Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d5d1cd-0027-40af-819f-83a22a4faa4f/1/d4U3vcs1Mgx41ZgZpQs2HrlYILc.mft
File: d4U3vcs1Mgx41ZgZpQs2HrlYILc.mft (raw, json)
Hash identifier: V7f8Br6NgYtum7OmRdIVuZ1EIfAvV8X9hEbD26RsW0s=
Subject key identifier: 97:C2:F2:64:78:00:BB:B6:24:BE:FA:70:61:09:94:FF:ED:39:6A:79
Authority key identifier: 77:85:37:BD:CB:35:32:0C:78:D5:98:19:A5:0B:36:1E:B9:58:20:B7
Certificate issuer: /CN=778537bdcb35320c78d59819a50b361eb95820b7
Certificate serial: 019FAB2C4D20AC921F5F8FBDBE1ACA996471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4U3vcs1Mgx41ZgZpQs2HrlYILc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/d5d1cd-0027-40af-819f-83a22a4faa4f/1/d4U3vcs1Mgx41ZgZpQs2HrlYILc.mft
Manifest number: EE
Signing time: Wed 29 Jul 2026 00:00:34 +0000
Manifest this update: Wed 29 Jul 2026 00:00:34 +0000
Manifest next update: Thu 30 Jul 2026 00:00:34 +0000
Files and hashes: 1: K2Dc5OBuZ-3GVexCh6zp51MBUis.roa (hash: c29k2Uu3E6+pH0/RU1RBK1xurercCYLwxnC+Kb8waAo=)
2: d4U3vcs1Mgx41ZgZpQs2HrlYILc.crl (hash: zo8YY6KY5jpk/qTz7+SBXLQ2G6Wse5b/W3Dgyo2zD8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/d5d1cd-0027-40af-819f-83a22a4faa4f/1/d4U3vcs1Mgx41ZgZpQs2HrlYILc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/d5d1cd-0027-40af-819f-83a22a4faa4f/1/d4U3vcs1Mgx41ZgZpQs2HrlYILc.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4U3vcs1Mgx41ZgZpQs2HrlYILc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:4d:20:ac:92:1f:5f:8f:bd:be:1a:ca:99:64:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778537bdcb35320c78d59819a50b361eb95820b7
Validity
Not Before: Jul 29 00:00:34 2026 GMT
Not After : Jul 30 00:00:34 2026 GMT
Subject: CN=97c2f2647800bbb624befa70610994ffed396a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:04:9e:b8:89:8a:a7:94:69:62:cd:a6:a7:d4:
df:c7:f2:ee:b9:56:b5:81:45:d7:b2:13:96:68:19:
52:f6:66:8b:b7:9d:a2:87:9d:5b:f6:35:3f:ef:84:
c1:b0:d3:2e:5e:d4:c9:2a:ce:f8:88:db:02:9f:32:
ba:d0:cb:2d:8a:67:26:d9:71:9d:18:b1:4a:0d:b9:
e3:86:f4:94:c7:39:48:8c:44:dd:b5:d1:f6:69:a0:
b2:1a:f5:9c:34:48:a9:8c:5f:04:bf:68:e2:b8:d1:
2b:af:50:a3:56:0d:a1:da:05:0d:2c:36:ed:07:c8:
07:61:48:98:fc:31:75:bf:a3:5e:b3:c9:44:d8:54:
89:8c:a0:7d:9f:1c:2a:d1:00:ef:c1:c1:b2:25:d3:
b4:0c:8f:cf:89:6a:c2:4e:03:2b:1c:9c:78:fb:83:
6c:19:98:08:70:16:09:31:73:89:72:97:7a:86:50:
e6:de:41:98:fa:12:c7:8a:f3:fc:ad:4f:15:58:d3:
8e:b2:fb:13:48:dc:d3:a1:a5:d5:4e:3e:ec:03:92:
4b:ae:4b:d0:87:43:8e:ef:fa:62:79:9f:b9:bd:0e:
10:79:83:3e:8f:ac:0e:c2:f4:e4:06:f7:d6:06:44:
01:24:2a:46:97:4c:8a:60:21:52:13:72:1d:94:68:
30:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C2:F2:64:78:00:BB:B6:24:BE:FA:70:61:09:94:FF:ED:39:6A:79
X509v3 Authority Key Identifier:
keyid:77:85:37:BD:CB:35:32:0C:78:D5:98:19:A5:0B:36:1E:B9:58:20:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4U3vcs1Mgx41ZgZpQs2HrlYILc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d5d1cd-0027-40af-819f-83a22a4faa4f/1/d4U3vcs1Mgx41ZgZpQs2HrlYILc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d5d1cd-0027-40af-819f-83a22a4faa4f/1/d4U3vcs1Mgx41ZgZpQs2HrlYILc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:98:28:18:09:c1:65:3e:c5:7e:87:2c:5f:2f:af:75:c4:8f:
2e:6e:82:8c:f4:88:cb:98:c1:9a:bb:40:41:16:31:41:6d:b0:
8c:14:16:45:50:0f:56:d2:34:5b:97:df:69:02:05:fe:09:86:
06:4b:d6:c7:13:07:9e:b2:b7:f7:25:91:cf:6b:9e:cb:ff:23:
39:a4:7f:d0:0e:63:1b:e1:16:31:61:92:ac:fc:33:59:b6:c7:
72:cc:9d:78:54:a6:47:6e:45:9b:c9:0a:bb:e0:6c:f1:bc:2f:
68:b2:9d:76:88:74:cc:62:d9:09:7c:cb:3f:31:42:d6:45:0b:
71:d3:fb:cb:11:54:c0:9c:05:12:a8:e2:8a:07:27:30:d1:76:
95:01:ce:8c:f5:db:a0:cc:75:97:5d:bf:0b:64:50:81:ea:9d:
9d:4a:72:2c:a6:06:0e:b4:9d:63:51:ed:0d:6c:7a:5e:91:d2:
32:0b:34:f8:dd:66:cb:60:c7:bb:c8:c3:b3:16:65:fa:8f:dc:
62:63:50:b4:ae:3e:34:1c:f7:cf:5b:7d:a7:34:f8:b1:9f:c5:
d3:ee:a2:60:3a:d4:80:ec:3e:b5:8a:73:fc:03:c6:1a:f3:1c:
d6:e5:a3:c8:14:68:98:4b:a7:c1:38:ea:d8:e7:d6:b3:dc:3a:
92:d7:7c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:56:31 2026 by rpki-client