Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
File: MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft (raw, json)
Hash identifier: uFIjAvEo5aP+2079nDpkKztegbi4Okovlltce6sFDK4=
Subject key identifier: E5:F6:24:5A:D0:17:29:42:3C:9D:F3:E9:67:89:03:06:F0:BA:36:A5
Authority key identifier: 31:D7:D9:D2:9C:EC:F8:E5:91:22:23:3D:71:6E:6B:05:0E:71:84:78
Certificate issuer: /CN=31d7d9d29cecf8e59122233d716e6b050e718478
Certificate serial: 019EFACC0CF51087554F33854ACEACD24342
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
Manifest number: 0555
Signing time: Wed 24 Jun 2026 18:02:17 +0000
Manifest this update: Wed 24 Jun 2026 18:02:17 +0000
Manifest next update: Thu 25 Jun 2026 18:02:17 +0000
Files and hashes: 1: 9jfmZ8bQaVGPFDWRFHvQHmnS8fo.roa (hash: /DXZZnlzFxIqpfLKa2jzn4JOmraJhYpvlatvoWLWvdY=)
2: MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl (hash: o5axzn4gdLURQ7YEDCiPHWnpqxIht6tNxlxHMqIfoes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 18:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fa:cc:0c:f5:10:87:55:4f:33:85:4a:ce:ac:d2:43:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d7d9d29cecf8e59122233d716e6b050e718478
Validity
Not Before: Jun 24 18:02:17 2026 GMT
Not After : Jun 25 18:02:17 2026 GMT
Subject: CN=e5f6245ad01729423c9df3e967890306f0ba36a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d1:61:42:b8:0b:2a:89:fd:e7:62:d9:28:c4:
8c:1b:05:7a:13:4e:d8:d6:92:e5:6d:fd:40:c1:d3:
0e:d9:eb:a9:b1:81:f6:30:b2:69:da:63:27:1a:de:
fe:7e:5c:d0:63:b9:24:8c:13:ae:bf:e8:f3:3e:a7:
8e:01:04:de:ea:7a:8b:77:c5:5c:0b:9e:7d:ab:45:
a3:f3:16:f5:2e:b9:28:ab:d3:dd:71:72:76:a1:0e:
3d:9a:44:97:0e:46:bb:45:e5:20:ea:13:e4:00:90:
6b:8b:62:98:3b:aa:c3:ab:12:be:36:38:f3:14:cf:
26:b6:a8:b7:b7:a3:5f:87:d2:e6:8e:6f:c9:15:98:
7f:15:54:03:94:bc:db:3e:c2:cb:4d:48:4e:28:26:
87:94:59:86:68:58:da:f9:c6:a6:b1:10:d7:a5:18:
d0:d9:23:2c:e7:92:77:52:27:31:76:a0:d1:c3:83:
32:31:2f:31:d5:b8:ac:22:a9:57:b8:98:c6:6b:4f:
84:7d:c2:bc:48:41:a3:d9:30:4b:60:a5:0f:f1:8d:
a4:61:74:7e:e4:f6:07:31:78:c3:36:96:74:45:97:
79:f4:b0:20:71:41:9e:7e:8a:f3:69:1d:db:3f:3e:
1c:f6:9b:fa:19:99:38:90:9a:34:00:cf:08:5f:b6:
bc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F6:24:5A:D0:17:29:42:3C:9D:F3:E9:67:89:03:06:F0:BA:36:A5
X509v3 Authority Key Identifier:
keyid:31:D7:D9:D2:9C:EC:F8:E5:91:22:23:3D:71:6E:6B:05:0E:71:84:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:2e:6d:73:7a:d7:5c:2a:2e:dd:2e:03:7c:9f:f8:bf:97:1f:
36:8b:fe:2a:d2:e2:a4:58:d7:08:bc:fa:51:cf:59:ac:d7:37:
cb:7e:ee:17:9b:ae:74:72:73:c4:16:f4:13:45:fb:d8:13:40:
db:a4:f5:91:da:6c:6e:d1:39:e0:44:a0:c1:58:1b:07:d7:c2:
ac:9e:6e:20:ec:35:45:1e:d7:6b:41:bf:cc:26:de:7d:87:ec:
d4:cb:61:da:77:1a:b8:83:59:c0:ac:6f:82:17:57:ca:34:1c:
12:17:7c:23:bd:a4:a8:9f:ff:8b:b3:59:21:46:21:c6:07:60:
27:b6:85:a7:64:7c:3c:3d:95:6b:ca:37:2d:8a:85:6b:49:36:
a5:34:82:16:95:80:6d:76:da:e2:73:48:1a:5b:65:79:61:c0:
82:18:ef:18:8c:20:e0:56:2a:ab:e4:b0:b1:8d:36:0b:a8:26:
0c:b0:ea:ca:e8:75:d6:30:ef:1c:ce:48:d7:a8:64:20:90:37:
0f:7f:f4:02:da:48:01:cc:08:e0:86:95:c8:57:40:2d:56:e0:
6e:9a:ed:d3:ed:5b:d2:d9:f3:1b:3d:82:33:88:9d:02:8b:a8:
71:2f:87:a3:c8:48:46:08:d2:e4:75:4f:32:28:ed:6b:34:e6:
b5:8c:55:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 02:10:55 2026 by rpki-client