Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/v99XKOyr1W70Y3NWlVhmylRoaRo.mft
File: v99XKOyr1W70Y3NWlVhmylRoaRo.mft (raw, json)
Hash identifier: fyIwbmBf1q9es3xxEKwHNHQAulVFL1EKp83Z+sSXN68=
Subject key identifier: 6D:E3:25:F8:F6:4B:3B:AF:67:44:BA:57:F3:84:BE:7B:BB:8E:0B:71
Authority key identifier: BF:DF:57:28:EC:AB:D5:6E:F4:63:73:56:95:58:66:CA:54:68:69:1A
Certificate issuer: /CN=bfdf5728ecabd56ef4637356955866ca5468691a
Certificate serial: 019FA0727948A6FDC163824D3D908525069C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v99XKOyr1W70Y3NWlVhmylRoaRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/v99XKOyr1W70Y3NWlVhmylRoaRo.mft
Manifest number: 05F1
Signing time: Sun 26 Jul 2026 22:01:24 +0000
Manifest this update: Sun 26 Jul 2026 22:01:24 +0000
Manifest next update: Mon 27 Jul 2026 22:01:24 +0000
Files and hashes: 1: 3BcGBZCHDgJs9gSoEvIJqO6Wdng.roa (hash: QqrBTNsjue3924ijEFZUnNRSzA8ZRhSOavKbIrZOqys=)
2: v99XKOyr1W70Y3NWlVhmylRoaRo.crl (hash: V64Cr+ELLfXqOWv4e9r5DWbkjv+NU6hQ+nOx/hrUiro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/v99XKOyr1W70Y3NWlVhmylRoaRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/v99XKOyr1W70Y3NWlVhmylRoaRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/v99XKOyr1W70Y3NWlVhmylRoaRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 22:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:72:79:48:a6:fd:c1:63:82:4d:3d:90:85:25:06:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfdf5728ecabd56ef4637356955866ca5468691a
Validity
Not Before: Jul 26 22:01:24 2026 GMT
Not After : Jul 27 22:01:24 2026 GMT
Subject: CN=6de325f8f64b3baf6744ba57f384be7bbb8e0b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c3:69:93:ff:d9:1e:90:0d:ce:b9:9d:7d:db:
1d:bd:37:f8:3e:1b:e0:de:49:bb:31:a5:f2:65:bb:
6b:01:b4:fe:57:7a:1f:2b:be:75:49:05:68:54:8a:
b7:9c:ce:e2:12:b8:a3:78:9e:d6:f6:c1:87:4b:2a:
e1:af:0b:f9:5e:92:2f:6e:31:78:d6:c4:33:e8:34:
c8:1a:af:00:34:10:5f:74:d2:31:c8:ce:90:51:97:
51:2c:18:e0:03:a4:95:30:de:81:b4:9e:d2:99:ca:
31:a7:22:72:12:03:56:96:fe:06:3e:94:82:1b:35:
ce:8a:4d:a6:a2:8c:b3:f4:1b:13:1b:e3:7d:b0:8e:
ea:0f:9a:99:1c:51:e5:41:88:d7:14:b6:4c:83:bf:
2a:8c:5b:23:7d:98:55:1e:44:4c:fb:de:e2:c9:a3:
98:08:a7:ff:0a:bd:39:5a:48:62:a9:68:9d:20:74:
53:7b:69:c2:1d:9d:67:95:9f:da:50:67:07:f7:74:
c5:44:60:c1:8e:40:ce:be:6a:c2:32:11:fc:14:48:
7c:0a:fb:7f:66:0d:d8:9c:11:64:8c:6b:86:48:d1:
ae:22:4e:40:de:df:3d:2e:6d:da:f6:3b:81:ba:96:
f2:e8:95:ee:50:f7:c7:95:e3:92:0e:78:f6:03:69:
db:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E3:25:F8:F6:4B:3B:AF:67:44:BA:57:F3:84:BE:7B:BB:8E:0B:71
X509v3 Authority Key Identifier:
keyid:BF:DF:57:28:EC:AB:D5:6E:F4:63:73:56:95:58:66:CA:54:68:69:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v99XKOyr1W70Y3NWlVhmylRoaRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/v99XKOyr1W70Y3NWlVhmylRoaRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/v99XKOyr1W70Y3NWlVhmylRoaRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d9:4a:99:22:6a:5e:75:a2:11:f1:9e:5b:1d:fb:34:ea:52:
a5:96:38:88:cf:d1:6a:d4:40:76:1b:33:50:b3:19:19:f2:39:
af:41:5a:04:49:ad:e4:3f:df:e6:df:eb:f8:f1:6d:a8:bc:5d:
92:dd:22:2c:06:f6:07:a2:2e:ba:a3:ee:22:23:36:af:f4:b2:
d8:7c:03:fa:c0:30:16:43:af:da:19:a3:53:6f:fd:d2:90:12:
56:c9:05:58:a7:73:18:bb:9d:a8:d3:f8:21:e5:a0:10:e1:0d:
f0:75:a8:f2:0a:29:9d:f4:86:7a:88:94:d9:ab:2e:a4:14:72:
05:a6:0d:4d:b8:9c:15:6e:f3:09:5f:16:2e:e4:c0:c4:81:d0:
f6:57:10:a6:2a:d9:fa:0f:41:5b:92:f4:f7:e5:e6:b4:b2:ac:
f3:b2:3d:e9:00:8c:bc:72:bb:3e:d6:53:4d:64:8c:3f:9a:1f:
62:ab:27:22:a5:0e:55:f9:63:dd:d3:84:6c:38:e0:04:87:5e:
d1:c6:28:78:f3:2f:8e:37:95:87:ac:ad:1c:af:79:8d:ee:30:
17:18:e0:f2:ac:c1:ae:98:8e:dd:fe:6f:c8:2d:d9:3c:b4:d0:
40:3e:c1:1c:24:7e:f8:8c:73:05:8e:b5:66:20:3c:99:72:b1:
9a:3f:20:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:50:55 2026 by rpki-client