Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft
File: bN7Hsun4ZurDa8McpMT_YtU90WY.mft (raw, json)
Hash identifier: WUBCr5DcQB1ChoyU/X5Z1iFeDcpnmDlXY3YbE5JxXOI=
Subject key identifier: 48:8D:ED:FA:93:05:6F:8D:82:5F:62:8A:74:C9:80:9D:08:F1:17:98
Authority key identifier: 6C:DE:C7:B2:E9:F8:66:EA:C3:6B:C3:1C:A4:C4:FF:62:D5:3D:D1:66
Certificate issuer: /CN=6cdec7b2e9f866eac36bc31ca4c4ff62d53dd166
Certificate serial: 019FA2290C336ECCD63C322DAC2CAFA2A6D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bN7Hsun4ZurDa8McpMT_YtU90WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft
Manifest number: 19D0
Signing time: Mon 27 Jul 2026 06:00:26 +0000
Manifest this update: Mon 27 Jul 2026 06:00:26 +0000
Manifest next update: Tue 28 Jul 2026 06:00:26 +0000
Files and hashes: 1: LEEO04PoylroqFY8moJTc81n18Y.roa (hash: VL5m4Xl6YVLRVrUOG2POhFSxcgEK6w8mouyfVI3KzkQ=)
2: bN7Hsun4ZurDa8McpMT_YtU90WY.crl (hash: +Qwtdx5pPiEMbYH/msLJTGdsqoZ/Uo6SEuZaj2f8dg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bN7Hsun4ZurDa8McpMT_YtU90WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:0c:33:6e:cc:d6:3c:32:2d:ac:2c:af:a2:a6:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cdec7b2e9f866eac36bc31ca4c4ff62d53dd166
Validity
Not Before: Jul 27 06:00:26 2026 GMT
Not After : Jul 28 06:00:26 2026 GMT
Subject: CN=488dedfa93056f8d825f628a74c9809d08f11798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:13:39:59:3f:2f:77:dc:e0:62:49:7f:d0:48:
82:55:1a:6a:fb:39:9d:29:66:de:9b:09:14:bb:bf:
75:2e:52:7f:36:bf:ac:4f:2c:79:2a:4d:ae:54:b1:
17:e7:9c:9a:3f:b7:1c:44:ef:23:42:5b:a4:15:55:
e9:43:b6:fd:9a:81:0f:ef:7d:56:7d:d9:c4:79:5f:
01:f5:4f:b5:5a:4d:4c:51:97:92:4b:9a:7f:dc:19:
16:33:34:70:1b:30:fe:90:a8:6a:47:17:9c:b3:3b:
f0:9a:31:85:e6:69:50:63:0d:d2:35:0c:2b:2f:b2:
d8:49:10:5e:62:4c:94:fd:13:04:8b:9c:53:49:24:
5e:90:77:db:a0:a5:16:22:c5:aa:f2:b8:7a:32:e0:
12:e8:fa:c0:bd:c4:d0:29:15:69:d3:1f:60:b4:f7:
66:d6:f0:e2:c2:fe:b4:c6:fb:e4:80:20:f0:50:d1:
c6:6c:89:e8:4b:b0:c7:ca:a3:ae:82:58:dc:9f:67:
d4:08:93:07:23:b0:66:46:93:61:c4:0a:b6:3c:53:
28:38:66:4d:cf:7b:a2:8b:81:94:35:d4:f5:a6:cb:
2e:4e:ab:c9:26:c9:d7:31:7a:5c:1d:13:08:b0:17:
5b:81:97:3c:39:85:49:31:c3:59:24:c0:19:90:19:
8a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8D:ED:FA:93:05:6F:8D:82:5F:62:8A:74:C9:80:9D:08:F1:17:98
X509v3 Authority Key Identifier:
keyid:6C:DE:C7:B2:E9:F8:66:EA:C3:6B:C3:1C:A4:C4:FF:62:D5:3D:D1:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bN7Hsun4ZurDa8McpMT_YtU90WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:86:f3:ca:6b:1c:62:f9:93:5f:53:f6:89:8a:02:5e:74:9e:
e3:5e:18:74:c4:9f:55:ef:7c:51:93:28:0a:cb:c9:4c:53:56:
c9:f5:7b:a9:e1:2e:81:8d:57:9c:f2:5a:1c:f0:11:4f:2b:70:
13:b1:00:10:b3:ff:fa:1f:ec:45:c2:d4:20:34:63:4c:2e:9f:
e1:b0:c4:83:50:d1:39:14:f2:c8:06:d6:b3:39:73:eb:68:38:
0d:e7:1f:18:1a:89:fb:8a:51:34:53:e9:fc:97:9b:70:e0:91:
3a:5a:c2:80:88:f6:b2:60:9f:a3:e8:2e:4c:fd:75:21:68:d9:
88:fc:59:de:96:f3:7a:6a:7d:cd:48:9e:9a:06:3e:08:dd:0d:
0e:7f:15:7a:53:2e:14:1f:4b:61:4f:f8:58:c0:06:32:45:72:
17:8c:af:03:fd:45:bc:67:4d:79:59:e9:1e:57:c8:dd:de:ad:
e7:df:71:65:ce:f1:44:b6:cb:04:40:05:bd:f5:be:87:be:78:
ec:54:79:80:ce:21:86:d9:0a:ba:12:c0:af:4c:63:e3:b2:f1:
ad:b8:bd:09:39:98:1d:49:a8:ad:58:a1:ba:b2:21:a7:2b:16:
b8:1a:98:ea:be:2f:8b:01:3f:b8:cb:68:5a:04:95:57:5a:23:
fe:21:54:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:38:47 2026 by rpki-client