Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
File: doFcfQ6GPCF4D4v0uezDqcZFkpg.mft (raw, json)
Hash identifier: C6aA9uJf/mqyN3TNysy2wj/Wazl7vMEzdiKn2Mj7LW8=
Subject key identifier: 81:8A:30:CE:EC:9F:FE:6E:49:6E:93:71:39:78:DA:71:44:67:53:A8
Authority key identifier: 76:81:5C:7D:0E:86:3C:21:78:0F:8B:F4:B9:EC:C3:A9:C6:45:92:98
Certificate issuer: /CN=76815c7d0e863c21780f8bf4b9ecc3a9c6459298
Certificate serial: 019FA116DFCE2F7D9E418DA6654B435F463E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
Manifest number: 06C5
Signing time: Mon 27 Jul 2026 01:00:58 +0000
Manifest this update: Mon 27 Jul 2026 01:00:58 +0000
Manifest next update: Tue 28 Jul 2026 01:00:58 +0000
Files and hashes: 1: NwXP9XjEV_tAQNFwDQBmSN78alU.roa (hash: I0Ts9gFxat3bJUV/IHoujUultkWM8WN3TtuoR0WHIVg=)
2: doFcfQ6GPCF4D4v0uezDqcZFkpg.crl (hash: jtCcLtvbeAdyZ6iyw1G9C4N2WQ/GYoXY6z0RDEqEbnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:df:ce:2f:7d:9e:41:8d:a6:65:4b:43:5f:46:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76815c7d0e863c21780f8bf4b9ecc3a9c6459298
Validity
Not Before: Jul 27 01:00:58 2026 GMT
Not After : Jul 28 01:00:58 2026 GMT
Subject: CN=818a30ceec9ffe6e496e93713978da71446753a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:33:1b:be:5b:5b:cb:d0:5b:db:b0:2d:2c:99:
ec:b4:3b:5f:18:d8:0b:ed:3e:21:fe:0f:65:6b:eb:
72:7c:78:62:5b:d4:eb:82:b2:80:cd:7e:05:14:c4:
14:a2:93:09:58:3f:ed:c8:22:28:d1:ac:4d:30:79:
dd:e4:26:ab:0b:f6:21:a3:8a:e8:f6:17:d5:82:93:
8c:ac:35:38:f9:71:ca:58:ef:e9:90:6a:4b:f5:a2:
73:7b:85:8f:c4:94:f5:9f:56:44:a4:08:cc:54:36:
a3:cc:cd:68:96:c6:ea:42:6f:97:5e:25:61:ad:38:
54:3a:55:e2:8c:75:44:b5:61:5a:2e:af:24:51:db:
6a:ab:b0:77:ad:76:da:ae:78:07:d9:12:87:68:f7:
6b:89:cd:9a:f2:31:d9:ac:a4:bf:73:2e:da:59:31:
87:13:e0:b9:38:1c:aa:a6:0e:0c:b9:f7:b9:c6:97:
d8:5f:01:6e:ec:4e:fa:7a:eb:17:f7:00:ed:6e:2b:
3c:b8:04:0a:c3:ea:14:f1:1c:c4:2c:5a:cf:88:47:
f2:7a:ea:b7:56:92:f4:3d:5c:91:73:e6:35:57:0e:
e4:da:e1:f2:51:c8:bb:c1:80:fa:ca:11:9c:25:7a:
39:1a:0d:13:4f:df:28:09:e5:7d:24:cb:5a:99:98:
f3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:8A:30:CE:EC:9F:FE:6E:49:6E:93:71:39:78:DA:71:44:67:53:A8
X509v3 Authority Key Identifier:
keyid:76:81:5C:7D:0E:86:3C:21:78:0F:8B:F4:B9:EC:C3:A9:C6:45:92:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:3c:a3:e4:f1:70:5f:4a:85:8d:7e:3b:58:f0:3d:ea:55:7e:
6d:c3:e0:58:c3:73:7f:55:5e:20:4e:88:d5:6c:4c:5c:10:c3:
76:db:05:e3:c3:b1:d7:1c:1f:64:f0:98:c1:b3:05:fb:81:94:
4a:d2:f2:5c:7b:2e:6a:f4:5e:be:8e:56:e6:0b:c2:59:6e:e6:
6b:19:03:b3:ac:a3:33:83:82:99:28:b6:4f:76:c4:cf:d5:7a:
d8:c5:fb:bb:82:c3:60:ae:ee:1e:cb:40:e4:51:b1:01:d5:e4:
ab:3e:cf:fd:23:67:4f:62:d3:ac:8a:ab:75:a5:e4:b6:80:a6:
5c:6b:6c:56:db:db:c6:96:31:1f:f7:80:08:7d:58:c4:4d:b7:
06:cc:5b:8d:0e:ba:87:78:5d:45:af:42:68:c9:61:95:62:a9:
17:f8:33:8a:3f:90:12:9f:c2:a5:51:db:6e:39:4f:0c:8a:82:
ed:3b:03:3f:79:bb:2e:f4:f2:0c:d2:30:ac:bf:9a:d4:f7:57:
78:eb:58:8a:51:0e:bd:76:cc:b2:98:b8:4e:c2:14:0b:19:1a:
ce:15:bd:4b:3a:25:b9:e4:af:05:3e:b7:5b:85:86:c3:e0:11:
8d:af:15:94:ea:e2:a6:ec:50:78:31:e3:e1:1d:b1:01:09:fa:
70:35:f8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:25:57 2026 by rpki-client