Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f12858-3ca1-453b-843b-adc4d5ab566c/1/cIV3VqzzOfrCKaHJ6cV8SJXvqR8.mft
File: cIV3VqzzOfrCKaHJ6cV8SJXvqR8.mft (raw, json)
Hash identifier: APjvhS0DNvEVaUM4AmOGmvE0+VDLdTM/ACPAygYpdVk=
Subject key identifier: 5B:5F:72:DC:E5:D5:FD:EC:1C:32:7F:9E:E5:21:AC:0A:9D:7C:7B:8E
Authority key identifier: 70:85:77:56:AC:F3:39:FA:C2:29:A1:C9:E9:C5:7C:48:95:EF:A9:1F
Certificate issuer: /CN=70857756acf339fac229a1c9e9c57c4895efa91f
Certificate serial: 019FA372F6D7D4889F6B4C9544F14BB66E20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIV3VqzzOfrCKaHJ6cV8SJXvqR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f12858-3ca1-453b-843b-adc4d5ab566c/1/cIV3VqzzOfrCKaHJ6cV8SJXvqR8.mft
Manifest number: A2
Signing time: Mon 27 Jul 2026 12:00:48 +0000
Manifest this update: Mon 27 Jul 2026 12:00:48 +0000
Manifest next update: Tue 28 Jul 2026 12:00:48 +0000
Files and hashes: 1: cIV3VqzzOfrCKaHJ6cV8SJXvqR8.crl (hash: /0jBbBbPACwVIVlChSm0WFKSf37b4TvmKJWRDGJhE5I=)
2: vV6KIbjbHUkMbwKENIBHTTXDdrU.roa (hash: EOt5kopYpNaYTBOsxtYCd3AAd6VIO4EI/DljsaKcEE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f12858-3ca1-453b-843b-adc4d5ab566c/1/cIV3VqzzOfrCKaHJ6cV8SJXvqR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/f12858-3ca1-453b-843b-adc4d5ab566c/1/cIV3VqzzOfrCKaHJ6cV8SJXvqR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIV3VqzzOfrCKaHJ6cV8SJXvqR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:72:f6:d7:d4:88:9f:6b:4c:95:44:f1:4b:b6:6e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70857756acf339fac229a1c9e9c57c4895efa91f
Validity
Not Before: Jul 27 12:00:48 2026 GMT
Not After : Jul 28 12:00:48 2026 GMT
Subject: CN=5b5f72dce5d5fdec1c327f9ee521ac0a9d7c7b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:21:13:d3:90:9f:c5:c6:8e:b8:08:27:a6:2c:
14:b6:c2:26:0a:b6:06:db:50:b1:55:09:b5:2d:06:
67:f0:eb:40:7e:a6:38:23:81:4a:37:f6:4d:19:98:
14:62:be:3b:4e:3c:54:bd:48:77:26:7f:60:d2:bd:
c5:d7:a4:35:2f:de:19:d8:ef:96:f9:c2:2a:e9:7e:
44:c1:37:da:00:42:1e:69:4a:1d:19:9c:99:af:a4:
04:7a:e4:39:91:a5:34:4d:5e:04:10:f0:ea:cd:1b:
bc:b5:18:d2:e3:d1:97:66:d7:98:46:9a:66:7f:7c:
8a:0a:20:69:ca:3b:38:2d:6f:2e:62:48:43:7b:f8:
00:7a:54:86:93:90:73:53:61:6f:bc:e3:c4:43:39:
f1:2e:98:26:92:39:17:05:b2:76:0e:87:0b:6a:5e:
c2:ae:75:99:6e:cb:7f:05:03:9a:74:28:c8:59:98:
ea:9b:36:dd:27:b6:cf:7c:a4:ba:a6:a8:af:4d:3e:
65:d9:28:e3:0c:9a:60:43:75:45:bf:5f:41:3a:fa:
8b:08:99:0b:92:6a:90:2f:55:6e:5a:93:f4:b9:b4:
cc:9f:e8:7f:a6:9e:ae:dc:c6:e6:b4:f7:89:46:49:
3a:3c:3a:17:34:6d:d8:05:dd:98:0f:5a:26:cc:ee:
77:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5F:72:DC:E5:D5:FD:EC:1C:32:7F:9E:E5:21:AC:0A:9D:7C:7B:8E
X509v3 Authority Key Identifier:
keyid:70:85:77:56:AC:F3:39:FA:C2:29:A1:C9:E9:C5:7C:48:95:EF:A9:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIV3VqzzOfrCKaHJ6cV8SJXvqR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f12858-3ca1-453b-843b-adc4d5ab566c/1/cIV3VqzzOfrCKaHJ6cV8SJXvqR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f12858-3ca1-453b-843b-adc4d5ab566c/1/cIV3VqzzOfrCKaHJ6cV8SJXvqR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:74:7d:83:b7:9b:ef:85:96:4a:f6:45:a8:40:32:f4:99:52:
51:e9:dd:1d:dc:95:d9:fc:10:f8:35:12:c9:8c:ac:b2:44:3e:
da:13:75:e9:db:fd:42:27:82:90:90:ac:a0:20:e0:4c:ad:f5:
3c:78:29:85:03:85:e9:35:79:f6:84:b2:c4:d2:15:94:99:70:
b0:f1:7c:cb:1b:9c:d2:ca:28:96:69:d9:2f:24:90:dd:af:11:
a7:b4:50:d1:50:d2:f6:ba:44:ce:a2:a6:0a:1b:97:0e:90:9a:
42:07:d7:42:42:91:f6:9b:d0:99:4c:20:52:c1:7f:76:56:48:
e4:cb:51:4d:c1:a2:74:e4:26:33:47:8e:2c:aa:d0:b1:61:cf:
bf:e4:ac:c5:c4:2b:78:d8:ab:8f:81:81:b7:a3:a7:e6:09:08:
1b:d1:00:08:1a:19:e4:21:91:b6:fd:2b:62:df:fd:21:ae:16:
3f:40:8e:3e:6b:36:07:07:df:8d:84:e7:8c:ca:05:73:df:73:
99:d2:ee:cc:ed:4e:dd:32:0b:e3:d2:48:0e:46:f2:cf:6b:9b:
01:9a:46:2d:1d:59:36:1a:e4:f9:45:72:7f:17:aa:87:65:59:
82:ee:f4:90:7f:58:6a:a6:1d:7b:86:0e:80:5a:56:8c:ba:60:
bb:82:56:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:53:34 2026 by rpki-client