Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft
File: d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft (raw, json)
Hash identifier: vj0z8dzqHfLAF6b0Yd0dDSCrLIJ65FZJX4e+npu5kas=
Subject key identifier: 50:9E:CD:4B:FA:30:AA:89:49:3C:0E:E1:F7:2D:62:0D:41:95:6C:85
Authority key identifier: 77:BC:53:4B:A4:4E:9D:3C:BA:2F:24:46:D4:A3:DD:6E:EA:9B:8F:61
Certificate issuer: /CN=77bc534ba44e9d3cba2f2446d4a3dd6eea9b8f61
Certificate serial: 019E57EE0BC729ED0F6BE3325D83597D389F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft
Manifest number: 128E
Signing time: Sun 24 May 2026 03:01:18 +0000
Manifest this update: Sun 24 May 2026 03:01:18 +0000
Manifest next update: Mon 25 May 2026 03:01:18 +0000
Files and hashes: 1: 5ApIj12jO_8mOdYxVYiSploUCV8.roa (hash: pxYq1FoLIzcTlxwsFR29ohwcYfP/BC5eymca8E/d9AM=)
2: VmIcZRCirpwpk3EW3jn_rDgxBbc.roa (hash: GaVqilTYmg+leas5Zf/2DamTASeEyu9nsNNYOHaVeqo=)
3: d7xTS6ROnTy6LyRG1KPdbuqbj2E.crl (hash: 7l0YSLgafPQ3zYgnDvCoP0z5XEw3vchcgSfWx+nHYH8=)
4: gOxCfBe1lb07Dd9lS3azAI_drcM.roa (hash: PjS4rrXO8Wuzfyz+7dGFwXl0RtklTG2PNwxKVtX++as=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 May 2026 03:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:57:ee:0b:c7:29:ed:0f:6b:e3:32:5d:83:59:7d:38:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bc534ba44e9d3cba2f2446d4a3dd6eea9b8f61
Validity
Not Before: May 24 03:01:18 2026 GMT
Not After : May 25 03:01:18 2026 GMT
Subject: CN=509ecd4bfa30aa89493c0ee1f72d620d41956c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d8:1d:3c:68:df:fe:73:48:b3:eb:16:0f:39:
76:42:7e:d3:7c:bd:57:71:3d:e1:f1:70:23:a9:2a:
38:fd:79:8f:bc:e1:4f:8f:b4:36:f2:2c:fa:d1:cd:
d1:4c:cd:cc:c9:32:7a:9b:65:dd:a5:c4:98:f3:d3:
5c:d2:b8:26:a3:c3:9b:33:57:81:37:27:92:1d:7c:
7d:01:8c:b2:67:bf:41:ea:d5:b3:c6:36:37:60:5a:
f1:29:35:c1:4d:11:83:ed:17:88:18:ce:8e:b7:b0:
ac:9f:3b:c7:1f:d2:ec:63:fd:67:7e:45:51:1d:97:
07:40:aa:a1:50:37:2c:90:7e:9d:65:79:a3:06:6f:
13:69:2f:07:81:48:c6:10:3e:65:11:9c:f9:5a:1d:
a8:6a:27:c6:34:a0:ce:c1:dc:0f:30:f9:67:f0:d2:
6f:e1:40:f1:08:3a:d4:c7:39:94:60:84:5e:89:f9:
70:ca:b7:a5:81:07:b0:f3:81:99:b4:be:02:8f:aa:
9d:ac:ae:88:44:48:06:c4:93:21:3b:55:f7:53:0a:
8d:e8:35:82:9d:79:2f:62:8e:ec:81:56:52:8d:7c:
c1:ca:e5:04:a0:d3:e7:2a:71:cc:64:51:30:a5:cc:
65:89:7f:eb:3a:25:b8:bb:90:c9:a4:f1:71:a5:21:
0f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9E:CD:4B:FA:30:AA:89:49:3C:0E:E1:F7:2D:62:0D:41:95:6C:85
X509v3 Authority Key Identifier:
keyid:77:BC:53:4B:A4:4E:9D:3C:BA:2F:24:46:D4:A3:DD:6E:EA:9B:8F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:58:4a:59:78:db:7f:28:4b:8d:81:16:75:ae:d0:4c:8b:f6:
83:9c:da:4b:48:41:63:6e:54:a5:dd:99:55:7f:b8:10:3c:7c:
bf:e4:e6:8e:34:74:fe:c8:a1:70:33:ef:f8:2b:32:9b:5d:b1:
cd:0b:3e:ea:6c:39:7d:62:26:b1:45:21:e0:70:1f:b0:27:d7:
15:c8:f8:51:11:c7:4d:e7:37:18:84:71:67:95:5b:5d:53:92:
bc:c2:b6:f8:c8:e9:c3:6c:38:fd:c9:33:d4:0c:44:5e:e5:71:
65:6e:6e:da:ba:ae:8e:be:3e:c1:89:59:c7:55:20:4b:a9:d2:
52:aa:da:c6:02:d2:7e:fa:7d:69:37:c5:bc:3c:5d:a2:30:3a:
04:c3:85:33:81:14:b4:fc:a8:99:6a:9c:37:b7:9b:36:b4:6d:
33:16:56:54:b2:d5:4c:1f:95:6d:dc:af:01:3a:56:06:29:32:
ec:0f:47:f4:57:ef:47:5b:a3:ff:a4:a0:32:27:15:1a:f9:c4:
4b:16:dd:cd:29:1d:c3:c0:a6:c6:81:48:a3:af:5f:ac:58:12:
cc:99:60:e2:9c:d2:9e:64:5d:09:d3:88:4c:b3:91:0c:0b:39:
7e:ee:be:6f:85:ea:2c:70:2e:e6:3f:ca:fc:5e:a0:e6:ff:7c:
64:67:6f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 13:47:58 2026 by rpki-client