Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.mft
File: Cad0S6nE8QGkiT5HlnacSRNRBns.mft (raw, json)
Hash identifier: zPsWhcMVxR5YxQlZrmc2WOApMWthA2mKIowJu3rEFWU=
Subject key identifier: 20:1A:7D:F2:20:F7:7C:E9:38:F7:B4:D2:92:53:3A:0E:B7:42:C2:75
Authority key identifier: 09:A7:74:4B:A9:C4:F1:01:A4:89:3E:47:96:76:9C:49:13:51:06:7B
Certificate issuer: /CN=09a7744ba9c4f101a4893e4796769c491351067b
Certificate serial: 019FA8991B64388BBF9728378916086BA247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cad0S6nE8QGkiT5HlnacSRNRBns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.mft
Manifest number: D2
Signing time: Tue 28 Jul 2026 12:00:33 +0000
Manifest this update: Tue 28 Jul 2026 12:00:33 +0000
Manifest next update: Wed 29 Jul 2026 12:00:33 +0000
Files and hashes: 1: 6ktBmS6SHlobAW5cvJeOvutHtZs.asa (hash: 7DpGNlMiGk8A1TQJ6XbwsyG1xZX9cAbn/j2aQrzkLSo=)
2: Cad0S6nE8QGkiT5HlnacSRNRBns.crl (hash: l12RJ3FwnsbpnUb6MUMNb0DrvKuiiThTJC3t+i0yIPs=)
3: P4cDGWr4IUzLM9lVW7E5k2o6h84.roa (hash: vGdbqg/8XvG5GvERHecgi5UEllssjDGD9X9pB1AdTEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cad0S6nE8QGkiT5HlnacSRNRBns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:1b:64:38:8b:bf:97:28:37:89:16:08:6b:a2:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a7744ba9c4f101a4893e4796769c491351067b
Validity
Not Before: Jul 28 12:00:33 2026 GMT
Not After : Jul 29 12:00:33 2026 GMT
Subject: CN=201a7df220f77ce938f7b4d292533a0eb742c275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:db:30:cf:8d:60:4a:60:42:27:83:75:b3:b7:
3c:e8:65:bd:70:3d:85:ea:77:75:3f:ca:12:a6:c0:
00:1d:82:42:71:1f:53:3d:16:bd:ae:85:d7:86:4b:
ff:b5:55:3a:ce:96:e3:23:37:0a:f1:12:7c:fc:47:
8e:25:ac:8b:ea:97:29:df:c3:57:1f:01:e1:37:3d:
07:aa:55:0e:0a:57:ea:9d:11:2c:72:ec:51:45:a8:
63:37:af:6a:dc:ba:2e:7e:19:83:85:71:b0:ca:ab:
6a:72:2e:25:7d:71:d4:9e:5c:69:96:f5:c8:57:de:
07:39:db:68:ce:c8:79:a5:01:20:73:4c:c9:18:e3:
24:be:97:1e:3d:bf:8c:36:8e:12:43:23:b3:2e:75:
8b:11:a1:cb:8c:72:92:94:83:54:27:3e:6d:30:8a:
84:bc:1a:1f:87:6b:c0:8e:99:a5:49:71:4a:d2:91:
cc:a3:97:67:f2:e5:84:9f:ee:b9:dd:62:e7:83:69:
e1:e2:1e:8b:da:42:7a:44:c0:a5:f3:f7:22:4c:c8:
aa:80:76:70:5c:51:23:8c:5b:95:bd:af:ac:3a:df:
68:f9:23:b4:cd:e5:2d:99:7c:ff:44:96:27:c2:dd:
3b:79:f0:9d:43:1d:65:06:43:cf:ab:fc:90:a0:de:
31:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1A:7D:F2:20:F7:7C:E9:38:F7:B4:D2:92:53:3A:0E:B7:42:C2:75
X509v3 Authority Key Identifier:
keyid:09:A7:74:4B:A9:C4:F1:01:A4:89:3E:47:96:76:9C:49:13:51:06:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cad0S6nE8QGkiT5HlnacSRNRBns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:e4:b4:e5:fa:71:08:d7:5b:96:ca:43:41:cb:1d:04:70:fd:
fb:61:8a:76:22:7c:63:80:b8:f6:cd:25:c0:c9:eb:cf:d6:06:
8d:d2:17:ff:8e:b8:f9:e9:f4:a2:29:5a:fd:75:de:f1:71:a6:
72:88:12:97:a7:d9:5c:42:1c:a3:ca:3f:db:00:5a:22:dd:d8:
3a:62:45:9b:fd:4c:b6:11:c1:cd:7d:cc:b4:65:92:e9:c8:a4:
7b:48:0e:1c:ad:4f:83:34:1f:cc:5c:5e:bb:47:75:d4:48:cc:
f1:f8:6b:48:d9:52:28:24:ca:d7:4f:67:24:e3:52:aa:4a:f2:
bf:04:f2:6b:11:94:c6:65:15:06:21:8a:b6:77:7d:31:45:30:
57:96:6a:97:b4:2a:6d:3b:f7:6c:37:3a:ba:00:4c:bb:4a:b3:
6a:87:24:9b:04:bc:ae:77:a5:d1:b0:86:78:76:40:e2:1b:75:
58:2d:98:36:4f:4e:ea:19:a4:a9:49:06:28:7a:4e:ca:7e:5c:
5b:2b:28:7a:87:15:ba:9b:d3:a9:40:16:1e:57:6a:ef:65:8b:
df:40:39:e9:6b:d5:86:e3:ee:2c:35:05:39:a6:5e:23:63:3d:
5e:9b:9f:e7:bc:c3:29:3f:86:eb:54:64:04:23:68:58:d1:e6:
2b:f2:aa:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omRtkOIu/lyg3iRYIa6JHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YTc3NDRiYTljNGYxMDFhNDg5M2U0Nzk2NzY5YzQ5MTM1
MTA2N2IwHhcNMjYwNzI4MTIwMDMzWhcNMjYwNzI5MTIwMDMzWjAzMTEwLwYDVQQD
EygyMDFhN2RmMjIwZjc3Y2U5MzhmN2I0ZDI5MjUzM2EwZWI3NDJjMjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldswz41gSmBCJ4N1s7c86GW9cD2F
6nd1P8oSpsAAHYJCcR9TPRa9roXXhkv/tVU6zpbjIzcK8RJ8/EeOJayL6pcp38NX
HwHhNz0HqlUOClfqnREscuxRRahjN69q3LoufhmDhXGwyqtqci4lfXHUnlxplvXI
V94HOdtozsh5pQEgc0zJGOMkvpcePb+MNo4SQyOzLnWLEaHLjHKSlINUJz5tMIqE
vBofh2vAjpmlSXFK0pHMo5dn8uWEn+653WLng2nh4h6L2kJ6RMCl8/ciTMiqgHZw
XFEjjFuVva+sOt9o+SO0zeUtmXz/RJYnwt07efCdQx1lBkPPq/yQoN4xxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCAaffIg93zpOPe00pJTOg63QsJ1MB8GA1UdIwQY
MBaAFAmndEupxPEBpIk+R5Z2nEkTUQZ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2FkMFM2bkU4UUdraVQ1SGxuYWNTUk5SQm5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84NWExOTAtMDJhYS00M2JmLThlMDYt
OTcyNzgzNDFhNjFmLzEvQ2FkMFM2bkU4UUdraVQ1SGxuYWNTUk5SQm5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi84NWExOTAtMDJhYS00M2JmLThlMDYtOTcyNzgzNDFhNjFm
LzEvQ2FkMFM2bkU4UUdraVQ1SGxuYWNTUk5SQm5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyOS05fpx
CNdblspDQcsdBHD9+2GKdiJ8Y4C49s0lwMnrz9YGjdIX/464+en0oila/XXe8XGm
cogSl6fZXEIco8o/2wBaIt3YOmJFm/1MthHBzX3MtGWS6cike0gOHK1PgzQfzFxe
u0d11EjM8fhrSNlSKCTK109nJONSqkryvwTyaxGUxmUVBiGKtnd9MUUwV5Zql7Qq
bTv3bDc6ugBMu0qzaockmwS8rnel0bCGeHZA4ht1WC2YNk9O6hmkqUkGKHpOyn5c
WysoeocVupvTqUAWHldq72WL30A56WvVhuPuLDUFOaZeI2M9Xpuf57zDKT+G61Rk
BCNoWNHmK/Kq8Q==
-----END CERTIFICATE-----
Generated at Tue Jul 28 14:49:10 2026 by rpki-client