Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft
File: bd1AUuD8dlNjYcu9x3UId93zYK0.mft (raw, json)
Hash identifier: w3pBiWtuFobJQNPbaDVT3hjcR+WNFHdQVhiDSi2QDAg=
Subject key identifier: 71:FC:F7:C6:7E:91:88:5D:AA:90:FE:5B:C9:71:D5:6E:CF:BE:E8:78
Authority key identifier: 6D:DD:40:52:E0:FC:76:53:63:61:CB:BD:C7:75:08:77:DD:F3:60:AD
Certificate issuer: /CN=6ddd4052e0fc76536361cbbdc7750877ddf360ad
Certificate serial: 019F9692BA187C5EC854AEE875435BC43D18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bd1AUuD8dlNjYcu9x3UId93zYK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft
Manifest number: 12D9
Signing time: Sat 25 Jul 2026 00:00:25 +0000
Manifest this update: Sat 25 Jul 2026 00:00:25 +0000
Manifest next update: Sun 26 Jul 2026 00:00:25 +0000
Files and hashes: 1: bd1AUuD8dlNjYcu9x3UId93zYK0.crl (hash: qybAT3GKDPiubxjkn2sepzBWYkfEk6NsgVfpx+d/ORo=)
2: v-QuOOYMf4HsWM21RDZIDik1F8Y.roa (hash: tkB5JnPvXNK8KkYHS1hN95y7jCOIV01txTm1VSy3JoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bd1AUuD8dlNjYcu9x3UId93zYK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 20:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:92:ba:18:7c:5e:c8:54:ae:e8:75:43:5b:c4:3d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddd4052e0fc76536361cbbdc7750877ddf360ad
Validity
Not Before: Jul 25 00:00:25 2026 GMT
Not After : Jul 26 00:00:25 2026 GMT
Subject: CN=71fcf7c67e91885daa90fe5bc971d56ecfbee878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a2:b0:50:8d:df:f3:43:b1:73:37:cd:f1:aa:
96:8b:e8:09:ed:db:d8:e6:78:4b:1a:c1:62:71:80:
3b:d7:20:e3:8e:ea:ba:89:33:76:91:02:bf:09:c8:
e9:4d:a1:75:cf:af:86:85:20:ae:18:34:66:02:bb:
59:21:fe:8f:05:10:5d:7c:c8:5e:1d:d1:7f:3e:72:
22:7b:38:5c:a2:af:f1:33:21:f4:df:60:74:1c:ca:
af:ed:52:30:e0:2d:ea:34:cb:3e:05:80:e8:27:25:
10:c7:00:f3:94:f9:b9:6a:c1:db:09:ec:ec:01:75:
9d:3c:ec:22:e9:f0:d7:54:6a:e1:fe:f0:e6:da:be:
5c:91:00:49:dc:c4:a8:c1:66:b2:91:ed:bd:db:ef:
63:a3:65:0f:14:1e:7c:97:34:28:77:52:52:18:94:
4c:07:ab:08:4c:19:51:83:1c:94:68:91:59:74:26:
08:08:03:74:99:b7:f1:39:48:ca:93:67:c7:1c:aa:
d2:45:c5:b1:e0:08:68:13:76:2f:fe:42:d6:19:8a:
15:28:44:91:87:15:da:f2:6e:d7:49:9f:51:3c:c8:
af:a5:a8:65:05:5a:2b:d1:96:fb:cd:f2:ee:1a:6f:
f1:64:68:84:43:04:f5:a3:83:cb:07:ca:0e:d7:a3:
f4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FC:F7:C6:7E:91:88:5D:AA:90:FE:5B:C9:71:D5:6E:CF:BE:E8:78
X509v3 Authority Key Identifier:
keyid:6D:DD:40:52:E0:FC:76:53:63:61:CB:BD:C7:75:08:77:DD:F3:60:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd1AUuD8dlNjYcu9x3UId93zYK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b8:08:d5:18:9a:41:70:41:e1:0a:3f:21:0e:bf:9e:35:b2:
a2:ef:a1:2e:d1:f9:20:97:88:f4:28:7b:d1:73:45:1a:e8:2f:
fb:81:e8:01:70:a2:02:1b:df:9a:9a:0a:fc:7e:8e:b4:25:bf:
24:a3:e2:4f:44:1f:71:26:93:d0:0c:bd:d5:6b:2e:9f:6b:0c:
16:4a:55:87:37:78:d9:8a:23:48:b1:d3:79:7f:0f:dd:9c:2c:
48:16:d2:5f:1d:be:9e:08:8c:a6:a2:49:29:4d:dd:0b:fd:ab:
98:a6:ce:43:3c:7c:d1:f2:b8:0e:a7:33:f0:a5:20:e3:1f:33:
f8:8e:91:2c:7a:0c:dc:c7:15:b2:a3:31:38:79:ff:9c:3b:b6:
14:28:b3:a4:5c:00:f4:8f:58:02:a3:6f:75:82:74:ca:8e:6c:
88:2c:5c:ad:2a:52:8e:0c:64:df:07:2c:c2:85:4b:6e:ea:7d:
a3:32:33:50:3e:58:55:4c:70:e3:f3:f6:1e:a4:26:25:5e:6f:
f1:96:df:73:d0:bd:08:94:fa:a8:33:98:18:ff:54:a9:d1:f6:
9f:a8:a3:3c:7a:4b:8b:ef:67:a9:88:a4:a5:29:f8:3b:34:9c:
2d:36:c8:75:8b:d3:29:84:dd:df:58:9a:24:fa:32:f0:09:0c:
c7:7c:6c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 04:05:44 2026 by rpki-client