Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
File: urXl5gHL9dGdENTbR2qSOzs2-Cc.mft (raw, json)
Hash identifier: W6rTJ5srb/GBVayqrcygq0GjUDWYQCOoE/vv7EUPQkc=
Subject key identifier: A5:40:ED:98:F2:61:6A:C2:5A:09:C1:3D:B8:E9:77:F5:FA:49:11:F4
Authority key identifier: BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27
Certificate issuer: /CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
Certificate serial: 019FA8623DF057CC0F4C986919AA5F5BFC32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
Manifest number: 19D6
Signing time: Tue 28 Jul 2026 11:00:38 +0000
Manifest this update: Tue 28 Jul 2026 11:00:38 +0000
Manifest next update: Wed 29 Jul 2026 11:00:38 +0000
Files and hashes: 1: 8AC5hr87IvNKc2uj2TEkr-2Z034.asa (hash: qt1zTECZT/ge+oHl/7hzl6IVpmrHO5U65Ej5M0jkaj4=)
2: aVA1AKv4zyiYGjxlH-mPLS_YW_U.roa (hash: SWC8hkYko2ZloQTKC6mTiTzHPA/u0KsHmhT+8vSmcgE=)
3: urXl5gHL9dGdENTbR2qSOzs2-Cc.crl (hash: E9bg7Gu8k4GBlMjbL+xiSKqhBwKoIUjoRxWsLkzRfwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:3d:f0:57:cc:0f:4c:98:69:19:aa:5f:5b:fc:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
Validity
Not Before: Jul 28 11:00:38 2026 GMT
Not After : Jul 29 11:00:38 2026 GMT
Subject: CN=a540ed98f2616ac25a09c13db8e977f5fa4911f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6c:14:ad:97:90:35:37:94:cc:d7:5f:d5:95:
6f:1a:56:80:29:7d:d1:f8:35:f7:86:7a:34:d5:f0:
a0:db:26:c3:43:07:47:d5:87:59:45:20:26:a2:9c:
28:80:6c:cb:9c:83:f2:05:e2:22:d8:20:24:6b:59:
9c:dc:3b:af:08:3e:77:95:c1:42:30:63:96:76:96:
b2:53:4f:f0:cc:0a:d9:ee:d0:b4:87:7f:47:88:52:
9a:b5:5c:54:44:74:a3:fa:86:69:cc:2d:a8:f7:9c:
a1:dd:6a:4e:b2:f7:37:86:5c:bf:75:9a:82:77:f6:
9c:41:01:31:49:ce:5a:0a:fa:0e:04:d8:55:0d:d1:
1f:7a:34:7d:5c:b2:81:67:ed:e2:21:ef:ab:98:64:
1b:f1:76:8e:3d:b0:31:40:07:8f:34:1e:52:17:a8:
6a:56:1e:dd:ff:0b:f4:bc:31:ad:f3:72:3d:19:0c:
49:c2:e6:d5:60:5b:6f:c0:79:ee:10:25:a5:a2:5b:
4e:28:ca:b7:27:40:55:6f:34:2c:81:a7:65:21:fc:
45:b2:87:16:a9:dd:3d:8b:6b:a2:67:28:22:78:c0:
a8:48:9f:a8:b7:71:13:86:c0:79:24:66:3b:ee:94:
8b:31:86:00:d4:94:65:46:ce:4c:11:24:3c:c2:6b:
88:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:40:ED:98:F2:61:6A:C2:5A:09:C1:3D:B8:E9:77:F5:FA:49:11:F4
X509v3 Authority Key Identifier:
keyid:BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:78:e8:97:15:02:86:c9:31:0d:88:17:ba:c4:e4:38:04:62:
32:f7:21:a4:54:9d:34:bb:53:f1:60:0c:a3:74:d3:ee:54:fb:
b0:a6:a6:b6:c2:f0:f8:70:62:f0:a4:36:dd:66:79:b9:b0:bf:
5f:fa:95:3f:3f:b8:39:ac:56:ff:93:ef:9a:4c:55:ea:0c:a1:
d5:34:ba:a7:88:fd:c3:d8:27:48:13:fd:5d:88:7f:a2:f6:57:
6f:73:d8:7b:f9:b6:47:18:9c:20:c9:53:12:38:04:65:2b:72:
54:dd:77:de:88:59:88:00:df:bb:05:36:8c:df:5b:a6:c3:8c:
1d:a6:64:8b:94:00:83:d8:f8:c1:46:51:50:24:1a:e4:c6:a1:
26:d5:cd:01:48:25:30:cc:30:93:34:46:f9:95:7b:f9:d8:92:
1a:c2:e0:28:fa:d7:b2:60:77:de:bd:c3:c2:fe:c6:6c:c4:05:
02:29:2c:34:e7:45:1d:9e:eb:31:65:6e:28:51:e0:79:29:d6:
16:de:db:18:db:ae:3e:bb:da:cd:11:65:b0:e9:f6:d0:a4:82:
de:74:f6:cc:34:35:5a:35:f0:c3:b4:eb:53:36:08:65:c6:4c:
98:90:5f:97:d2:62:b2:92:2e:81:35:0d:c3:9c:6e:39:b7:4b:
a9:33:db:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:10:25 2026 by rpki-client