Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
File: 0q5eM4eU5g1di1I72yto7ErHYs4.mft (raw, json)
Hash identifier: BVE7qfeuZ2cv1PIZxZhDac8/H2C/lx5yTrszxPt5ius=
Subject key identifier: D4:9C:11:52:BE:6B:22:BC:53:73:FE:E1:BD:06:B5:9A:49:42:F2:27
Authority key identifier: D2:AE:5E:33:87:94:E6:0D:5D:8B:52:3B:DB:2B:68:EC:4A:C7:62:CE
Certificate issuer: /CN=d2ae5e338794e60d5d8b523bdb2b68ec4ac762ce
Certificate serial: 019FA9E328A62E0BC70E0176E9D0C977E425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 18:01:04 +0000
Manifest this update: Tue 28 Jul 2026 18:01:04 +0000
Manifest next update: Wed 29 Jul 2026 18:01:04 +0000
Files and hashes: 1: 0jE3hZkv3e72FXBQNOB1Z87I7hE.roa (hash: ufiFlOn3uZQmY7BK2PstScG7xVreKj7F3Ayx+q4ondk=)
2: 0q5eM4eU5g1di1I72yto7ErHYs4.crl (hash: rYZoUv4sQ3Hnt2kHY53VxsRy39dkyP+Pwq5h9fFiPLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:28:a6:2e:0b:c7:0e:01:76:e9:d0:c9:77:e4:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ae5e338794e60d5d8b523bdb2b68ec4ac762ce
Validity
Not Before: Jul 28 18:01:04 2026 GMT
Not After : Jul 29 18:01:04 2026 GMT
Subject: CN=d49c1152be6b22bc5373fee1bd06b59a4942f227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b2:ab:3d:ff:a7:9f:71:6e:b5:95:55:77:ee:
2a:c7:2f:7c:68:4d:f9:14:43:82:50:2f:c0:d9:ab:
ae:00:9d:b4:7c:a2:38:71:74:10:23:e2:2e:2c:06:
8e:4b:c7:ea:57:e2:ce:c0:b2:bc:4f:ba:55:ef:ff:
56:52:43:b4:a7:fb:f8:81:4b:a7:26:97:24:e2:e0:
8e:71:ec:77:8e:1a:cd:86:ad:29:b3:a9:25:47:bd:
b2:14:a8:3f:0e:7e:06:5f:1c:e8:52:47:29:17:9d:
d0:69:b5:32:a8:a9:9a:af:b0:56:d8:03:f6:4f:08:
ef:77:7b:00:33:68:f2:a9:98:3f:b9:07:4a:ab:78:
5d:43:4b:c0:6a:4f:cf:d5:ef:7c:53:be:55:c4:16:
62:11:7c:b5:4e:ec:67:e4:9b:91:ef:98:c3:59:51:
9c:10:44:a6:94:1b:83:bb:13:34:36:7d:43:5d:1d:
fd:a5:db:50:60:08:9c:5a:2c:de:54:22:31:c2:61:
54:97:20:d2:e9:ae:fe:e2:c2:03:0f:87:11:f3:02:
dd:f4:f5:df:a7:8b:1a:e9:91:4b:1c:89:06:57:6e:
a4:21:19:4c:20:09:3a:7a:c1:e9:61:75:3f:88:bc:
3e:6b:2a:09:d3:e4:cc:aa:99:9d:8c:40:b7:3f:d2:
e8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9C:11:52:BE:6B:22:BC:53:73:FE:E1:BD:06:B5:9A:49:42:F2:27
X509v3 Authority Key Identifier:
keyid:D2:AE:5E:33:87:94:E6:0D:5D:8B:52:3B:DB:2B:68:EC:4A:C7:62:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ae:db:12:56:29:b8:35:83:f9:f4:07:35:f2:e6:3e:5b:cb:
7b:fc:99:35:07:bd:7c:61:d0:bd:41:b4:05:13:de:33:74:8b:
bc:e4:33:9f:4b:80:3f:69:bc:4b:2f:62:fe:16:52:b8:a5:af:
0e:c3:fb:ce:af:ab:a1:66:d4:9b:35:ca:ce:21:0c:aa:73:8e:
c5:51:2d:31:cc:db:ac:9b:d9:dc:ca:54:04:f7:12:73:13:0a:
32:6a:3e:3e:e3:2d:99:c6:0e:b4:ea:63:d9:f3:70:f1:2b:07:
f1:87:a1:fd:e1:ab:69:4b:32:78:8e:d6:69:89:4b:52:b4:67:
3f:72:5b:74:3b:24:dd:05:c3:3a:59:19:25:28:7d:5e:dc:68:
6a:9a:88:0d:c9:fc:29:2c:16:b6:94:4d:9a:ee:fb:60:bc:f9:
26:dc:92:ac:a9:12:d1:b3:a3:21:19:87:3a:63:aa:00:23:af:
79:de:26:c7:3b:d4:25:78:6b:fd:5b:c8:c4:0d:10:05:db:e3:
c0:8b:1c:fb:4f:1f:22:23:61:e4:0e:a1:46:78:84:7d:33:07:
ab:4d:f0:93:86:bd:d2:74:c3:9c:62:d2:8d:bb:d7:92:9b:e7:
3e:75:88:92:47:db:b1:b3:f3:6a:87:4f:71:b3:1d:d6:bf:76:
c2:ac:76:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:34:43 2026 by rpki-client