Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
File: d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft (raw, json)
Hash identifier: cDpwv23YiVHyHskuzLnVJnjNS/bOBsA9RXUzegeO9QU=
Subject key identifier: 57:D9:88:B4:7F:A3:F8:BA:3B:DE:96:5A:E8:39:95:7E:BE:A9:23:20
Authority key identifier: 77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
Certificate issuer: /CN=779fbaaac6541ab318529eb025613c6520e47646
Certificate serial: 019FA296DF0E4C0B8D3DBC64E6E6F72A665D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
Manifest number: 0882
Signing time: Mon 27 Jul 2026 08:00:24 +0000
Manifest this update: Mon 27 Jul 2026 08:00:24 +0000
Manifest next update: Tue 28 Jul 2026 08:00:24 +0000
Files and hashes: 1: 1ULsjrhU_Mgs_8Mvd-oE1b7ANaE.roa (hash: BPqaZcuEdD+lQrMI+iPU/GW6APEbwg38yW1mZjGwXr8=)
2: d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl (hash: q62CYlQ7DHUy2CqnS4BjHd6a/2lV7WisE2uRikDEFtI=)
3: pXo0ZUaV-y6EDCcUoSCUhqpPURU.roa (hash: EuVKLvC6yGpoLeqj+M0pu9788Rfc943eOWrQgVLBCHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:96:df:0e:4c:0b:8d:3d:bc:64:e6:e6:f7:2a:66:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779fbaaac6541ab318529eb025613c6520e47646
Validity
Not Before: Jul 27 08:00:24 2026 GMT
Not After : Jul 28 08:00:24 2026 GMT
Subject: CN=57d988b47fa3f8ba3bde965ae839957ebea92320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3c:a3:3c:4d:20:e7:ef:56:12:2f:5d:97:ad:
3c:0e:a6:7e:4b:ff:f1:d6:b1:b8:94:56:d5:58:a3:
77:c3:59:a3:ef:22:a4:66:3b:c2:91:7a:c6:6e:fb:
d4:59:75:6f:9e:64:c4:61:42:74:c7:41:b5:6e:aa:
63:3c:a3:c9:b5:78:8f:c2:ed:bb:5c:72:bc:f6:f5:
f6:ad:ca:e0:53:62:58:63:ec:4e:ce:7d:c1:a7:ff:
e5:e4:a6:cf:b9:07:9f:2f:b0:0c:71:e8:3d:83:97:
57:d7:d7:82:b6:59:fd:9e:16:b7:6c:50:b3:ba:fc:
ee:ec:69:09:c1:50:ad:b6:df:eb:2e:52:84:89:63:
93:44:38:3c:d3:61:e3:c3:0e:89:0f:29:fc:36:8b:
1a:19:77:73:57:d2:f3:8e:ca:20:b0:52:e1:ae:af:
b7:be:30:33:ac:1b:ad:81:53:8e:b2:61:cb:de:66:
57:6b:02:dd:dc:d9:db:bf:11:84:8a:d1:d4:14:d5:
c0:ad:49:c5:4f:bc:f4:74:8c:70:ea:fc:c3:5b:62:
9d:c8:a5:f7:92:04:99:49:1d:9c:23:19:2f:61:5b:
dc:d7:83:b9:05:7f:b6:24:f5:7e:60:e4:50:95:8d:
da:ca:34:59:ac:ed:a8:10:b0:0a:bb:08:e0:b6:f5:
1f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D9:88:B4:7F:A3:F8:BA:3B:DE:96:5A:E8:39:95:7E:BE:A9:23:20
X509v3 Authority Key Identifier:
keyid:77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:13:6f:f9:a1:a7:ce:3c:9c:29:05:7f:71:16:28:28:f8:92:
c8:5f:18:e2:b2:81:74:20:55:74:d4:f8:bd:e3:4a:a2:b9:a6:
39:28:6f:10:9e:ad:44:37:15:2b:14:04:52:80:0e:82:0b:26:
2d:7c:db:6f:99:61:35:06:e9:4c:fe:20:47:28:64:81:b7:60:
57:84:10:58:64:cf:35:1f:85:29:07:e3:89:36:e9:da:19:e9:
48:4b:96:33:17:57:05:72:d1:c2:3f:26:24:93:df:8d:52:f5:
12:78:c6:94:4b:b1:65:a8:eb:bb:f3:05:aa:3d:1c:40:88:20:
00:16:c1:3b:09:8b:e6:7e:cd:af:c5:3a:b0:4d:28:53:69:95:
7f:d7:19:8d:74:9e:9f:5b:ee:f7:66:c0:fb:99:ad:bc:fb:9c:
b4:1c:b5:0f:77:2b:88:30:1b:02:06:13:56:2a:da:09:91:df:
fa:01:35:68:5f:b5:1b:22:30:15:e8:19:4d:12:8e:48:85:e8:
c5:78:21:d1:2a:85:e8:8c:89:8c:16:37:84:57:e5:61:08:13:
6d:b3:8b:0c:5e:3f:83:23:c2:6c:09:75:ed:b7:68:12:f4:69:
eb:4a:80:44:04:74:50:6e:3d:ae:9e:6a:d5:85:3f:f3:2e:b9:
23:d2:b5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:58:21 2026 by rpki-client