Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
File: dAThbzM9iWUMZhOsbJXTSNxLeVA.mft (raw, json)
Hash identifier: GNaY0v4JSJT1IBoYyN+E52tEwQL1pmvehkRkhnh4P2o=
Subject key identifier: 49:80:43:8C:7F:7B:5F:A7:36:20:29:23:E1:AE:42:18:38:8F:5D:2A
Authority key identifier: 74:04:E1:6F:33:3D:89:65:0C:66:13:AC:6C:95:D3:48:DC:4B:79:50
Certificate issuer: /CN=7404e16f333d89650c6613ac6c95d348dc4b7950
Certificate serial: 019F8531376365BA66DBE6D62FC3B56DBD88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
Manifest number: 054A
Signing time: Tue 21 Jul 2026 15:00:22 +0000
Manifest this update: Tue 21 Jul 2026 15:00:22 +0000
Manifest next update: Wed 22 Jul 2026 15:00:22 +0000
Files and hashes: 1: aON68VTwskogSIwfK0by-nZp_Rg.roa (hash: dkh8/Wbv+HTgUBFM4ZbuS+fZuVAjLH6qIB6RVSRMT9M=)
2: dAThbzM9iWUMZhOsbJXTSNxLeVA.crl (hash: WLCZWgUcnibjKFPTpxEf7A/0L3bqWNdreXAd/HA8+Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:31:37:63:65:ba:66:db:e6:d6:2f:c3:b5:6d:bd:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7404e16f333d89650c6613ac6c95d348dc4b7950
Validity
Not Before: Jul 21 15:00:22 2026 GMT
Not After : Jul 22 15:00:22 2026 GMT
Subject: CN=4980438c7f7b5fa736202923e1ae4218388f5d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:de:c4:79:27:a9:e4:2b:8e:fb:f9:15:be:bb:
9b:fa:80:06:be:98:ab:99:39:cf:b0:b4:08:53:2e:
fb:e3:55:cf:a3:26:07:90:09:91:e8:e6:f5:59:fb:
c4:a3:14:2e:f2:cc:50:11:df:89:87:93:fd:43:ee:
21:3e:b8:29:37:86:88:f1:43:4a:9b:97:00:b1:ba:
25:be:be:4f:1b:b3:cf:b0:d0:21:c2:9c:c0:b6:d7:
21:21:ea:2b:f8:10:69:25:f7:e7:0e:23:ae:2d:ac:
95:b4:eb:eb:56:b7:0e:90:fc:2d:24:1f:fa:44:0c:
f7:b9:95:af:fd:db:05:5e:d8:59:e8:6b:1b:6d:cd:
98:f4:f6:ed:e1:b9:68:f0:81:6f:41:5a:da:58:82:
e1:4b:73:65:35:34:81:05:7c:b4:b1:6a:0f:9d:61:
4e:f8:8a:dd:35:34:9a:54:eb:fd:ec:58:5a:78:76:
3d:a1:3d:ca:13:6b:33:97:eb:be:25:9e:cf:1b:9c:
07:a2:f2:82:4f:d3:69:92:51:36:6f:4e:51:cc:8b:
65:ca:ad:c7:78:b2:21:ce:36:26:c4:bb:41:94:5b:
df:5c:68:f0:2a:f7:31:f4:76:6a:4f:52:8e:da:c3:
ed:e2:6a:db:34:2e:97:44:f8:f1:cd:ec:80:51:b0:
fd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:80:43:8C:7F:7B:5F:A7:36:20:29:23:E1:AE:42:18:38:8F:5D:2A
X509v3 Authority Key Identifier:
keyid:74:04:E1:6F:33:3D:89:65:0C:66:13:AC:6C:95:D3:48:DC:4B:79:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:74:bb:23:56:d2:8e:29:a6:9b:41:f0:86:a3:00:96:52:9f:
6c:7e:39:96:bb:b3:f3:bf:9d:cd:4d:c4:a0:67:15:92:dd:35:
a1:c2:1a:82:27:20:22:c6:f2:16:40:ff:39:61:22:e2:a1:be:
be:e7:60:77:71:8c:6c:f0:8e:50:db:aa:5b:c7:29:cc:f8:dd:
b7:47:a0:d7:a4:36:d0:a1:45:c5:de:31:54:13:f1:be:37:71:
65:00:e7:89:f9:e8:ac:78:c2:60:e3:71:17:aa:be:e0:90:c7:
eb:f6:28:ef:a3:01:c6:10:e6:b5:96:98:4d:b5:ab:ef:4b:81:
a5:c2:18:bf:b3:f8:d8:e9:67:f9:28:7c:e5:ee:ab:7d:08:22:
25:53:73:08:f0:0c:90:74:68:10:23:a5:20:94:2e:87:47:38:
4a:7b:f4:06:62:ae:5a:ab:16:db:1e:46:3b:1d:45:6b:ba:49:
69:ef:07:00:45:9d:83:d6:54:00:e0:cf:f8:bc:58:3f:c5:10:
31:ce:c1:49:1f:a0:b9:20:87:e9:1f:6a:d2:e5:d1:62:82:3c:
e4:f0:25:60:cb:8b:77:6b:6b:71:96:bf:a7:99:26:bd:fe:45:
2d:99:1f:d9:d1:9e:1a:2e:c6:51:28:38:35:02:ad:69:d7:5d:
56:e3:5c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:18:49 2026 by rpki-client