Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
File: rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft (raw, json)
Hash identifier: 5c+Mb2UgOX9MjWEJspvjAjLmz/u5Uasq7fFQzqPfh7g=
Subject key identifier: DF:C4:C2:A9:AD:E0:24:9D:46:C3:64:93:E1:B0:BB:57:E6:07:8F:33
Authority key identifier: AC:EC:F0:9B:85:D9:1C:D6:82:B0:67:43:CB:6C:59:30:E1:FC:55:1C
Certificate issuer: /CN=acecf09b85d91cd682b06743cb6c5930e1fc551c
Certificate serial: 019FA0E00BF4ED952461781B006AF4643E1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
Manifest number: 05F1
Signing time: Mon 27 Jul 2026 00:01:05 +0000
Manifest this update: Mon 27 Jul 2026 00:01:05 +0000
Manifest next update: Tue 28 Jul 2026 00:01:05 +0000
Files and hashes: 1: D1uepCAmRlFVjKTUqfMxFmzOti0.roa (hash: pf7DS73sBkltlYtAHV2Wkt/8vgHhRENJ2syRZHBzVdQ=)
2: rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl (hash: +fYiOFeTer+e8o5sGHgulNeIYyUpCe5UHyXMaRW0LLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:0b:f4:ed:95:24:61:78:1b:00:6a:f4:64:3e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acecf09b85d91cd682b06743cb6c5930e1fc551c
Validity
Not Before: Jul 27 00:01:05 2026 GMT
Not After : Jul 28 00:01:05 2026 GMT
Subject: CN=dfc4c2a9ade0249d46c36493e1b0bb57e6078f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:db:09:0d:05:e6:a1:02:62:d3:e8:17:f2:71:
e6:9b:f3:fd:a4:b8:b0:21:18:96:a8:95:1d:47:d0:
1e:91:03:6e:8d:12:1c:16:43:e9:2b:50:e0:1a:a0:
26:dd:36:da:e6:86:69:97:fe:fc:96:34:23:2a:37:
83:54:69:2f:29:63:e2:09:dc:fd:0c:3c:b2:77:35:
ef:8e:a8:1a:fd:85:60:30:09:de:6e:aa:77:90:04:
0a:84:aa:8a:fd:41:de:4f:01:33:bc:e8:6e:ca:34:
51:57:73:25:e5:29:58:ae:16:ab:e5:c1:99:86:68:
f0:18:4f:05:17:15:4b:8b:68:55:fa:84:8d:43:a8:
a8:f6:9b:8b:20:53:6d:eb:00:bc:97:cb:68:4b:e7:
3f:57:e3:9c:e6:f0:95:00:54:71:64:f8:90:8e:0d:
dc:da:7c:12:57:92:79:ba:e3:cf:be:7c:13:f7:87:
aa:9e:2f:2e:58:c8:18:26:c6:41:3d:ac:7e:a4:32:
5d:63:b6:81:4d:56:7b:06:08:d0:ff:85:5c:5c:97:
85:3a:23:61:57:f0:9f:52:77:ba:cf:1c:18:bf:8b:
e7:b1:17:1e:1b:2f:f9:5f:e9:05:c8:06:be:79:f7:
42:a6:e7:95:28:8c:c2:dc:62:93:c4:8e:6f:53:9d:
ed:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C4:C2:A9:AD:E0:24:9D:46:C3:64:93:E1:B0:BB:57:E6:07:8F:33
X509v3 Authority Key Identifier:
keyid:AC:EC:F0:9B:85:D9:1C:D6:82:B0:67:43:CB:6C:59:30:E1:FC:55:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:aa:84:f7:43:07:7e:fc:2f:4d:43:94:ea:ba:c2:f1:0f:da:
e8:9b:26:8c:9a:7d:46:aa:19:69:17:da:19:ea:ed:ac:a1:da:
e6:4c:f2:c6:ef:70:f4:a3:46:e6:ec:ad:7d:19:7d:be:19:bb:
2d:32:61:be:21:0d:07:6d:27:1b:42:4d:44:ba:f2:db:38:00:
00:d2:37:a6:67:30:6b:93:2a:20:1f:78:64:c2:68:68:e0:9a:
78:23:87:e3:7f:2f:6b:3d:6e:a4:21:50:ea:5c:e1:da:e2:c6:
f1:db:10:ac:97:ce:9d:09:81:38:e9:5e:7c:15:cd:fa:85:c9:
39:02:82:94:e7:17:f7:3c:87:7d:ae:fc:db:ce:32:5a:24:cf:
5b:a3:7c:77:6d:6a:4d:a0:84:21:44:35:8e:57:59:9a:0a:6f:
a0:13:86:9b:d9:d8:13:cf:62:37:91:1e:70:4a:8f:5f:4f:0c:
0f:53:06:f1:49:d0:6f:05:d5:5a:f9:54:0e:72:70:c9:4f:96:
f8:8c:13:85:9f:ae:92:e2:2f:28:fb:e9:bd:1d:2d:c2:de:90:
2c:5f:0d:50:31:a4:7e:75:b5:15:b0:d4:2c:da:d4:b6:ae:21:
e5:36:aa:13:91:c5:a9:03:af:ba:c3:72:b0:4e:f6:9c:dd:68:
59:45:f6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:01:10 2026 by rpki-client