Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
File: bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft (raw, json)
Hash identifier: rFlzKgD4fCUnKLRIZo0e3OFcH0GollpR5eO66pgD1Uk=
Subject key identifier: E1:58:27:B4:D2:2E:67:C8:39:A1:55:A2:D1:E3:35:9A:C7:82:83:B7
Authority key identifier: 6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
Certificate issuer: /CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Certificate serial: 019FAA1A1C1583A3AEE4D8F60A728288FCE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
Manifest number: 11DA
Signing time: Tue 28 Jul 2026 19:01:05 +0000
Manifest this update: Tue 28 Jul 2026 19:01:05 +0000
Manifest next update: Wed 29 Jul 2026 19:01:05 +0000
Files and hashes: 1: 0fPiuwb4X2weC-gKDNJaEbSPHqw.roa (hash: S57h9JaZkZt0GA+n+fixlPL0kJI1rFB4fls5bIvI/yg=)
2: 9F4nFbGxWFyzlJVE1S__5b6FPCI.roa (hash: g0Q3yvsLaJ0f1xZGMnOTjSsR0ohn67wJH/LM7dSM5CA=)
3: NJlkPEbvZj17oZnTPoUJnz4aYHU.roa (hash: 1OOkVDVrLB0wggxypUryE2P0Q8in33IuC2Ho6AYkBaQ=)
4: OiGHdHjDagoWQKaQO3HU1k4kpCk.roa (hash: ncY1ht+Hk47ecphOn2OCGatMTSfBF/c3Xm8aYEEJupM=)
5: bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl (hash: JQe3FCYbF9okEGHjKWVl88iWFORgDQjauVPdy5sYJ5c=)
6: jDxSBMWSjohu5v628YkiKBdFRCw.roa (hash: y62O2BZCFUd+VdwqqDL8Xt8x+VuksK9H256l1hzQejU=)
7: vVhNtVNsCVeIUDedNR2pXiMXJ9I.roa (hash: Vxc5nIGp5qmqYCBfvRkwh/ne6MswcuhCDYcPNLnJgwM=)
8: yIi_9pn2RiEfjk2wP_JBX7exLC8.roa (hash: g2McMZYpikW6RC/p1orB3778Rd6w3UuRKA7o0A9GRfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:1c:15:83:a3:ae:e4:d8:f6:0a:72:82:88:fc:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Validity
Not Before: Jul 28 19:01:05 2026 GMT
Not After : Jul 29 19:01:05 2026 GMT
Subject: CN=e15827b4d22e67c839a155a2d1e3359ac78283b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e9:32:c6:de:84:16:d7:c5:71:6b:c0:6f:aa:
f1:45:11:99:54:7e:24:b9:6a:23:4c:72:7f:f8:a3:
7f:ed:b1:ed:50:85:fb:5c:52:9a:90:ed:e0:77:db:
70:07:d1:6c:05:d0:00:8e:01:20:6b:02:1f:79:33:
e0:36:32:34:b7:47:2d:d8:58:06:23:0f:1a:4c:db:
61:fe:60:c9:59:07:17:89:0f:4b:46:3c:39:1c:5c:
fc:af:a2:fb:c0:bf:86:7e:a3:c0:1a:77:40:f2:a6:
c0:6e:b6:a3:fd:ff:3d:bc:a9:d6:73:7a:37:00:42:
90:4a:1e:a6:dd:99:e4:ad:44:a4:50:d0:c1:81:dc:
23:26:c0:ae:38:a6:8e:2f:96:3b:ab:24:85:b7:51:
94:fe:1f:a0:20:59:73:96:13:81:91:d1:d2:2a:7b:
0f:ba:17:61:e6:d8:50:ed:04:42:0e:69:ad:ad:e7:
7e:61:47:f5:a1:c0:98:e9:e5:eb:d0:e1:de:ba:50:
97:c4:2e:3a:e7:2a:6b:3d:00:05:95:9a:7d:1e:c8:
1d:44:8a:45:58:1a:e9:53:b5:e2:df:4a:ce:43:bf:
35:4d:1c:4d:01:27:2b:fd:bc:28:50:a0:2d:94:16:
dd:d8:22:49:c3:50:e8:1b:9d:53:c0:27:56:14:3b:
10:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:58:27:B4:D2:2E:67:C8:39:A1:55:A2:D1:E3:35:9A:C7:82:83:B7
X509v3 Authority Key Identifier:
keyid:6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ef:04:b0:01:58:23:ee:70:83:cc:9b:56:41:59:2c:cf:d4:
35:9c:92:2a:94:44:ae:b9:3f:6a:ab:ee:49:38:3a:f0:6f:0c:
93:67:90:d7:49:de:6e:45:f1:e6:a4:a1:0e:58:10:53:d7:38:
af:21:cc:e1:9b:c7:52:a6:30:96:ff:0e:73:df:09:34:88:d8:
b3:0f:a0:af:15:2a:0b:90:d7:30:34:d1:3e:6d:8c:6a:1b:93:
e0:4a:a9:86:8e:bc:af:8f:6d:e2:14:f5:13:aa:38:ca:25:a3:
00:cc:1a:33:78:20:3b:06:bf:f7:35:9e:db:fe:a5:ee:79:34:
46:03:7a:37:9e:3d:7e:74:d0:cb:a1:f5:1f:c7:8d:e8:65:69:
f3:56:94:27:5e:b4:83:b6:8a:4c:6b:52:55:99:70:c6:8c:65:
af:d5:3d:dc:e9:d4:d9:f5:1e:88:6c:01:b0:81:a4:8a:84:0b:
33:e1:a5:ff:f9:9a:2a:38:a8:36:ba:6c:30:ba:7d:bc:fc:6f:
9e:08:00:82:26:e1:de:b7:2e:9a:09:3b:08:d3:c9:ed:97:1c:
7e:9c:ee:95:43:ab:09:14:04:0e:53:fd:30:93:eb:d3:0d:6e:
1e:eb:8c:21:e8:05:10:56:88:54:e2:66:96:83:5a:2b:2b:03:
19:bf:36:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:02:04 2026 by rpki-client