
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
File: V0U31U828UIjG8gXA4hyy2B7Iec.mft (raw, json)
Hash identifier: Y7AK649irr40V0NW9ipmdGw4CRkeahvidK0HyL6MrXs=
Subject key identifier: 41:6E:A8:8A:61:9D:5D:E7:E7:74:84:17:14:23:B6:30:2E:38:B2:74
Authority key identifier: 57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7
Certificate issuer: /CN=574537d54f36f142231bc817038872cb607b21e7
Certificate serial: 019FAB99F70EBE8C0F3BC6D4E67AC0324B59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
Manifest number: 19DA
Signing time: Wed 29 Jul 2026 02:00:21 +0000
Manifest this update: Wed 29 Jul 2026 02:00:21 +0000
Manifest next update: Thu 30 Jul 2026 02:00:21 +0000
Files and hashes: 1: EN3L4pyXEtd8agpR0WCbncdFo08.roa (hash: NJ7X+GYc10QZ6IeNjYC/5Bh9ragVjwZPuZ02BIahBWE=)
2: V0U31U828UIjG8gXA4hyy2B7Iec.crl (hash: rwyPHup5tyl0cp/6b/551HSG4z4Ii8cyCiVg7REOt3o=)
3: XqMHBcQ29GYlAXAHxl_tZSyNUyw.roa (hash: guYbephFWzsh8FHC2Qa9VPR7KtfEEUDQXbV2Oqjwf9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:99:f7:0e:be:8c:0f:3b:c6:d4:e6:7a:c0:32:4b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=574537d54f36f142231bc817038872cb607b21e7
Validity
Not Before: Jul 29 02:00:21 2026 GMT
Not After : Jul 30 02:00:21 2026 GMT
Subject: CN=416ea88a619d5de7e77484171423b6302e38b274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fd:92:84:5c:61:13:f9:35:a0:32:c7:6c:2d:
ff:33:77:9b:01:b0:30:bf:7c:3a:a5:34:1c:b8:f8:
79:17:23:20:d3:89:c3:87:6b:ff:28:59:6b:7f:a4:
7d:3f:d7:26:5b:e4:91:9c:60:06:37:be:b3:d0:c4:
89:22:2f:17:c6:9e:67:f0:c4:37:f5:2f:06:41:42:
e2:d3:e2:f3:28:02:f0:bf:ec:d2:2b:22:16:69:9f:
7c:39:f6:35:ff:1f:18:dd:f3:3b:b3:66:00:51:59:
c1:91:a4:88:3b:af:4d:c2:d4:71:60:cf:c5:26:77:
aa:fa:29:0d:dd:39:d1:c1:a2:66:8e:ed:8a:6f:7c:
ce:67:41:01:e0:23:b1:68:bb:93:3b:5c:2b:58:a4:
12:c8:b2:23:96:be:40:a3:a5:77:9f:24:2a:ea:7e:
43:7f:51:fe:3e:46:69:4e:72:4d:c7:98:b6:7f:7f:
23:24:bd:96:d1:b8:e3:1e:77:ef:bc:47:d4:fe:ee:
c5:5f:f0:0f:13:f3:04:c1:a0:8d:12:e4:12:1b:73:
ee:e8:ea:39:ed:5c:1a:75:23:a5:a8:60:57:2c:c4:
85:26:47:bd:3b:bf:ae:24:9b:4c:b1:23:99:39:00:
5b:b0:9d:34:f8:b3:e8:af:dc:e3:43:97:3a:0b:87:
14:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6E:A8:8A:61:9D:5D:E7:E7:74:84:17:14:23:B6:30:2E:38:B2:74
X509v3 Authority Key Identifier:
keyid:57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:3f:c2:4a:71:3c:96:78:98:04:aa:af:e1:57:ba:66:c2:70:
f4:89:99:4a:74:b8:1f:c4:4c:1e:8d:ac:6c:48:06:cb:5c:2b:
2b:87:d9:55:c9:c5:92:2d:18:a0:7c:dd:9c:52:9f:00:cb:f4:
93:13:a6:86:6e:5c:74:b6:05:d4:2e:ec:77:b7:cd:a5:c9:5c:
52:0e:82:4b:2a:33:9d:4f:95:c2:8b:88:96:04:a5:3b:d0:22:
dc:08:c1:e5:a4:c3:83:4d:41:f3:24:ef:da:e5:98:0a:68:e5:
7a:3e:f6:ff:84:95:35:ed:46:d8:69:fd:50:cb:03:15:2d:c2:
4b:38:e0:41:73:e4:ae:10:77:fa:77:22:d2:f5:b8:f7:26:74:
d8:ae:b3:db:85:de:eb:a5:57:24:89:2a:63:81:25:e2:ae:4a:
42:46:07:ce:c5:20:f7:4e:ab:b4:6e:88:7a:aa:23:e0:96:2b:
36:c9:ee:61:ca:1f:3e:47:5a:d9:a0:13:f1:5d:61:f9:c4:89:
c7:37:ea:90:8a:02:69:ea:ad:46:8e:c3:4b:aa:83:83:47:a4:
77:fd:6a:71:1c:df:ed:34:15:53:16:46:5a:0d:f8:14:a1:04:
93:73:bf:a1:5f:50:d4:c5:39:c4:56:03:fd:37:11:cc:6f:7a:
98:fa:27:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:44:18 2026 by rpki-client