Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
File: pDOBaM2dWvBgQBP8QnQSb8WB88s.mft (raw, json)
Hash identifier: KjVqWrWW6sl35lTPqhPXZ83JpGVGLPx2og5BSF+7dMs=
Subject key identifier: 78:07:23:0C:5A:B9:03:2D:11:DB:A4:B7:21:B6:0D:A2:31:37:B8:CE
Authority key identifier: A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
Certificate issuer: /CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Certificate serial: 019F859F2412A703FDDA7E394168FE7F20F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
Manifest number: 105D
Signing time: Tue 21 Jul 2026 17:00:26 +0000
Manifest this update: Tue 21 Jul 2026 17:00:26 +0000
Manifest next update: Wed 22 Jul 2026 17:00:26 +0000
Files and hashes: 1: 5t5_5MqWJNollBMPqdFua97XfMM.roa (hash: KTz9ZppQRmMMx9XPLOR36od8YyLkBIE5elG5FeL6i2Y=)
2: FSHrqYhJli1tSVyjlj_58RREeXk.roa (hash: uSCHyOKTAFU7tgMnLJvTfArI/447X68lLDwgFscWtJQ=)
3: pDOBaM2dWvBgQBP8QnQSb8WB88s.crl (hash: I3LfN2tx+3R7h8jXN4wyi5PKnc83U/IrF+T/6fJltNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:9f:24:12:a7:03:fd:da:7e:39:41:68:fe:7f:20:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Validity
Not Before: Jul 21 17:00:26 2026 GMT
Not After : Jul 22 17:00:26 2026 GMT
Subject: CN=7807230c5ab9032d11dba4b721b60da23137b8ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c7:e8:bd:be:87:f1:1c:cd:40:71:57:80:6e:
29:d7:54:1f:f8:91:65:7c:66:2c:10:a4:9f:11:aa:
13:5b:ff:d9:3b:50:02:42:0a:92:7e:92:d0:4b:8f:
40:28:1f:19:e7:81:13:5e:2e:bc:1c:83:65:87:e2:
2c:98:77:de:96:04:f6:df:cb:43:05:9f:85:01:16:
3b:63:0a:f2:f3:4f:4d:ff:65:69:2e:b0:40:7b:8f:
c4:87:c0:d2:3a:5e:6e:fe:19:e5:e6:74:90:f9:a7:
2f:e2:30:d5:2b:94:65:2c:a8:87:ab:93:62:5d:ab:
83:eb:4a:d7:1d:da:92:3c:cc:b4:7c:99:13:f2:08:
e8:5d:b0:81:25:31:d4:2e:c8:05:de:e1:b0:3f:21:
50:7e:4f:67:c8:39:e1:81:bf:b8:a2:80:e6:bb:49:
a6:73:8f:88:10:a6:27:95:5f:f9:04:a2:7d:75:81:
4b:cf:0f:7a:3b:d2:97:a4:74:41:06:dd:08:90:d1:
d0:96:bb:5c:8f:03:cc:2d:22:73:25:6a:67:55:50:
4c:47:f9:08:1c:a9:b8:ec:05:cd:5e:0e:cf:59:73:
d5:19:97:f6:c1:9b:bf:ea:39:a4:05:a2:ec:58:ed:
fb:4b:8f:c0:0e:08:bf:0f:a5:1a:ee:bb:51:a0:bb:
52:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:07:23:0C:5A:B9:03:2D:11:DB:A4:B7:21:B6:0D:A2:31:37:B8:CE
X509v3 Authority Key Identifier:
keyid:A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d8:94:93:20:67:52:8f:b5:03:55:f9:33:26:90:68:6a:07:
44:84:29:af:a2:8b:72:d3:31:bd:67:0b:7f:3d:60:8a:70:91:
0c:2e:b5:cd:d8:3e:78:94:9b:37:c3:77:23:9e:6e:b3:6b:64:
c1:e2:18:c3:a0:17:47:2a:1e:52:2e:50:13:5f:9d:ce:cc:63:
4b:b8:d9:e4:40:0d:fa:1d:e4:df:70:80:49:3b:4d:3e:b6:32:
5b:a4:28:fa:18:e9:e7:9d:01:69:47:8d:3f:08:f8:f0:ca:d2:
e5:2b:cd:fc:98:5b:3b:b9:08:5a:de:28:03:79:b3:ef:af:71:
ce:71:d3:51:6e:53:3d:1e:a7:17:92:46:08:30:b8:2e:48:d6:
42:10:1a:c7:c7:f0:41:5b:42:20:14:4f:42:3e:7a:c2:d1:7d:
2b:19:ff:83:bd:3f:23:c6:81:72:7c:b8:13:1e:9f:41:97:7e:
83:54:ec:3e:f2:a0:21:23:ce:24:b0:ea:b9:a9:f8:fb:3b:5a:
68:82:11:b6:bb:47:d2:a8:f1:a1:b3:e8:19:a2:95:a8:6b:11:
14:24:db:fb:15:f2:e5:1a:b0:ec:e6:44:c4:91:a3:45:c6:d1:
c5:f3:a4:02:0e:e4:cb:7f:ea:28:9d:7b:24:d4:b3:02:7a:96:
ab:41:15:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:10:46 2026 by rpki-client