Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
File: mfyNwqfBufMroZV_9JLcC6TyYP8.mft (raw, json)
Hash identifier: p+TRr1qzM92MZK1TlORwcz8dxrL6hKxOgNXtr47C+V0=
Subject key identifier: D7:2C:14:BD:1E:6E:D6:EE:5D:07:E7:3E:06:63:4F:17:38:4F:6A:D5
Authority key identifier: 99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF
Certificate issuer: /CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff
Certificate serial: 019FA2973F8694B6BB2ACD0265805917C840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
Manifest number: 0438
Signing time: Mon 27 Jul 2026 08:00:48 +0000
Manifest this update: Mon 27 Jul 2026 08:00:48 +0000
Manifest next update: Tue 28 Jul 2026 08:00:48 +0000
Files and hashes: 1: 7iabnlFmeCBBjsLFJN99I8--_-4.roa (hash: XEo4P0carZV4gE6HMO4BcJUELgS7un1lJ1bRLna274A=)
2: mfyNwqfBufMroZV_9JLcC6TyYP8.crl (hash: Jl5r5vVZLFt1xuMJ4QMC1GHJj3iWIC7Wq7n2OPe5hE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:97:3f:86:94:b6:bb:2a:cd:02:65:80:59:17:c8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff
Validity
Not Before: Jul 27 08:00:48 2026 GMT
Not After : Jul 28 08:00:48 2026 GMT
Subject: CN=d72c14bd1e6ed6ee5d07e73e06634f17384f6ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:73:2c:7a:75:59:7a:03:74:9c:99:33:57:fa:
5a:4b:07:c2:ed:61:eb:c3:12:e2:37:64:05:a7:3c:
f5:18:e7:dd:71:a5:bc:d0:61:93:bc:d8:f0:9e:23:
3d:6e:84:0f:58:30:fd:01:ab:b4:b0:62:02:78:67:
6b:d4:53:a0:22:70:f6:c7:84:10:be:67:33:83:c3:
2e:48:3d:16:aa:9f:29:93:9e:40:7b:10:fe:32:3e:
73:a4:67:06:64:72:69:f4:76:16:4f:8d:f0:2e:13:
52:09:69:61:42:d9:00:84:33:d2:ad:97:7c:a9:20:
2a:ec:3a:1d:0f:bc:61:c6:00:df:09:58:3f:76:3d:
34:27:6b:f5:1a:f3:84:95:88:ac:41:ad:e9:7c:cc:
da:2b:c6:87:80:8f:29:91:96:fe:af:d5:3f:46:43:
f6:66:7e:f4:d6:e5:fc:41:ce:1c:53:11:c2:ce:d1:
55:09:54:f5:cb:79:2d:87:fd:da:d8:4c:45:9a:00:
58:98:68:6e:8d:39:dd:03:27:c9:9d:62:31:c6:c2:
70:05:0b:16:cd:bf:a5:50:d6:e6:20:64:75:b0:ba:
4a:cb:00:47:4b:82:b6:64:ef:fb:7f:ce:fe:28:82:
64:8c:f8:76:b6:ad:d2:98:26:08:2f:35:11:a7:f2:
27:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2C:14:BD:1E:6E:D6:EE:5D:07:E7:3E:06:63:4F:17:38:4F:6A:D5
X509v3 Authority Key Identifier:
keyid:99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:88:2e:38:b7:5b:3a:6b:53:e6:ca:02:6a:4c:b2:33:f5:e6:
d3:67:91:82:c2:6e:7a:9b:7a:85:04:bf:62:e5:77:fe:fa:c7:
28:ec:c0:b2:d0:78:aa:7f:3d:46:f9:b6:45:1c:a1:06:4c:7e:
63:d7:6f:96:d3:30:e1:4b:f9:0d:3b:a8:24:b8:28:0f:80:73:
92:d0:60:88:72:f5:04:bd:3a:59:c7:d7:04:0a:36:87:77:40:
70:5e:48:d0:7c:91:c3:35:d5:f5:86:d1:92:82:de:69:5d:1b:
a3:c0:87:15:28:bc:9f:49:86:7e:6e:2d:93:3e:8f:14:c0:b2:
2e:71:13:e3:cf:34:8a:3f:97:10:ff:5f:5c:ab:d8:77:ac:a7:
fb:e6:e6:f0:6d:b9:cc:74:fc:dd:e7:2e:22:f1:7a:5e:43:9c:
6b:6c:38:82:5b:d3:0f:87:aa:70:4e:b3:c7:fe:6f:ff:63:d9:
a9:71:33:23:22:81:35:2a:6c:07:31:2d:82:75:03:80:90:cd:
3d:ea:a7:72:ea:65:01:15:7f:68:7d:ae:54:e0:e1:22:b5:31:
66:5a:33:3c:84:a0:39:7b:68:fd:ec:d2:f3:8d:e5:16:d6:bb:
60:79:69:c3:ce:ac:a8:1f:5b:71:44:ef:dd:9f:82:fe:1d:e2:
b8:af:4f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:01:32 2026 by rpki-client