Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
File: urIywdctwcq72hbIcOyUHUWKn9w.mft (raw, json)
Hash identifier: GrOl2+6XKtIEXbjrZgaIWi+LQz4t4td3mJgDiFzgUHk=
Subject key identifier: 2A:31:15:04:A0:6B:A8:04:AB:1A:5E:8F:0F:98:42:67:1C:D3:17:60
Authority key identifier: BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
Certificate issuer: /CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Certificate serial: 019EFACB8C651A808E328B37F9B3A97F65E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
Manifest number: 197A
Signing time: Wed 24 Jun 2026 18:01:44 +0000
Manifest this update: Wed 24 Jun 2026 18:01:44 +0000
Manifest next update: Thu 25 Jun 2026 18:01:44 +0000
Files and hashes: 1: PzKWoUJeFLqjUWS7LgF4BdwM7PI.roa (hash: OsmHic4Ai/0j0JqDsk2Y5rGOjUKPGoeMip/8Vo2h1CM=)
2: UsG3baUGIxj41J_YNnv0F0uvJ9g.roa (hash: Ou9qv1YwHjFroWI++/0y93X1Q7gw8mUqZv7cZxbQ++U=)
3: urIywdctwcq72hbIcOyUHUWKn9w.crl (hash: 5LH3sokKFbo9wkjy3KLOlBlrQ7d1G7F/6yUu2QUS/Rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 14:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fa:cb:8c:65:1a:80:8e:32:8b:37:f9:b3:a9:7f:65:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Validity
Not Before: Jun 24 18:01:44 2026 GMT
Not After : Jun 25 18:01:44 2026 GMT
Subject: CN=2a311504a06ba804ab1a5e8f0f9842671cd31760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:63:09:cb:87:81:89:a6:18:9b:87:99:3a:0b:
01:aa:5a:f7:10:51:7a:e6:bd:aa:11:3e:1e:98:7a:
fa:50:02:3b:36:53:a0:49:26:5a:b0:74:07:94:28:
0d:89:43:77:95:e4:b4:9f:72:21:e2:bd:40:af:4a:
dd:fb:c5:85:26:20:4d:84:88:80:fa:7b:2b:ed:1c:
3c:a7:f4:26:a3:56:69:d9:73:9b:2a:b5:03:b0:05:
26:94:ad:dc:25:aa:12:d4:8d:1c:c4:bd:02:5b:7e:
e3:ad:a3:df:9e:b4:fd:39:ce:00:db:3c:9c:eb:79:
8d:42:e0:ba:d5:5b:27:95:4d:32:66:4e:bf:d2:aa:
39:b0:59:e7:77:9d:d1:8e:d9:06:a8:d0:e7:43:f2:
27:1e:18:1d:78:ef:fb:ac:95:ef:cd:30:9e:59:e5:
11:86:56:ce:b5:df:01:6b:d4:01:56:90:ce:59:d3:
5b:71:b9:f5:d2:ec:52:0a:2d:cc:3e:b1:ac:9b:22:
91:15:21:32:7c:79:12:f2:b3:9e:05:d3:81:d5:33:
38:37:4e:0c:b0:5f:ff:b9:97:7e:bd:5d:09:d2:ff:
a8:ab:02:5e:16:c4:11:a8:e2:9a:7c:4a:44:d8:7d:
aa:15:c4:ca:ac:cc:07:2c:4f:ac:0d:cd:f5:96:66:
bb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:31:15:04:A0:6B:A8:04:AB:1A:5E:8F:0F:98:42:67:1C:D3:17:60
X509v3 Authority Key Identifier:
keyid:BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:85:7c:4e:46:a5:4a:63:fa:3b:dc:59:5a:39:25:8e:53:83:
ec:9f:52:3e:9b:83:7c:cd:fb:38:a3:b1:81:0d:2a:69:86:17:
8d:5f:07:17:a0:09:3a:e8:e3:8b:cf:a2:3d:09:91:b6:ae:6b:
9d:1b:f6:f4:b9:c0:0e:7a:00:70:78:fa:6d:68:40:75:35:93:
ff:80:46:83:bd:85:f4:18:2d:a9:77:35:2d:44:2a:34:fb:cf:
f3:79:1e:b8:cf:92:1f:e3:25:a9:b0:66:25:6b:69:26:ab:13:
8f:f7:86:25:95:32:b5:76:39:a3:c1:de:3b:a3:28:cb:48:d8:
33:55:f8:3f:89:da:c3:26:60:74:45:be:5a:fb:73:a7:9e:61:
6c:38:c2:1a:24:61:3e:9e:02:95:8e:bc:3e:30:4d:28:33:e5:
2e:0e:2f:cd:6b:b1:23:e3:2b:d6:a4:52:70:a1:ef:04:be:63:
6e:0f:69:92:0c:80:93:29:d3:c1:17:44:97:90:df:78:19:61:
d4:66:c8:99:08:e6:a7:a1:3c:97:03:27:b9:33:6c:84:9f:bb:
7b:33:09:bc:21:93:b0:ae:d1:66:49:30:0d:dd:69:47:68:7c:
ed:14:b2:71:09:6e:1e:42:17:3a:dc:51:12:08:de:db:f8:42:
4f:d4:8d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 21:20:15 2026 by rpki-client