Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
File: rdbXV2zSgkXGefmvNXXANbiiLJ4.mft (raw, json)
Hash identifier: 2vBbnHJYW+Z22hfDqGEOxc5kbjPWyOEVng80mqc4rvA=
Subject key identifier: 7F:D3:72:A5:1A:F0:BB:2C:3E:EB:66:A6:61:A6:9B:E4:6A:B2:F0:CD
Authority key identifier: AD:D6:D7:57:6C:D2:82:45:C6:79:F9:AF:35:75:C0:35:B8:A2:2C:9E
Certificate issuer: /CN=add6d7576cd28245c679f9af3575c035b8a22c9e
Certificate serial: 019FA14D8642600EC698A2CC98F4D782C9D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
Manifest number: 19D0
Signing time: Mon 27 Jul 2026 02:00:40 +0000
Manifest this update: Mon 27 Jul 2026 02:00:40 +0000
Manifest next update: Tue 28 Jul 2026 02:00:40 +0000
Files and hashes: 1: joEsumTHciP98sJSMtMVqKDplEM.roa (hash: ZNbfRxAe2BDrdXHR4GglfBv9LGkAz/jS+0EycaNDrzI=)
2: ndNvMD_GDyNAhabTWw8ewxtAhqA.roa (hash: hQpqZkD2p1H85fPt4GP6Omlnztm1FgKn0n0N3ljTpv0=)
3: rdbXV2zSgkXGefmvNXXANbiiLJ4.crl (hash: Ip8hh1YWmkWO0ZBtwDFray38qcVjGMf8xWgnyXxywkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 02:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:86:42:60:0e:c6:98:a2:cc:98:f4:d7:82:c9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add6d7576cd28245c679f9af3575c035b8a22c9e
Validity
Not Before: Jul 27 02:00:40 2026 GMT
Not After : Jul 28 02:00:40 2026 GMT
Subject: CN=7fd372a51af0bb2c3eeb66a661a69be46ab2f0cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c3:b7:6f:2c:cd:71:8e:1e:94:a7:6b:95:c1:
07:07:8a:a2:1a:a0:fd:05:73:5e:13:c0:77:ce:81:
d2:f1:7d:3e:e9:c7:d3:d9:a9:38:a8:db:74:0a:91:
2d:03:4d:e8:12:5d:54:40:72:c3:c3:cd:4e:94:02:
16:a7:70:f1:00:c6:09:29:b5:dc:a8:cf:df:1d:91:
72:a4:2d:e3:e4:fb:b5:a2:7b:b1:55:d9:7b:f0:da:
65:f2:88:ed:11:5b:d4:49:5e:3f:43:ed:83:fc:8e:
cc:b2:0a:22:d7:47:ac:09:0d:6d:0f:97:1e:ad:f9:
d6:22:a0:0b:1b:aa:da:11:5b:05:b1:2c:24:60:62:
61:98:1a:bd:b2:b3:54:1d:9d:ad:df:c9:86:66:3d:
c5:20:3d:33:77:4a:60:9c:e1:aa:06:22:f8:dd:be:
5a:64:fb:d5:a0:67:6c:8e:f4:57:c8:b2:86:ab:d1:
1c:e2:b7:60:16:f7:89:b5:50:6b:22:4a:bf:36:1f:
95:6b:7b:55:33:35:67:50:eb:88:38:12:6d:ed:47:
64:bf:fc:d9:b0:ef:54:2b:18:c4:37:55:53:bb:dc:
0c:0d:b7:95:cc:1b:10:6d:1d:a9:f8:3b:d5:dc:da:
bc:ce:b9:96:a3:72:0b:4c:62:64:45:4f:33:57:72:
bc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D3:72:A5:1A:F0:BB:2C:3E:EB:66:A6:61:A6:9B:E4:6A:B2:F0:CD
X509v3 Authority Key Identifier:
keyid:AD:D6:D7:57:6C:D2:82:45:C6:79:F9:AF:35:75:C0:35:B8:A2:2C:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:be:3b:19:d6:0b:4f:66:39:f7:fe:93:28:14:dc:b5:10:47:
a7:a8:0d:c8:5d:dc:55:13:e1:1a:95:ae:53:c9:42:1c:2e:6d:
c2:68:22:8b:c0:f2:46:fe:88:9d:20:ac:53:a8:ff:52:98:fe:
3d:2b:cc:76:20:0b:b4:cd:43:e8:df:a6:7e:9a:cb:4d:24:26:
28:e8:9d:6a:02:a8:ae:8b:bf:82:15:06:f9:55:48:ce:01:f5:
e1:7a:86:a1:0e:f5:0d:64:e8:4e:99:7f:3a:72:63:ba:65:6f:
f6:6d:5f:05:72:13:41:8c:ac:34:1e:20:a6:3b:6d:ae:bb:5e:
07:ee:6d:02:ea:c1:9a:08:bd:ad:2f:f4:2f:e9:eb:24:69:a9:
5c:25:85:93:e8:a1:9c:f1:fe:b4:46:ae:c9:2b:18:6c:da:c1:
fc:b9:d5:7c:7c:7f:35:56:80:c2:f7:79:97:2f:4a:28:f6:d4:
6b:2e:86:3d:1b:8a:57:83:6f:4d:57:e3:18:a3:0b:6c:b4:d1:
27:c8:a2:4f:c9:e2:c8:e8:80:12:05:2c:ce:9b:a1:2c:1d:0c:
3f:3a:4a:49:99:d6:ee:0d:3f:fd:77:75:74:4a:db:5d:88:89:
83:78:7d:64:9b:14:e1:4c:3e:bc:44:4e:6b:88:41:f6:d3:1c:
99:0b:b8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:03:22 2026 by rpki-client