Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/dF5pC2XdK2La_T6uUwne-ky1x8Q.mft
File: dF5pC2XdK2La_T6uUwne-ky1x8Q.mft (raw, json)
Hash identifier: /HLBFAGjHSaFM+rZYAOEakt/MMYwx1a/5I/3QruoAPc=
Subject key identifier: 84:AD:B8:13:FC:6B:A8:AA:65:5E:80:99:6B:DA:64:22:F1:75:5C:B8
Authority key identifier: 74:5E:69:0B:65:DD:2B:62:DA:FD:3E:AE:53:09:DE:FA:4C:B5:C7:C4
Certificate issuer: /CN=745e690b65dd2b62dafd3eae5309defa4cb5c7c4
Certificate serial: 019FAA889096F14E07D73E4B59AF353BCDC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dF5pC2XdK2La_T6uUwne-ky1x8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/dF5pC2XdK2La_T6uUwne-ky1x8Q.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:44 +0000
Manifest this update: Tue 28 Jul 2026 21:01:44 +0000
Manifest next update: Wed 29 Jul 2026 21:01:44 +0000
Files and hashes: 1: Bx-vAb6JcdMAkqoFkx5QchgWBPw.roa (hash: tXWgzC52m15bMpTie/nAe4jMMYYoA58oLlL3abiDdMc=)
2: V_c0MczS3zUpZJNTtQxngj6lCXY.roa (hash: I3RW9QlgWDHOKk+vzXe99y6FDPghIiCTxEZoxiZd0LQ=)
3: dF5pC2XdK2La_T6uUwne-ky1x8Q.crl (hash: gYkBfPSZHQ757F3e8009Y8IGIdRImi6mHgawQswWaFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/dF5pC2XdK2La_T6uUwne-ky1x8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/dF5pC2XdK2La_T6uUwne-ky1x8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/dF5pC2XdK2La_T6uUwne-ky1x8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:90:96:f1:4e:07:d7:3e:4b:59:af:35:3b:cd:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745e690b65dd2b62dafd3eae5309defa4cb5c7c4
Validity
Not Before: Jul 28 21:01:44 2026 GMT
Not After : Jul 29 21:01:44 2026 GMT
Subject: CN=84adb813fc6ba8aa655e80996bda6422f1755cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d1:07:be:47:c2:36:9e:0f:93:70:0d:75:98:
11:92:2f:69:17:45:2d:30:b3:ac:f3:71:a7:6d:00:
48:66:7d:0d:78:f9:46:ac:4d:82:fd:c8:d8:cf:09:
5b:b9:f6:d1:c8:d3:b4:c9:67:91:0a:e7:3f:d0:5a:
50:92:96:52:39:e3:af:23:17:b0:a3:12:14:f9:dd:
e4:a0:50:5c:48:89:6c:48:7f:2f:bf:57:07:0b:dc:
4d:dc:5a:7c:da:7e:5f:fd:55:2f:0f:ee:4c:eb:b6:
ce:76:d2:46:a1:be:d8:a6:e1:20:eb:0c:89:be:dc:
bc:b7:fd:c6:26:8a:08:6b:e0:0f:e1:ac:42:2c:2e:
36:bf:28:98:8f:a6:14:82:d3:e4:b2:3c:be:09:ab:
7a:0a:39:aa:a9:a3:52:7e:df:71:88:62:6a:20:34:
7c:8b:ca:b8:8e:fb:d4:05:8c:5c:35:63:d7:a9:41:
a1:8d:a2:77:b6:ac:86:94:94:b6:4c:f0:b8:e7:c7:
ec:78:ee:43:65:e5:fc:d2:38:51:a9:2d:16:60:ea:
2d:56:1c:5a:12:5f:40:7d:98:0c:9d:fd:db:2b:42:
fd:0c:34:2b:c2:1e:6e:d4:a8:33:94:22:f6:73:b7:
e3:b9:eb:7f:b0:de:76:a7:b9:89:b7:3e:da:37:4c:
7c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AD:B8:13:FC:6B:A8:AA:65:5E:80:99:6B:DA:64:22:F1:75:5C:B8
X509v3 Authority Key Identifier:
keyid:74:5E:69:0B:65:DD:2B:62:DA:FD:3E:AE:53:09:DE:FA:4C:B5:C7:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dF5pC2XdK2La_T6uUwne-ky1x8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/dF5pC2XdK2La_T6uUwne-ky1x8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/dF5pC2XdK2La_T6uUwne-ky1x8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e6:4a:80:df:6c:b9:5c:8f:0f:e4:52:2a:8b:1d:7d:d3:3f:
9c:d8:4b:cb:4f:0b:23:1e:2c:1f:3f:bf:51:77:0a:48:e4:44:
cf:f8:7c:f4:81:2b:8e:18:06:48:1d:bc:d9:67:2d:53:8c:aa:
64:bf:c5:1d:3c:8f:17:2b:7c:73:30:64:40:bf:7b:99:33:60:
90:71:49:e2:38:f0:58:e3:0f:c5:e6:7b:41:89:e1:9c:df:b3:
6f:70:21:8b:03:cb:d9:3b:a1:9d:02:aa:0f:f2:6a:8e:73:31:
56:4e:23:f2:54:5b:69:07:40:3c:03:f8:35:64:6a:4d:23:4c:
da:00:dd:86:f8:a1:5a:bb:58:67:e4:f8:dc:39:8c:c5:21:f4:
04:6d:51:f7:b1:f4:72:2e:7c:89:f7:3a:59:5a:60:0a:13:34:
8c:d9:0d:43:de:43:3a:17:da:10:4f:0a:85:65:74:19:db:a1:
14:a5:f6:25:5c:c1:03:a0:d8:b1:e2:a3:f1:df:18:96:3c:c2:
82:e3:ab:4c:da:86:60:fa:2b:b7:1d:03:2e:83:9f:a1:8f:e8:
b1:16:69:74:f4:c1:aa:91:25:d9:d9:b9:2d:e4:62:51:83:78:
94:d1:2d:e8:65:4b:1f:18:a3:ed:58:e5:1d:55:d8:3f:a1:56:
4f:d6:02:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:57:20 2026 by rpki-client