Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft
File: D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft (raw, json)
Hash identifier: ha2HQCh7Mqa3LrSHug+hs7RBoxHZfM4MeqDcamUfXOM=
Subject key identifier: 34:0B:5B:D1:9F:14:AC:E1:50:52:32:12:ED:C6:95:1E:B2:16:95:D5
Authority key identifier: 0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB
Certificate issuer: /CN=0f92c52f86009879c177092f7cd83418b4df8cab
Certificate serial: 019FAA19FD5453AF47D85219C5FE2DCE27A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft
Manifest number: 19DA
Signing time: Tue 28 Jul 2026 19:00:57 +0000
Manifest this update: Tue 28 Jul 2026 19:00:57 +0000
Manifest next update: Wed 29 Jul 2026 19:00:57 +0000
Files and hashes: 1: D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl (hash: o9WJkVM0t9u9OORBnXh+nS1nllH7JBX8jYvnEyAYnX0=)
2: MXQ5fKgl8ZsaQZNHO6pbBu5IdxA.roa (hash: pI/grpKRBsBNOQ0aspRfRJgjD1ZrwmmpLNeau2QbWVA=)
3: Zx5o8v2ZCe9pK1Sbhq2vLi9k9J8.roa (hash: YgGRcc+fQUbTuFLOD9KlYqEbp3CkMEvOBhBenJB52Ic=)
4: jjZr6ibloVwf3j-xPGaypuYc1To.roa (hash: JuRrRALm0fnkDTSDsHBV/GbEKFpe95uRtT0ysTR3ENk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:fd:54:53:af:47:d8:52:19:c5:fe:2d:ce:27:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f92c52f86009879c177092f7cd83418b4df8cab
Validity
Not Before: Jul 28 19:00:57 2026 GMT
Not After : Jul 29 19:00:57 2026 GMT
Subject: CN=340b5bd19f14ace150523212edc6951eb21695d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4c:35:8c:13:eb:11:95:98:d6:11:0f:80:af:
ba:71:fa:58:08:e6:c9:9f:ea:39:b4:93:06:71:a8:
ee:31:ec:1a:a1:8f:03:58:b9:f5:ab:cb:f4:3c:ac:
22:66:95:c0:88:62:9a:c5:f7:f9:b4:bc:dc:a2:69:
34:88:28:a2:ae:f7:80:f4:c1:1e:93:ec:ec:32:d6:
6f:88:6b:60:ac:9f:b3:a1:bb:6c:91:cb:33:fc:f4:
cd:e8:92:40:a4:87:ef:b1:98:1c:39:c6:10:39:3b:
ae:19:43:83:73:ec:b8:79:73:ba:db:1d:4e:c2:8f:
83:2b:00:f3:2c:e9:ef:07:49:2c:4a:5f:a7:8d:a5:
72:a9:39:61:a2:46:7c:9d:4b:9b:64:c7:0f:12:f7:
df:14:40:c7:e8:6f:ae:21:d0:29:7c:96:6a:51:ec:
7d:34:7c:7c:9e:ea:52:53:3b:9a:da:33:15:ec:38:
65:8a:00:66:60:24:c8:f8:a1:d1:67:44:71:2b:70:
bf:a9:c5:c6:5d:68:5d:f2:43:bd:1f:93:60:e3:82:
8a:e7:4b:b6:0e:3a:71:c8:c0:4b:31:1b:7a:77:f5:
9c:1e:bd:dc:76:bb:cd:69:fb:76:73:14:2f:66:5d:
5a:45:b6:4a:21:da:2a:49:da:55:8a:78:56:97:8d:
86:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0B:5B:D1:9F:14:AC:E1:50:52:32:12:ED:C6:95:1E:B2:16:95:D5
X509v3 Authority Key Identifier:
keyid:0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:77:e0:3f:f4:fa:90:55:9d:4f:8d:09:38:3f:4e:b8:4f:1d:
6d:d0:a3:13:9d:c4:28:47:7c:d2:bf:7c:26:52:2f:f0:59:6e:
c2:85:76:58:4a:e1:fb:0d:fa:90:f0:a7:e0:0a:8e:05:b6:69:
6e:98:8f:b0:54:29:ea:49:a9:ca:a5:a5:b7:fa:b4:73:5f:0a:
04:8f:20:49:67:1d:cd:d0:c4:d0:87:85:b9:cf:1b:0b:c0:5e:
34:9d:f8:cf:aa:b4:83:9f:06:78:8e:16:a2:e2:b0:33:b4:cc:
10:43:49:f3:57:fa:5d:17:b1:fe:5e:ae:f8:36:0f:e6:8d:0b:
5e:b9:98:51:26:21:4f:70:fd:b7:55:94:d8:74:41:00:b0:69:
8c:45:f0:03:b7:a3:ad:46:9f:c4:a1:df:66:c6:16:ef:76:e5:
3a:46:21:d5:eb:22:20:b4:a2:63:1e:b9:78:ad:29:3a:29:0a:
e0:17:1c:d1:9f:6f:3e:c1:b6:4e:63:2a:fd:6b:3d:59:7b:53:
86:68:ec:5b:4c:56:dc:7a:39:d2:ee:12:47:c8:92:2a:1e:4f:
86:72:f2:f3:cb:e9:d0:16:11:15:ae:41:af:59:aa:2a:22:fa:
66:bc:bb:0e:9c:f4:88:bf:46:8f:3e:ea:c8:bf:65:60:57:ab:
56:d4:a8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:15:33 2026 by rpki-client