Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
File: cDbgTlO505Z8-dQY54tgu60HWDE.mft (raw, json)
Hash identifier: 05Q/76BARm9BoB1Lwkz/TLXHh9KxAgcRm1183kcjemg=
Subject key identifier: 2B:7B:07:75:B6:63:99:FF:AA:19:2D:5F:72:7F:3C:B8:ED:7C:9E:5A
Authority key identifier: 70:36:E0:4E:53:B9:D3:96:7C:F9:D4:18:E7:8B:60:BB:AD:07:58:31
Certificate issuer: /CN=7036e04e53b9d3967cf9d418e78b60bbad075831
Certificate serial: 019F9F5F05D1CE248A0670E1723CFBEAD7B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
Manifest number: 0571
Signing time: Sun 26 Jul 2026 17:00:32 +0000
Manifest this update: Sun 26 Jul 2026 17:00:32 +0000
Manifest next update: Mon 27 Jul 2026 17:00:32 +0000
Files and hashes: 1: S00d78TItkDHq888CPL8snBiq8U.roa (hash: xbbWOfkY4EBmGgNTfua9nJ1QvCvgAkZPsqc/WKzPEio=)
2: cDbgTlO505Z8-dQY54tgu60HWDE.crl (hash: xaNc+hbn1hZCG9aucNzfxBtUOvnxgKn944/XbJgUqa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:5f:05:d1:ce:24:8a:06:70:e1:72:3c:fb:ea:d7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7036e04e53b9d3967cf9d418e78b60bbad075831
Validity
Not Before: Jul 26 17:00:32 2026 GMT
Not After : Jul 27 17:00:32 2026 GMT
Subject: CN=2b7b0775b66399ffaa192d5f727f3cb8ed7c9e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2a:7a:27:73:21:e2:f5:7f:06:8e:f3:24:3f:
6f:de:5b:00:62:04:65:b6:4f:3b:c8:d1:20:de:05:
1a:2f:d8:75:cb:39:53:e9:62:b2:ef:4b:ae:aa:78:
d5:7c:cb:e1:b3:0d:bc:2f:d8:bc:89:5a:b3:58:83:
20:61:55:21:23:80:94:6b:42:fc:7a:7e:25:52:d2:
1b:60:85:26:b6:b4:d5:4e:e6:d2:b1:e2:a2:e3:fc:
59:12:e9:a4:10:21:e4:3c:33:7e:a6:14:ae:c6:e9:
ab:15:93:5e:fb:9a:5d:5c:39:19:e5:97:18:88:97:
3a:d6:a6:5f:ff:f7:f4:99:0a:e8:06:e5:be:06:cc:
6b:2e:38:04:50:6c:cc:c3:38:cb:13:25:e7:ed:00:
db:d9:e7:89:bc:2d:bd:65:73:5e:a5:a0:40:71:65:
27:32:84:ec:7c:74:ed:fc:81:a7:dc:6a:a2:d6:01:
b4:14:26:ff:00:3a:27:7a:2f:1a:ae:3c:da:e5:19:
3a:c5:df:1e:90:e8:ad:aa:ac:94:95:9e:cd:95:37:
9d:00:14:8a:4c:24:e3:6e:25:73:7d:3c:70:4d:ce:
ea:bb:21:25:ce:69:a8:d6:f3:c2:fa:c1:76:c5:a4:
e8:d2:77:e6:2f:3a:48:b1:ce:a2:13:35:00:d8:f2:
97:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7B:07:75:B6:63:99:FF:AA:19:2D:5F:72:7F:3C:B8:ED:7C:9E:5A
X509v3 Authority Key Identifier:
keyid:70:36:E0:4E:53:B9:D3:96:7C:F9:D4:18:E7:8B:60:BB:AD:07:58:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:23:22:79:71:9c:40:8c:90:23:08:b4:87:ae:fe:da:cf:aa:
b7:9f:64:67:c6:b8:10:1a:48:01:67:87:9f:b0:5f:f4:a7:fc:
3a:ff:56:06:f8:6e:e2:42:8b:5e:ec:a8:e2:22:51:67:7e:ae:
75:8b:93:ae:f0:cb:99:ff:cb:aa:0f:cb:ff:c6:a6:8b:a9:af:
8b:57:fe:52:b2:73:0c:88:63:8f:dd:71:5d:90:03:c2:21:99:
b1:73:2f:78:4b:81:3b:8c:b9:08:07:29:62:39:07:7d:cb:8b:
34:6f:94:38:95:9f:19:1a:e4:1f:cd:e3:02:f4:5f:37:03:9c:
7d:37:63:0f:b3:2b:c7:b6:8b:a6:85:11:86:e6:fc:00:fb:4f:
d2:0b:a3:70:52:03:9a:23:6b:88:14:72:80:34:f3:2d:eb:e4:
3e:75:14:f6:05:8e:15:a6:a2:21:2f:ce:c0:b0:37:a2:8f:db:
07:83:6e:2a:ff:63:81:71:3f:af:97:49:0a:59:de:54:63:db:
45:ff:c2:1c:d8:15:bf:53:d7:f0:e7:e0:b0:81:a6:1f:f2:27:
41:29:ec:fa:ef:5f:9c:c1:20:b8:09:6f:0f:a8:bc:b8:45:7b:
fa:a1:d1:b1:d7:64:24:dd:51:ac:c1:83:bf:4f:de:eb:6c:5b:
cd:b3:94:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:02:23 2026 by rpki-client