Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
File: D5JWkWA5A-8kSFy0vzXigweGe4M.mft (raw, json)
Hash identifier: ajMbBHVpb+W9qle6ZATyJm1GApEWSg+FVlab/BcoK6A=
Subject key identifier: 12:DA:70:94:70:0C:EF:80:A7:81:5B:3D:AD:09:32:48:FB:BB:C1:9A
Authority key identifier: 0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83
Certificate issuer: /CN=0f925691603903ef24485cb4bf35e28307867b83
Certificate serial: 019FA8CFF9D538795FDFB2F4D00F625F629C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
Manifest number: 07E1
Signing time: Tue 28 Jul 2026 13:00:29 +0000
Manifest this update: Tue 28 Jul 2026 13:00:29 +0000
Manifest next update: Wed 29 Jul 2026 13:00:29 +0000
Files and hashes: 1: 80qBnu2XnhFRiBmZiF038oU110Q.roa (hash: LIRyJNKQ/3u7PO7ipf6wdyHbe0bKIPQwJsid3/CO5Lg=)
2: D5JWkWA5A-8kSFy0vzXigweGe4M.crl (hash: Jngog22SJtO0gslvIWpGLYN/yz3JvP4FG+Kx2+68AZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:cf:f9:d5:38:79:5f:df:b2:f4:d0:0f:62:5f:62:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f925691603903ef24485cb4bf35e28307867b83
Validity
Not Before: Jul 28 13:00:29 2026 GMT
Not After : Jul 29 13:00:29 2026 GMT
Subject: CN=12da7094700cef80a7815b3dad093248fbbbc19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c5:6e:97:50:2d:3d:f3:3f:aa:27:41:6e:9e:
22:84:75:35:0e:71:c2:99:8f:05:89:35:9c:83:4b:
a8:0c:15:42:16:75:c7:69:f1:b0:85:72:27:d5:b1:
68:f4:6e:03:5d:d3:9f:d1:f6:24:24:7c:b8:3b:a0:
b5:11:5b:67:8a:17:e7:00:75:36:e0:38:9b:a3:50:
90:79:34:a5:d2:ec:5b:c1:6e:11:e6:44:54:74:89:
3a:04:4f:2e:d5:47:0d:5a:71:e5:ab:32:63:ac:22:
3d:23:6d:d1:98:04:20:1d:55:dc:0e:36:af:d2:82:
3c:56:74:aa:19:aa:85:2e:0f:54:e1:30:87:46:ff:
14:37:a0:e8:fe:8a:18:67:83:39:75:26:b0:f1:bd:
b0:dd:b8:db:04:00:13:f6:82:df:e9:31:f3:7f:8c:
d1:63:78:c5:a7:07:73:ba:de:bd:3c:67:7a:a7:ae:
8d:f0:18:12:05:21:14:75:0f:c7:4c:c5:e4:6d:b6:
eb:8f:72:8a:1e:8d:2a:9b:ad:f6:91:11:2b:20:be:
af:f0:9b:0f:1c:3a:f3:c5:55:0f:8b:c7:3a:d4:de:
5a:6b:fa:97:1c:8f:54:ff:7b:a0:50:0b:38:1a:93:
bf:5e:37:ab:3b:22:04:02:22:be:72:73:80:af:06:
8a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:DA:70:94:70:0C:EF:80:A7:81:5B:3D:AD:09:32:48:FB:BB:C1:9A
X509v3 Authority Key Identifier:
keyid:0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:56:70:cd:ef:51:37:cd:40:3b:7b:23:13:64:9a:e7:c1:7a:
c8:0f:6a:9f:7f:b7:de:c4:8e:83:cd:35:f4:38:e9:63:88:38:
6a:b9:8e:4c:12:0f:2a:74:47:e6:07:ff:e0:49:bc:f9:c2:c3:
ae:24:ae:1e:37:28:ee:82:cc:4f:f6:9a:7d:2c:b3:29:05:32:
56:14:02:69:00:34:f1:b9:78:94:eb:75:82:34:98:26:50:71:
01:09:4a:1c:a5:5b:ba:66:e6:50:2e:f2:36:c9:5e:29:a3:95:
b2:e0:ee:33:c5:6e:d3:b1:43:1c:13:9e:c1:3b:7b:2f:8b:f1:
af:06:a8:92:cc:bd:6e:9b:29:85:75:0f:59:8f:ec:d5:57:0c:
01:33:9f:c0:ed:57:d5:9d:3b:9b:83:ac:1e:ad:63:6a:ef:e2:
83:6b:5e:e2:d3:29:b9:f1:b6:cb:f5:8b:9e:20:91:f1:ab:f0:
67:1a:e9:da:36:bf:55:d4:c3:c3:62:dc:15:14:d7:71:ab:b6:
ad:14:9e:b1:58:53:d2:95:2e:07:eb:d3:2f:4a:be:f8:19:f6:
ed:01:5b:e0:69:2d:4b:3f:35:44:06:28:90:7c:e7:69:7d:89:
8d:41:57:1e:f8:c8:41:00:2c:89:78:e6:42:31:8f:b9:38:5d:
4b:4e:6f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:25:26 2026 by rpki-client