Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
File: mR5LF54JU7nsxYWtmFmgC-NWgAE.mft (raw, json)
Hash identifier: PalfyvhWJTMuF49/vED2CbSPayao+D/tiwhVEggAUks=
Subject key identifier: 08:16:19:A2:F5:68:40:D0:84:A9:09:39:51:4A:3D:A8:01:D4:86:5C
Authority key identifier: 99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
Certificate issuer: /CN=991e4b179e0953b9ecc585ad9859a00be3568001
Certificate serial: 019FABD0FDB212827255BF3FF448AA105821
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
Manifest number: 19D8
Signing time: Wed 29 Jul 2026 03:00:28 +0000
Manifest this update: Wed 29 Jul 2026 03:00:28 +0000
Manifest next update: Thu 30 Jul 2026 03:00:28 +0000
Files and hashes: 1: KFiiFWif923SIcwC9nBmJ-HUVJ4.roa (hash: ycwpSj4ZG3+CrkzSV++20ftzs6baQIacEYL2lp7sLR0=)
2: bQVjKkmobhkw7mkwIs0nkBnkqic.roa (hash: 8Om2d8lOTV+LsZTeylJMIewyhtQBsCBhqCI89TKYwM0=)
3: mR5LF54JU7nsxYWtmFmgC-NWgAE.crl (hash: +N+Uyyw+1eHp7iXR0VNRG5YyPBSLNC6UsXHZUNMZckc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d0:fd:b2:12:82:72:55:bf:3f:f4:48:aa:10:58:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991e4b179e0953b9ecc585ad9859a00be3568001
Validity
Not Before: Jul 29 03:00:28 2026 GMT
Not After : Jul 30 03:00:28 2026 GMT
Subject: CN=081619a2f56840d084a90939514a3da801d4865c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:17:93:c3:e8:83:8f:98:7a:ad:bf:fc:a5:c7:
b7:cd:bb:a3:2f:1f:d1:33:e8:bf:71:16:9e:76:50:
d6:10:1e:61:37:f5:91:4d:87:82:b8:08:7c:13:24:
82:d0:48:5c:e3:0e:12:54:86:c4:9a:10:d7:d2:40:
3a:64:c1:d8:d9:b8:3e:9b:b4:05:ed:35:53:f1:c8:
4e:de:be:c7:45:18:02:31:e2:49:78:3f:1b:64:4b:
0b:42:34:06:0b:ba:6f:ea:7a:ed:d2:16:d6:45:21:
de:ac:95:b6:52:ea:fc:6e:4d:2a:dd:c0:31:b7:2e:
ed:57:18:99:99:94:15:b2:14:6b:fb:a3:40:36:76:
77:81:c4:d4:82:5b:f8:00:1b:f2:36:88:76:7f:ca:
8a:21:a0:2e:c4:14:ef:74:01:15:e7:ed:f3:7a:cb:
65:a4:a1:6a:a2:54:07:76:97:56:eb:3e:88:be:f4:
48:64:e2:5f:0f:18:13:62:8c:b6:0f:4b:0d:73:a1:
d0:40:78:71:e7:64:2f:35:a8:5c:b0:5b:b4:5a:97:
20:69:c7:19:a4:e8:7b:40:b8:ca:46:cc:47:ef:a9:
f8:0b:95:a9:e0:15:9f:31:84:11:31:c9:1a:97:b9:
e9:f2:f0:86:df:49:03:0d:be:6b:f7:57:90:42:71:
f5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:16:19:A2:F5:68:40:D0:84:A9:09:39:51:4A:3D:A8:01:D4:86:5C
X509v3 Authority Key Identifier:
keyid:99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ff:a8:45:d4:83:31:9c:93:8d:d5:2a:6c:01:a1:fa:87:04:
2c:81:fd:96:da:38:b9:73:fa:cb:3c:14:45:53:3e:c8:29:f1:
1d:9a:fe:0c:f2:77:20:4d:71:a8:f9:df:7f:e2:ef:60:2b:c1:
14:93:8b:5e:15:21:57:22:8a:6b:44:9d:d8:e9:ff:47:0e:54:
08:2c:f5:43:56:e1:02:27:73:46:ec:54:c4:33:8a:d1:b9:8f:
fc:3b:12:eb:ef:8e:98:5e:d0:ef:95:5b:e9:c0:0d:8a:14:de:
5f:df:6f:74:e0:42:44:84:a9:23:cd:bb:22:6e:37:cf:4c:fb:
f9:4c:b4:f4:ab:23:6f:e4:60:12:58:f5:2b:76:76:ba:40:7b:
1a:0c:7c:47:54:ab:c3:1e:2f:32:2c:93:03:b7:5e:82:1b:64:
77:07:9c:22:30:f3:63:cb:2e:d5:24:b0:a0:2f:e6:7e:04:a6:
29:a4:8d:11:3f:21:fb:e7:07:46:4f:21:93:35:5d:c2:63:77:
da:73:76:a5:f1:c2:13:cc:e9:22:e1:a0:81:75:6d:ec:d6:1c:
6e:1a:a1:19:82:ba:a0:a8:cd:10:1c:57:d7:24:33:43:f4:7f:
0a:b8:d5:84:7f:fb:fe:ce:5d:03:d2:7d:57:c5:88:90:17:8e:
0f:f2:61:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:43:26 2026 by rpki-client