Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
File: mdNWGe0hC-CsKdFwortc10VWk7w.mft (raw, json)
Hash identifier: 7Qx+53nvttIYK/GqB7uBHxeG2lzWTLfU7A5oY6yngQM=
Subject key identifier: AD:1F:81:0F:41:29:19:25:9E:5B:0F:DC:A9:6E:67:7B:DB:86:C0:34
Authority key identifier: 99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC
Certificate issuer: /CN=99d35619ed210be0ac29d170a2bb5cd7455693bc
Certificate serial: 019FA1165E30C510148EF59124195660C7DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
Manifest number: 18FD
Signing time: Mon 27 Jul 2026 01:00:25 +0000
Manifest this update: Mon 27 Jul 2026 01:00:25 +0000
Manifest next update: Tue 28 Jul 2026 01:00:25 +0000
Files and hashes: 1: 1-1b9kIdAlblnsi3fi8wMUDdRXmQ.roa (hash: EHBhiVunuwqspkFW8sGSqvBOxHJnouc2J5HPWr1aeGw=)
2: 9aFjflm38MN581vnLtWpsCX-q7Y.roa (hash: yLjtSs5KlibIMz+VoXmAGRKRF617RWal83eBR+rXqCQ=)
3: mdNWGe0hC-CsKdFwortc10VWk7w.crl (hash: xTAY1cjqon82PE82VRLV++EYRh2ISphNqWNBcc/pEGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 01:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:5e:30:c5:10:14:8e:f5:91:24:19:56:60:c7:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d35619ed210be0ac29d170a2bb5cd7455693bc
Validity
Not Before: Jul 27 01:00:25 2026 GMT
Not After : Jul 28 01:00:25 2026 GMT
Subject: CN=ad1f810f412919259e5b0fdca96e677bdb86c034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:61:65:85:0a:b0:9a:20:02:b2:05:1f:84:f9:
9c:7b:5a:d5:1d:b8:73:22:17:d9:d8:d1:38:1d:4d:
eb:65:cd:30:4e:0f:91:4b:1d:e4:92:a4:f3:46:04:
d0:6e:2a:d2:a0:ee:65:42:5a:91:d4:ef:9e:79:bc:
c7:9d:5b:c6:a6:a5:33:f0:5d:a9:41:3e:87:b8:2c:
f4:59:16:1f:35:35:f8:df:b9:72:85:21:ab:1b:8e:
d3:89:19:79:7e:fe:b4:a5:1f:d2:9c:fa:91:72:7c:
fd:47:b2:5c:ac:8a:05:7a:bd:97:b5:ec:88:e4:07:
43:bf:a8:cb:c3:6c:4e:a2:57:21:8e:95:f0:e4:a7:
70:bd:d6:47:15:09:87:12:b3:89:42:28:14:da:58:
04:46:ef:33:45:ac:d0:ec:92:f1:2f:9e:51:fa:bd:
2e:2b:07:75:1c:a4:e2:43:58:dc:fd:4f:f1:8a:05:
18:63:e0:ec:0e:ef:d6:29:b9:81:4a:78:23:09:cf:
fa:04:de:17:67:76:14:a3:f2:08:2f:bb:fb:fc:08:
70:54:cb:82:6b:3a:b9:ce:9b:56:a4:ae:19:7e:1d:
e0:55:ca:48:f1:00:51:fc:30:9f:5a:b1:4d:e5:3e:
03:72:34:de:c7:b9:4a:94:a6:c3:bd:68:52:f8:41:
33:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1F:81:0F:41:29:19:25:9E:5B:0F:DC:A9:6E:67:7B:DB:86:C0:34
X509v3 Authority Key Identifier:
keyid:99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:de:1e:17:85:46:a6:76:c5:c0:be:3a:c1:b9:e6:c3:6a:1c:
bf:58:48:19:f1:46:71:77:1f:6c:2c:cd:20:39:13:ac:7e:c7:
61:71:c3:37:6c:ba:f3:56:86:90:4a:5a:ab:b8:5b:07:7f:19:
c1:4a:3e:a0:a2:52:e9:b9:88:04:26:e1:de:e2:78:36:11:80:
06:b4:16:c6:df:8c:90:95:f6:e3:6c:dd:b3:be:50:a5:1b:38:
a0:70:09:77:0c:a1:c9:ed:b6:b2:c5:69:43:33:9d:99:b1:99:
3f:95:73:9a:4f:f8:ca:4d:87:86:44:dd:29:74:a6:87:09:c1:
4a:d2:14:49:52:ee:2e:9c:7e:87:39:24:f5:50:39:fc:90:a0:
65:40:7b:43:c2:c4:94:d2:e6:33:84:ae:bb:07:de:7f:7d:b1:
7d:66:08:75:5c:0c:90:c1:0e:c7:6a:77:6e:6f:2b:3c:88:d8:
3b:a8:39:93:51:7b:f7:81:fb:11:e3:80:4e:7b:53:17:e9:e7:
dc:f5:28:10:b8:8a:91:2e:70:86:b4:44:8c:83:f5:71:12:c5:
63:d6:b4:cc:e2:51:57:31:af:14:a7:96:f3:fa:8f:5d:a7:55:
72:cd:8e:38:d9:f3:33:a5:6f:5e:4a:0e:96:60:6f:aa:6e:e4:
ef:7a:61:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:29:11 2026 by rpki-client