Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/n5D0diDPsoZkkPXRGL0lpQBTEeY.mft
File: n5D0diDPsoZkkPXRGL0lpQBTEeY.mft (raw, json)
Hash identifier: utMBN4VQyTVokBBqjKp+IFMODV+Co4AaVrRIlv2icX4=
Subject key identifier: 2C:91:B4:74:59:A7:DF:FD:C0:3B:6D:FD:27:1F:BB:58:EE:F1:CA:FE
Authority key identifier: 9F:90:F4:76:20:CF:B2:86:64:90:F5:D1:18:BD:25:A5:00:53:11:E6
Certificate issuer: /CN=9f90f47620cfb2866490f5d118bd25a5005311e6
Certificate serial: 019FA0E06AEF86200F5C3E9D3D0212A9C1A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5D0diDPsoZkkPXRGL0lpQBTEeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/n5D0diDPsoZkkPXRGL0lpQBTEeY.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:01:29 +0000
Manifest this update: Mon 27 Jul 2026 00:01:29 +0000
Manifest next update: Tue 28 Jul 2026 00:01:29 +0000
Files and hashes: 1: Qk8SUDtv35PQudBghJLMDCkV05Y.roa (hash: CGtXCN1Ppc2jLH4a4E4mJ8Yb24I37XQwBgJ85+uhimE=)
2: VLazWnEoP4FNqXwAq5qItoa84gg.roa (hash: GIpN7+SpErb0kVRnHT1vQxVl+Mf313Qjqs5dCJFjsZA=)
3: n5D0diDPsoZkkPXRGL0lpQBTEeY.crl (hash: p9Xg3HYIQltInojIrOACzocO0CsCa5eJl9N1MpvRrhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/n5D0diDPsoZkkPXRGL0lpQBTEeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/n5D0diDPsoZkkPXRGL0lpQBTEeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/n5D0diDPsoZkkPXRGL0lpQBTEeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:6a:ef:86:20:0f:5c:3e:9d:3d:02:12:a9:c1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f90f47620cfb2866490f5d118bd25a5005311e6
Validity
Not Before: Jul 27 00:01:29 2026 GMT
Not After : Jul 28 00:01:29 2026 GMT
Subject: CN=2c91b47459a7dffdc03b6dfd271fbb58eef1cafe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3b:d3:52:3c:51:fb:b6:48:0b:e3:51:31:44:
3a:9a:49:f1:28:48:da:9b:60:16:2d:58:d8:28:eb:
c2:77:2c:bb:61:a7:e9:74:cd:90:ee:66:91:34:b2:
dc:1f:6e:e8:a0:cb:d9:23:cc:3c:9e:e7:b4:a8:9d:
d6:0a:6b:ab:95:8f:26:7e:d8:6f:28:40:50:b6:a8:
ed:11:cf:29:e0:0a:94:dd:df:fb:03:67:f4:68:2a:
e0:3a:82:27:22:8d:26:95:b7:42:79:25:5a:7a:23:
c3:58:af:4b:3a:68:42:6f:1e:e7:34:82:1f:13:22:
cc:55:b8:68:e1:ed:c1:df:f7:1b:2e:a6:fe:6c:f8:
8b:ca:1a:ca:7f:35:30:bc:08:28:f3:15:b0:87:70:
e2:61:7c:9c:34:16:1d:bd:bf:92:80:37:98:4f:8f:
24:f7:da:1c:a6:47:c5:e3:3f:f8:01:3b:d1:c9:d6:
04:90:5d:95:6a:03:23:a8:c1:1e:21:d8:ec:2d:d1:
c0:ec:23:2b:81:b9:57:5f:90:be:d1:47:b8:1b:19:
79:2c:28:65:b6:86:d0:dd:3a:9b:c7:06:e7:f8:8b:
00:42:a9:ff:0a:25:a8:b8:59:28:0e:02:5d:7b:45:
f3:56:c8:85:fa:28:89:9c:22:a3:c6:a2:6a:7f:54:
85:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:91:B4:74:59:A7:DF:FD:C0:3B:6D:FD:27:1F:BB:58:EE:F1:CA:FE
X509v3 Authority Key Identifier:
keyid:9F:90:F4:76:20:CF:B2:86:64:90:F5:D1:18:BD:25:A5:00:53:11:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5D0diDPsoZkkPXRGL0lpQBTEeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/n5D0diDPsoZkkPXRGL0lpQBTEeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/n5D0diDPsoZkkPXRGL0lpQBTEeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:57:fd:6b:79:16:83:0f:3d:38:65:ef:c3:1f:42:9f:4a:97:
98:46:86:32:c3:71:22:a9:8f:fc:06:ae:48:1c:62:4f:c0:6c:
8c:9b:0b:96:e3:84:4f:c2:52:09:1c:47:2f:de:23:6b:6d:8a:
e2:65:71:e3:0e:e9:26:da:8c:46:91:2e:43:26:3b:19:8c:af:
ce:bb:12:15:de:dd:d4:2d:e6:12:b3:1d:ff:81:3d:7a:42:17:
d5:c7:2e:85:17:62:75:2b:83:9c:5d:65:73:42:43:96:52:41:
9b:f5:ee:d2:93:60:76:4a:f7:3e:25:17:53:6e:bc:a1:c9:88:
f6:4e:5f:e5:be:97:5f:2c:ba:94:97:a6:0d:33:ec:e7:2b:a1:
37:05:f1:42:81:02:1a:c6:cf:cb:84:a6:6b:65:67:90:d8:42:
7d:4c:aa:a1:f1:a6:dd:1d:9c:65:b0:02:fa:ec:5b:f4:70:f1:
4c:d6:53:8b:5f:96:51:46:8e:b4:60:7b:9e:c0:7d:16:e9:b3:
fd:58:7b:20:99:80:df:59:a4:d2:e8:65:1a:e5:fa:9f:32:6e:
09:a2:4b:33:80:25:ea:fb:74:a1:a0:36:c8:6a:f0:ff:bf:93:
29:be:6a:6d:cd:6c:bc:57:20:d5:0a:d8:87:87:92:e9:6f:30:
66:99:8d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:32:20 2026 by rpki-client