Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft
File: rfDfdxFHQeE6F9chPmlWv5YntVg.mft (raw, json)
Hash identifier: 2YwYQzaPJlumQQ8mopwty7SPfFniPvlYTvVc3lHjWJE=
Subject key identifier: A3:21:99:7D:DB:99:40:1E:6F:87:0C:4A:A6:24:84:55:E4:A7:2D:67
Authority key identifier: AD:F0:DF:77:11:47:41:E1:3A:17:D7:21:3E:69:56:BF:96:27:B5:58
Certificate issuer: /CN=adf0df77114741e13a17d7213e6956bf9627b558
Certificate serial: 01A00213FA659F199885C06D731ECA8B4662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfDfdxFHQeE6F9chPmlWv5YntVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft
Manifest number: 18B5
Signing time: Fri 14 Aug 2026 21:00:58 +0000
Manifest this update: Fri 14 Aug 2026 21:00:58 +0000
Manifest next update: Sat 15 Aug 2026 21:00:58 +0000
Files and hashes: 1: 8eYijGU89HKkHPl1vQkVznR2YWI.roa (hash: GVKbdEH+zbWNIRI6lkz6XipadG7YSN2rD9CEidAiQUs=)
2: rfDfdxFHQeE6F9chPmlWv5YntVg.crl (hash: CFwak53hnkVqzcjTlzQiEbnPX1Svg+nuN6bM9cRMtxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfDfdxFHQeE6F9chPmlWv5YntVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:13:fa:65:9f:19:98:85:c0:6d:73:1e:ca:8b:46:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf0df77114741e13a17d7213e6956bf9627b558
Validity
Not Before: Aug 14 21:00:58 2026 GMT
Not After : Aug 15 21:00:58 2026 GMT
Subject: CN=a321997ddb99401e6f870c4aa6248455e4a72d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:63:60:76:dc:02:63:6c:23:2b:b5:2d:d6:01:
f9:2b:cf:23:14:f6:04:5a:15:68:29:a1:af:f7:de:
99:c1:42:5b:cb:d5:86:bf:51:82:7c:3b:b3:71:a3:
fb:fc:6e:46:88:f6:a5:97:ef:c7:2e:2a:5b:63:36:
32:d4:e7:15:ae:35:91:3a:b6:cd:bc:06:f7:f1:7d:
92:70:ab:61:11:88:ee:1e:d3:02:96:c1:9d:9b:ce:
e0:93:d7:ef:a5:92:33:f7:cf:48:6b:78:91:f7:02:
00:11:a9:84:6b:d8:f8:1e:6f:97:e5:8f:42:9b:2b:
fd:a1:29:35:92:b1:cf:2f:cf:6c:e3:01:94:03:25:
37:9a:75:41:72:c3:fa:5c:3b:90:46:3b:ed:58:6b:
16:aa:5a:8f:85:62:ab:07:a5:04:6d:4d:33:b1:98:
ba:a9:60:e3:f5:3e:43:d8:67:11:17:c2:92:46:f1:
19:03:95:c3:6f:3c:d2:47:b7:de:57:1c:21:70:b9:
dc:f6:d8:7d:21:bf:42:da:f2:e9:3e:18:5e:b0:e4:
a5:c1:2b:72:df:ee:53:3a:2f:23:60:dd:dd:ee:ff:
5d:f8:4b:a2:37:73:dc:94:f0:c5:05:61:aa:01:49:
8e:34:8f:3a:a9:db:87:08:18:f4:7b:f7:b9:92:0e:
98:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:21:99:7D:DB:99:40:1E:6F:87:0C:4A:A6:24:84:55:E4:A7:2D:67
X509v3 Authority Key Identifier:
keyid:AD:F0:DF:77:11:47:41:E1:3A:17:D7:21:3E:69:56:BF:96:27:B5:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfDfdxFHQeE6F9chPmlWv5YntVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e4:e5:44:f0:3f:a1:fe:84:aa:25:55:3f:62:77:4d:9b:42:
30:70:0c:e0:4c:75:38:95:64:60:18:55:ec:d9:b9:2a:4f:22:
97:43:a9:46:57:07:24:35:c0:cd:b1:68:21:7c:2f:16:1c:10:
e5:fb:b5:9e:15:12:11:57:cc:57:a6:b4:30:c7:de:6d:9e:14:
e3:b2:51:c7:84:66:5a:84:e9:51:96:b7:f8:ca:fc:7c:d9:85:
bc:2c:6f:73:b4:e0:94:c6:ed:d2:82:7b:91:0b:2e:63:ae:18:
a0:9b:9a:c3:8a:6e:9c:c4:e4:91:a9:9c:4c:da:c5:77:d8:85:
df:78:79:e2:7a:a8:b8:4d:d3:3f:88:3e:8d:1b:2c:9e:84:7c:
49:57:53:0d:ce:c6:2e:21:6d:c2:98:b3:9d:99:63:e8:06:5e:
91:44:3a:36:10:fa:7a:57:b0:01:78:c3:f2:92:b3:fb:de:d5:
59:7f:2f:2d:8a:af:a6:ea:8f:f5:fb:aa:1a:d1:2e:e0:08:27:
75:1a:f5:1b:f8:4f:d3:6b:93:fe:ad:8e:06:f8:74:02:41:46:
ec:5f:2a:4a:2e:63:ef:90:3d:02:d6:bd:b4:9c:b7:27:e3:e0:
ba:31:77:84:08:ce:b1:ee:76:63:76:74:be:07:4c:62:d0:c9:
2f:2a:34:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:21:20 2026 by rpki-client