD2zfqJckthc5lp20aTlE2JKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:8a:62:b0:b0:1e:0c:69:93:80:fd:e0:b6:d3:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe043db37ea25c92d85ce65a76d1a4e513624aa
Validity
Not Before: Jul 28 21:01:42 2026 GMT
Not After : Jul 29 21:01:42 2026 GMT
Subject: CN=84b5e08753932d318d4cd1d6013c8a93042ece4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:15:46:11:ab:8e:d6:ef:d8:07:58:7b:82:92:
74:ab:97:18:11:11:b2:59:60:7d:46:7e:30:2d:6b:
1a:f8:89:b9:7f:d4:a9:b7:8c:41:42:12:3d:4d:60:
16:29:eb:ca:34:28:59:13:8e:bd:7f:32:b0:e7:af:
f2:0c:ee:07:f5:03:25:0d:d3:25:06:42:75:60:75:
ae:c6:11:c5:54:2c:cb:cc:a0:14:9b:ee:8d:ff:30:
99:56:e9:a3:d5:43:79:04:63:80:91:c9:6e:23:68:
58:06:11:d3:aa:79:b6:cb:2f:44:d4:5d:99:f4:74:
24:fd:ae:a6:54:39:80:0d:ba:ac:01:44:40:d4:bb:
7d:9c:3d:32:39:eb:65:20:78:d2:cd:84:6d:16:0f:
e0:d5:f1:e8:ec:d8:46:1e:94:1b:af:78:19:5e:18:
ee:cb:ce:a2:12:96:45:47:ff:ea:cc:ff:30:b7:25:
7f:95:89:17:47:f0:55:93:b3:08:bd:21:79:50:0a:
48:b3:47:a1:c9:7b:da:64:fc:73:43:38:0e:73:0a:
d2:00:e6:8f:b0:7c:d1:98:72:ae:2b:30:a5:6a:2e:
e6:df:e8:ec:59:1e:bd:1f:a7:df:ab:7d:cc:30:00:
9a:dd:70:05:2c:fd:0b:4e:2a:8d:ae:78:7d:00:f7:
f3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B5:E0:87:53:93:2D:31:8D:4C:D1:D6:01:3C:8A:93:04:2E:CE:4F
X509v3 Authority Key Identifier:
keyid:FF:E0:43:DB:37:EA:25:C9:2D:85:CE:65:A7:6D:1A:4E:51:36:24:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-BD2zfqJckthc5lp20aTlE2JKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/_-BD2zfqJckthc5lp20aTlE2JKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/_-BD2zfqJckthc5lp20aTlE2JKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ef:d0:be:6f:97:07:1d:29:f0:43:f5:47:7a:88:4d:25:a4:
f4:f8:a4:78:dc:9c:53:5d:99:75:c5:3d:71:32:7a:63:d2:bb:
b8:1b:43:65:a9:e8:eb:35:55:61:05:b2:17:37:1a:35:7c:d5:
55:8f:be:1e:59:56:9a:79:c0:3f:5e:26:fb:51:fb:d9:a5:4b:
2c:82:47:c8:8f:3f:cc:4e:b4:21:ee:b2:74:1a:b1:99:b1:17:
03:1d:1e:ba:ac:57:f5:a5:b9:b6:08:95:74:8f:80:fd:3c:f2:
6c:0a:18:07:01:0c:0a:c2:de:e6:e5:06:46:f7:54:f8:26:62:
f5:20:6b:54:43:61:0a:46:c6:99:8d:ea:82:dd:9b:26:03:de:
62:c1:d3:09:06:a6:85:cd:52:b1:4f:f9:a3:15:5f:44:ac:d6:
1a:c9:db:da:dd:8d:e5:9a:8e:a9:92:3c:04:6f:1a:80:15:10:
52:5e:b8:78:74:3b:5f:7f:04:c8:20:87:22:ca:f2:4f:40:70:
bc:43:2d:58:de:51:6e:79:f2:a4:03:7e:86:e9:84:f7:51:98:
b2:cc:00:26:45:c0:91:0a:45:f3:e7:e3:38:0d:67:5f:12:77:
ab:cf:5e:3b:a8:30:41:ef:fc:43:68:d2:8f:42:0a:0c:7f:31:
ec:4b:01:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:20:15 2026 by rpki-client