Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
File: roP3h5wsdKEWUrXgivZKrJCACwQ.mft (raw, json)
Hash identifier: UwgqTm8TuxnPm7Y6rIMeEVdXoTfSy99iBUTP6bFUiZs=
Subject key identifier: 25:94:56:04:0D:30:88:C0:1B:EF:14:82:54:53:94:63:02:64:59:95
Authority key identifier: AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
Certificate issuer: /CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Certificate serial: 019FA1BB65C585B88DEA724AC040835C540C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
Manifest number: 19D0
Signing time: Mon 27 Jul 2026 04:00:40 +0000
Manifest this update: Mon 27 Jul 2026 04:00:40 +0000
Manifest next update: Tue 28 Jul 2026 04:00:40 +0000
Files and hashes: 1: FbBfmY8BU8VigyDn7YgxLgSnlUs.roa (hash: tHVNex4gUdJAzQ5EQ6S1mMwVxpmtkwTF/khuntIVx8c=)
2: _8o003HukJtANidMUuNfF8h2iro.roa (hash: RD6ivkH2YAIVnq+oPiaSNKTUKGIT1SfwklfHbiuRs50=)
3: roP3h5wsdKEWUrXgivZKrJCACwQ.crl (hash: OVwYC7XNJk0Kd5nA9aOMOsexL1PlLtJ9q/UAk56SodU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:65:c5:85:b8:8d:ea:72:4a:c0:40:83:5c:54:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Validity
Not Before: Jul 27 04:00:40 2026 GMT
Not After : Jul 28 04:00:40 2026 GMT
Subject: CN=259456040d3088c01bef14825453946302645995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2c:0a:a7:ff:18:78:46:7f:7c:85:f7:d0:5e:
b9:cc:7c:33:1e:bc:df:1e:b9:3c:ee:77:a5:6c:e6:
bf:2a:a5:24:e9:44:1e:d5:06:fa:fe:af:c8:f4:89:
ef:16:8f:95:be:38:29:80:7d:2b:6e:30:91:19:77:
84:07:06:17:2d:fa:6d:ef:d6:9f:5b:32:0c:8f:ac:
46:34:c5:5d:73:13:2c:51:0e:25:b8:cf:75:f4:38:
32:8d:5b:90:e0:b8:f3:24:20:09:cd:2b:9e:89:44:
4a:8d:82:76:e2:70:64:c9:6b:c1:3e:e5:d9:69:15:
b4:01:77:11:ae:71:b8:6b:18:cf:11:c6:e9:1c:1c:
68:f5:81:60:e0:1c:1b:a3:a7:98:d2:7d:46:55:0e:
9c:f6:1f:25:dd:ee:71:c0:ec:af:db:7e:a6:24:74:
25:4c:37:5b:e0:58:8b:12:3e:4b:19:d6:99:06:7e:
9e:ab:4f:9b:e2:0a:95:21:37:cd:70:89:9d:0a:c3:
1e:f1:6b:57:ba:1b:e8:09:8e:de:79:0b:1c:86:91:
e5:98:67:6f:91:db:d8:61:6e:5e:93:e9:f3:fe:44:
55:24:79:54:3e:07:51:d5:3b:89:c0:ff:a2:72:02:
ea:77:11:de:de:c8:65:6c:2e:2d:dd:e7:20:4b:35:
2a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:94:56:04:0D:30:88:C0:1B:EF:14:82:54:53:94:63:02:64:59:95
X509v3 Authority Key Identifier:
keyid:AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:db:e2:f5:c3:bd:57:67:f2:d3:d0:a4:0f:18:98:4f:fa:3f:
8f:2d:cd:f4:40:18:15:a4:07:d4:34:f9:6a:f8:eb:8d:f7:06:
a8:5e:73:97:31:ef:42:df:3a:48:b6:87:af:f5:7e:41:78:dc:
3f:22:bc:69:6a:14:c0:a1:51:c7:07:75:e9:6b:94:2f:b4:d6:
b3:46:6e:a5:c0:3e:8f:a8:83:77:13:f6:a2:53:76:f2:71:8c:
a6:e8:ce:fc:2a:e1:bf:15:ed:01:fb:32:60:7b:9c:fd:06:c1:
06:0e:0c:93:20:8b:0e:8c:ee:34:41:a2:2a:ad:58:22:39:64:
0f:a2:f2:0f:c8:7f:b6:86:3c:db:5d:30:e3:88:3f:3e:d5:67:
68:d3:40:2e:b4:2c:e8:c0:28:17:16:b6:ac:fb:b5:9b:65:99:
e9:47:f5:00:4d:19:13:d0:68:3e:87:4e:48:75:15:79:48:e1:
b5:21:4e:0a:ed:f3:d6:a1:ba:19:a2:fb:63:12:3a:ae:3c:e6:
26:88:2f:08:7b:0f:3d:d3:3a:a5:db:1c:ff:24:bf:4b:c4:20:
70:b4:81:3b:5a:12:ac:df:40:b3:e6:e8:a1:73:9b:07:8c:93:
0c:6e:05:87:58:67:e3:98:c4:7d:96:4a:1d:9d:58:4d:e7:7e:
ee:3d:83:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:35:34 2026 by rpki-client