
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/dF5pC2XdK2La_T6uUwne-ky1x8Q.mft
File: dF5pC2XdK2La_T6uUwne-ky1x8Q.mft (raw, json)
Hash identifier: TMg0ldRPRKgvuO3zi0AIKDA4+mAT8U2+lGUP6iEGSWs=
Subject key identifier: 9B:E6:86:43:CC:F7:39:71:DF:60:65:56:44:C1:43:A0:B5:3F:B0:88
Authority key identifier: 74:5E:69:0B:65:DD:2B:62:DA:FD:3E:AE:53:09:DE:FA:4C:B5:C7:C4
Certificate issuer: /CN=745e690b65dd2b62dafd3eae5309defa4cb5c7c4
Certificate serial: 01A0035DD263E85461D40686B0E05CE4898F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dF5pC2XdK2La_T6uUwne-ky1x8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/dF5pC2XdK2La_T6uUwne-ky1x8Q.mft
Manifest number: 7B
Signing time: Sat 15 Aug 2026 03:01:15 +0000
Manifest this update: Sat 15 Aug 2026 03:01:15 +0000
Manifest next update: Sun 16 Aug 2026 03:01:15 +0000
Files and hashes: 1: Bx-vAb6JcdMAkqoFkx5QchgWBPw.roa (hash: tXWgzC52m15bMpTie/nAe4jMMYYoA58oLlL3abiDdMc=)
2: V_c0MczS3zUpZJNTtQxngj6lCXY.roa (hash: I3RW9QlgWDHOKk+vzXe99y6FDPghIiCTxEZoxiZd0LQ=)
3: dF5pC2XdK2La_T6uUwne-ky1x8Q.crl (hash: cHMxTX/Yzla5+3hTe6FlPYAwltDG+wkODjtuhUMkmIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/dF5pC2XdK2La_T6uUwne-ky1x8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/dF5pC2XdK2La_T6uUwne-ky1x8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/dF5pC2XdK2La_T6uUwne-ky1x8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:5d:d2:63:e8:54:61:d4:06:86:b0:e0:5c:e4:89:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745e690b65dd2b62dafd3eae5309defa4cb5c7c4
Validity
Not Before: Aug 15 03:01:15 2026 GMT
Not After : Aug 16 03:01:15 2026 GMT
Subject: CN=9be68643ccf73971df60655644c143a0b53fb088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c3:46:a2:eb:51:6a:59:a2:2a:a9:0e:82:ed:
7d:be:b7:22:c2:55:53:80:69:bd:58:15:fd:4c:d3:
1b:1a:6a:96:e2:ce:36:d5:eb:1a:bd:e5:50:e4:f3:
b8:14:02:31:08:b7:35:05:31:99:35:b7:13:8d:3f:
d1:25:35:3b:9d:1b:b3:b3:c9:97:b3:f8:ae:22:d5:
7c:7e:a7:ce:56:d1:8d:7e:03:ee:88:77:ee:fa:70:
a4:49:1e:cd:5a:5b:59:e9:14:53:62:80:48:6f:86:
09:0f:b5:0b:72:b3:dc:ca:4e:31:0b:1a:9f:77:99:
e9:d2:ff:c3:0e:5c:6e:fb:78:47:64:fb:06:ef:a4:
8b:41:a7:1c:63:71:1c:4e:ae:a0:96:49:58:cd:03:
3c:35:31:5a:7b:df:85:e6:dc:9b:ff:f1:ff:83:6b:
c6:a7:1e:3c:b3:fc:2f:95:f3:4e:de:9a:5c:81:e0:
fb:7f:3b:cd:0f:50:6a:10:65:85:1c:4e:60:23:de:
47:6b:6d:24:4d:2e:17:be:77:40:4e:a1:5e:b2:5b:
2b:7c:25:bd:0c:a0:93:68:1b:89:45:0d:08:51:d3:
6d:e7:a5:c4:58:77:94:67:39:fc:fd:08:82:af:d2:
df:bd:4e:71:c4:80:9a:2a:b9:ac:ea:69:f6:57:5d:
ba:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E6:86:43:CC:F7:39:71:DF:60:65:56:44:C1:43:A0:B5:3F:B0:88
X509v3 Authority Key Identifier:
keyid:74:5E:69:0B:65:DD:2B:62:DA:FD:3E:AE:53:09:DE:FA:4C:B5:C7:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dF5pC2XdK2La_T6uUwne-ky1x8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/dF5pC2XdK2La_T6uUwne-ky1x8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/dF5pC2XdK2La_T6uUwne-ky1x8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:53:43:e2:02:6e:54:b7:b1:98:f2:69:8f:23:f7:9e:4a:49:
e7:f4:ad:0d:f3:9e:77:22:31:b5:b8:11:e9:71:42:38:78:f3:
c9:54:1a:3c:8c:5c:5c:8b:91:c7:7a:02:4c:e4:7b:26:d8:05:
41:95:93:2f:0a:a6:29:2e:66:16:0d:c5:df:d3:68:7f:32:38:
b7:41:63:71:3e:70:c9:bf:19:cf:e0:8f:71:d3:7c:b1:ed:d1:
bf:dc:43:b9:c1:b4:c9:5b:08:b6:40:5c:ea:0b:f5:09:01:80:
26:f5:a0:2e:c5:26:66:1a:b8:35:c0:70:f8:08:68:6e:54:fc:
77:e2:06:72:5f:2a:05:ce:8c:27:df:e1:72:f8:db:04:5a:2c:
56:22:0d:a7:cf:1b:d5:bf:fd:27:eb:5b:40:5b:e6:2b:5b:e3:
76:00:0f:77:0e:6f:f0:f0:95:63:d6:12:8e:ec:75:3d:6f:cc:
e6:dc:30:06:8e:3f:67:9e:d0:cb:fa:c5:ba:31:f0:07:cb:82:
80:a6:fe:af:9b:ff:cc:c3:04:6b:8e:b7:a1:64:50:bc:d7:a7:
a2:d8:4c:c7:2e:44:51:cf:a8:0d:36:6c:40:fc:8d:1e:71:42:
12:80:db:dd:d3:fa:56:d3:bc:03:27:e0:96:8a:25:b4:df:1b:
d1:d2:8f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:12:10 2026 by rpki-client