Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/090c7b-293e-49db-afb5-2905d21e3671/1/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.mft
File: D5fi7R6Sfb_Y3g1elKd9VMLdAEI.mft (raw, json)
Hash identifier: mIjug6QMankIwuVc9c31UAYu6Sx1eoXIEvJxwd/tvJo=
Subject key identifier: D2:AA:BA:2D:0A:EF:76:1F:DD:46:0A:8E:5B:C3:F9:3D:CB:66:46:DB
Authority key identifier: 0F:97:E2:ED:1E:92:7D:BF:D8:DE:0D:5E:94:A7:7D:54:C2:DD:00:42
Certificate issuer: /CN=0f97e2ed1e927dbfd8de0d5e94a77d54c2dd0042
Certificate serial: 019FA0DFF52B19C8208F33B916E30C279C19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/090c7b-293e-49db-afb5-2905d21e3671/1/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:00:59 +0000
Manifest this update: Mon 27 Jul 2026 00:00:59 +0000
Manifest next update: Tue 28 Jul 2026 00:00:59 +0000
Files and hashes: 1: D5fi7R6Sfb_Y3g1elKd9VMLdAEI.crl (hash: AqeVDqD5XQBAheqX0GTH1/SF1RMhENA6ikoJd1DuZv4=)
2: Um6n_idKHhLBJBBzUCl6l1HPrEI.roa (hash: SxF4T3uK56mVfgUvnXBquT7aoBlNGiQk5l7rUMHBbSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/090c7b-293e-49db-afb5-2905d21e3671/1/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/090c7b-293e-49db-afb5-2905d21e3671/1/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 00:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:df:f5:2b:19:c8:20:8f:33:b9:16:e3:0c:27:9c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f97e2ed1e927dbfd8de0d5e94a77d54c2dd0042
Validity
Not Before: Jul 27 00:00:59 2026 GMT
Not After : Jul 28 00:00:59 2026 GMT
Subject: CN=d2aaba2d0aef761fdd460a8e5bc3f93dcb6646db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7e:c7:69:17:0f:2c:80:eb:1c:c7:2e:72:4a:
22:13:46:49:30:99:42:70:14:46:1d:b8:8a:b0:d0:
b4:7f:0d:f1:6d:41:82:9b:e5:94:f4:f7:6c:3c:62:
05:a6:11:18:34:b8:36:34:68:39:c5:8b:c8:76:08:
6f:68:48:95:de:9e:61:80:bd:6c:b9:49:da:60:b7:
3b:9b:1c:c2:a8:5e:21:eb:02:03:54:94:af:0d:65:
a3:2a:b3:1e:95:09:9d:ec:c4:8c:de:f8:e3:d4:2d:
31:06:28:6c:ca:ed:6f:42:70:96:c4:28:9a:00:4c:
9e:6e:b6:5c:f6:5d:ef:a0:30:93:5a:40:7c:d6:69:
17:f7:44:48:bc:42:81:83:88:26:72:e7:d8:93:4c:
77:61:d6:18:9d:2e:3b:dd:d8:4e:85:35:64:5d:9a:
ed:fc:76:c1:73:8b:de:5b:8c:6b:02:bb:b6:0b:9d:
7e:1d:fa:18:b4:75:48:f4:51:4d:18:84:a7:25:8f:
aa:8b:98:53:0a:75:58:47:04:61:2d:e6:d5:34:cd:
95:e4:55:54:ea:8d:0b:3f:ff:c8:26:96:d6:b1:e5:
e4:64:85:b6:c2:fb:87:9e:92:7f:c1:7d:20:c0:fd:
fc:8e:6d:55:e5:10:02:c2:54:ec:1f:87:87:95:f5:
b3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AA:BA:2D:0A:EF:76:1F:DD:46:0A:8E:5B:C3:F9:3D:CB:66:46:DB
X509v3 Authority Key Identifier:
keyid:0F:97:E2:ED:1E:92:7D:BF:D8:DE:0D:5E:94:A7:7D:54:C2:DD:00:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/090c7b-293e-49db-afb5-2905d21e3671/1/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/090c7b-293e-49db-afb5-2905d21e3671/1/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:69:83:6e:ae:91:3f:e2:b5:f2:44:67:7b:8e:9e:4f:ec:97:
8c:3d:ed:40:7a:6d:f2:38:2e:9e:38:38:e7:21:92:20:70:12:
aa:fa:85:59:a6:0b:9d:46:7e:24:fc:8c:10:f2:08:d4:cd:51:
48:88:03:7d:47:a4:2b:9c:33:2d:18:b9:9c:9a:03:65:a2:f5:
92:4e:3b:ae:1e:24:d2:68:f7:95:c6:7e:97:b2:36:ac:9a:91:
54:47:d7:fa:89:46:56:21:3f:c9:17:40:e7:db:ab:21:e4:e0:
a0:ec:ef:93:71:64:bf:d5:db:6b:3c:34:c6:dc:7d:4f:a6:b7:
0a:3e:1c:0d:a3:71:ab:a1:dc:cd:71:e7:81:04:44:53:53:00:
a1:21:ef:83:bf:95:e0:93:c7:b3:8a:8a:e6:bf:cd:6d:72:ff:
06:09:99:98:10:d4:4b:cb:f2:fe:c0:8d:ca:87:4b:f0:5f:7b:
0e:34:ad:83:08:55:8b:68:2b:3c:f6:ff:11:4e:21:52:6f:65:
2a:f1:6e:8c:7e:f1:52:c8:83:64:9d:fe:6e:88:53:37:55:6e:
b5:c2:af:cf:f8:97:f8:d6:59:6b:a9:84:37:64:cb:5d:ed:f0:
c6:70:32:0f:54:c6:48:b3:80:17:d2:35:64:1b:77:89:2e:57:
36:4d:a2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:56:51 2026 by rpki-client