Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
File: v2wd9mI3TUrs0Miz-EMS30ISVZk.mft (raw, json)
Hash identifier: u55Xtcv19XBd6Yhh0Ohp/55fxwlxaSylBnzkuJZZ8AM=
Subject key identifier: 5F:43:0C:C4:C3:91:71:94:C8:A1:AC:BB:DA:C2:D4:8F:53:33:FB:BC
Authority key identifier: BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
Certificate issuer: /CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Certificate serial: 01A020561A08A9E061607852946679C6EF91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
Manifest number: 18EA
Signing time: Thu 20 Aug 2026 18:01:48 +0000
Manifest this update: Thu 20 Aug 2026 18:01:48 +0000
Manifest next update: Fri 21 Aug 2026 18:01:48 +0000
Files and hashes: 1: C0a13JZ0RSPrkMSd5oEqtcq4rwk.roa (hash: 6ypJkRhP+y1RaXO9CpneyswfDWMF34KW/IwPdUjopIU=)
2: SPQiaZ3julcN6ImZOduLjd1qohM.roa (hash: 0YIxYrRhuUKf32GXdhAAMFjgeWQ0j2Tfw0leBwT+5Aw=)
3: v2wd9mI3TUrs0Miz-EMS30ISVZk.crl (hash: ToQf+9TCObObgL2qCchYc0C4PHNgkUJp54jLMcxpYhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:56:1a:08:a9:e0:61:60:78:52:94:66:79:c6:ef:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Validity
Not Before: Aug 20 18:01:48 2026 GMT
Not After : Aug 21 18:01:48 2026 GMT
Subject: CN=5f430cc4c3917194c8a1acbbdac2d48f5333fbbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:44:16:02:58:3c:f7:34:67:18:b5:83:cb:71:
e2:59:df:b1:45:0d:c6:a5:f0:cc:5b:50:3b:4a:91:
ac:a4:a5:be:49:cb:26:46:51:ac:0c:70:3d:92:a2:
b4:d1:72:79:59:88:1c:64:6c:6e:ea:7c:e9:0a:e7:
f8:01:2a:ec:ab:5a:7f:c1:21:50:f4:99:90:93:28:
74:6a:78:2a:71:ef:8c:7d:78:d5:3a:95:56:27:b6:
a7:e1:14:ac:3c:3f:ef:52:25:d6:39:98:ed:98:83:
d7:63:da:24:23:22:b9:ce:be:6f:12:5e:43:ba:1c:
ef:a9:7b:90:91:31:f0:6d:39:57:9b:b4:ba:90:5d:
e4:5a:0c:bb:04:31:e4:1b:08:9b:49:5c:dd:13:e0:
7a:f4:80:6b:85:ac:00:f1:15:e2:29:a2:70:15:2b:
3f:bd:b3:37:10:78:53:62:60:6b:c0:49:15:1b:82:
24:90:9a:4e:e7:f8:4a:47:6d:1d:d5:4f:03:9e:79:
ae:d2:dc:14:d0:7a:e0:7c:3b:97:7c:25:7c:1f:39:
bd:4d:76:63:7e:6f:a1:f4:6e:42:47:28:f3:e1:68:
33:69:d1:36:b1:ba:ad:65:99:0f:51:28:09:88:ec:
0b:8e:bc:8e:22:de:6d:5c:2b:36:1b:12:ed:45:5e:
8d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:43:0C:C4:C3:91:71:94:C8:A1:AC:BB:DA:C2:D4:8F:53:33:FB:BC
X509v3 Authority Key Identifier:
keyid:BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:06:09:fa:f4:29:3b:56:e1:2a:47:0b:7e:95:d3:50:a4:32:
7c:15:fb:ed:f9:75:cf:33:d0:d2:fa:29:7f:c1:8a:2d:e9:cf:
09:55:15:4e:be:46:45:5f:c0:31:ee:29:0a:30:39:14:f1:b4:
4a:54:f3:7b:d1:4e:9e:43:97:e9:e4:a2:31:0f:f1:a5:bc:37:
31:d6:bb:77:22:7f:57:97:d3:8a:9c:b4:85:2b:14:08:01:04:
f8:d7:c2:f4:ba:5f:30:5b:8b:9a:37:fa:a2:02:5f:98:8c:d0:
05:0c:ac:c4:b0:bd:89:cb:6c:a5:91:e2:81:f2:c6:0a:55:2b:
80:55:eb:71:f1:c1:fd:de:70:82:7b:53:41:6a:bb:34:e0:57:
c7:d9:00:f7:09:7a:54:f4:20:e7:a1:64:e1:d3:94:78:91:4f:
0e:63:d9:70:9a:9e:26:18:57:d7:f0:64:9b:04:09:0c:51:a1:
95:5c:4d:7f:15:6f:ba:50:88:fa:f4:3a:95:cd:f7:d0:58:a1:
02:3b:ff:00:ea:60:c5:9d:7b:81:38:04:e2:9a:75:b9:a1:b9:
1e:05:44:d0:9b:df:87:42:6a:d5:66:72:2c:ae:95:ea:66:5e:
28:c3:ea:6b:24:6c:18:30:0d:07:92:2e:4f:a4:8a:7d:14:6f:
66:fd:54:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:55:36 2026 by rpki-client