Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
File: IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft (raw, json)
Hash identifier: qJ6NjljqG9WCEw/y6bcef1WvilNkZHXCI1nwOn+vQyE=
Subject key identifier: 5B:F1:97:F8:4B:B7:94:3D:60:1E:12:54:7C:F8:F6:52:3A:35:80:DA
Authority key identifier: 21:0D:1C:0D:B5:AA:18:80:D7:74:7E:22:F1:DB:F4:71:6D:31:01:A9
Certificate issuer: /CN=210d1c0db5aa1880d7747e22f1dbf4716d3101a9
Certificate serial: 019FACAD0A98C96B30ED11534FBCB995E728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ0cDbWqGIDXdH4i8dv0cW0xAak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
Manifest number: 09C5
Signing time: Wed 29 Jul 2026 07:00:49 +0000
Manifest this update: Wed 29 Jul 2026 07:00:49 +0000
Manifest next update: Thu 30 Jul 2026 07:00:49 +0000
Files and hashes: 1: IQ0cDbWqGIDXdH4i8dv0cW0xAak.crl (hash: x5mKvW+Vr1/mz8/ixHBEQR/3qFHtA98iHVPQLBLCxDU=)
2: hwKJwCCAFCL_7LuTGUs9t1cSL7E.roa (hash: 8W8T46xmoGGEFuN0xJIwYy5B+d+w5bYaaExN07s/4nM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQ0cDbWqGIDXdH4i8dv0cW0xAak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ad:0a:98:c9:6b:30:ed:11:53:4f:bc:b9:95:e7:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=210d1c0db5aa1880d7747e22f1dbf4716d3101a9
Validity
Not Before: Jul 29 07:00:49 2026 GMT
Not After : Jul 30 07:00:49 2026 GMT
Subject: CN=5bf197f84bb7943d601e12547cf8f6523a3580da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c5:65:14:73:2b:69:11:67:0e:aa:7b:53:34:
fb:b4:c4:0e:31:13:6a:ba:bb:bd:5b:9d:8d:8c:f0:
8c:72:b9:ec:66:d5:9f:b5:e3:e9:fd:cf:71:7f:a8:
c5:52:31:09:07:ba:24:68:51:24:84:e4:ee:f0:08:
47:f2:21:b6:28:bb:18:36:01:af:67:8d:06:51:08:
ba:eb:2b:af:09:2e:71:71:e5:b2:7a:94:cb:25:de:
14:c6:6f:88:64:25:55:3c:6a:1d:fb:45:d6:c6:0b:
dd:c8:08:37:1b:e6:c2:bc:c7:18:85:8e:f6:37:a1:
fe:1d:91:7b:31:d2:d0:f8:a9:56:b2:9a:e5:77:dc:
4b:24:d5:48:45:89:48:89:3a:55:e2:c2:b2:52:8d:
6f:3e:d6:8e:2f:0e:7a:05:0d:00:5a:d5:ee:fa:d7:
67:16:62:81:74:5d:73:84:07:7c:91:bd:a1:a8:f6:
ef:07:5e:9f:84:59:16:34:54:8f:17:51:11:d9:3e:
0a:24:ae:5b:90:bb:fd:06:86:84:df:72:ed:38:8a:
5c:bc:17:60:ae:4e:c7:6b:f0:08:a0:86:66:d0:bc:
ec:78:1c:3a:21:35:4c:f6:a5:24:b9:63:b9:23:0e:
82:b6:b7:f7:02:bb:73:fe:07:dd:b0:d5:2c:6b:8c:
c5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F1:97:F8:4B:B7:94:3D:60:1E:12:54:7C:F8:F6:52:3A:35:80:DA
X509v3 Authority Key Identifier:
keyid:21:0D:1C:0D:B5:AA:18:80:D7:74:7E:22:F1:DB:F4:71:6D:31:01:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ0cDbWqGIDXdH4i8dv0cW0xAak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:d0:b3:fc:bd:54:a6:52:fe:a6:00:b0:cb:55:79:ae:95:35:
51:23:e8:dd:e4:2a:ed:b5:69:5d:d0:4d:b1:5d:60:ef:d5:48:
fb:dc:24:66:2d:36:3a:7b:d0:1e:f2:9a:02:22:55:4d:5f:7b:
57:7c:35:41:bc:0e:92:63:33:b0:25:f1:92:ce:91:28:b4:e0:
73:23:82:48:38:81:a8:71:d4:bf:1a:6c:89:41:85:8d:55:d1:
05:6c:b0:61:5e:e3:78:6f:0d:cf:26:49:6e:36:b0:05:19:ba:
37:d3:5e:77:cb:95:fc:df:80:fb:b0:c9:eb:c0:b2:9f:58:14:
23:33:92:15:43:1b:6d:7d:cf:46:0b:5d:c4:46:3f:1a:ad:60:
a1:f5:4b:19:54:49:77:3e:d9:dc:d7:ef:db:21:3a:17:18:56:
22:b4:db:eb:d9:05:ac:14:39:11:5c:60:ae:1a:da:8b:84:f8:
ce:8f:89:5e:9d:7e:dc:7d:f7:0f:0e:11:18:66:8d:79:19:42:
8b:7e:47:a6:a2:0b:46:7d:5a:49:84:33:ee:2f:de:ca:18:b1:
f9:46:08:07:50:c7:fc:f4:32:38:62:97:cb:c2:fb:e9:b2:a6:
1b:eb:ca:54:7f:1d:16:f4:f0:41:bc:1f:eb:74:77:39:1b:96:
c1:9d:05:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:57:52 2026 by rpki-client