Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft
File: D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft (raw, json)
Hash identifier: o1T/cA5wrQp5kwaom8r42FO3Zss/sqlVaJlvFRF+oYA=
Subject key identifier: B4:53:48:C5:C5:E0:A7:3A:DD:BD:DB:AD:D6:A3:A9:8A:8F:C6:3E:87
Authority key identifier: 0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB
Certificate issuer: /CN=0f92c52f86009879c177092f7cd83418b4df8cab
Certificate serial: 019F85687614F0895E2694CD4F6A78E7901C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft
Manifest number: 19C7
Signing time: Tue 21 Jul 2026 16:00:43 +0000
Manifest this update: Tue 21 Jul 2026 16:00:43 +0000
Manifest next update: Wed 22 Jul 2026 16:00:43 +0000
Files and hashes: 1: D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl (hash: 3G7u3D0lW4oc9HsLSmLpwyYvt+cJ3cFAanW/ZgBt2rE=)
2: MXQ5fKgl8ZsaQZNHO6pbBu5IdxA.roa (hash: pI/grpKRBsBNOQ0aspRfRJgjD1ZrwmmpLNeau2QbWVA=)
3: Zx5o8v2ZCe9pK1Sbhq2vLi9k9J8.roa (hash: YgGRcc+fQUbTuFLOD9KlYqEbp3CkMEvOBhBenJB52Ic=)
4: jjZr6ibloVwf3j-xPGaypuYc1To.roa (hash: JuRrRALm0fnkDTSDsHBV/GbEKFpe95uRtT0ysTR3ENk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:68:76:14:f0:89:5e:26:94:cd:4f:6a:78:e7:90:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f92c52f86009879c177092f7cd83418b4df8cab
Validity
Not Before: Jul 21 16:00:43 2026 GMT
Not After : Jul 22 16:00:43 2026 GMT
Subject: CN=b45348c5c5e0a73addbddbadd6a3a98a8fc63e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:47:00:d7:a7:28:e6:1b:80:96:f3:e0:0a:f3:
4b:be:24:49:26:81:13:38:6f:95:61:6a:06:f7:9d:
7d:b7:82:94:cf:34:66:60:00:8a:c6:2c:26:21:23:
a8:f3:7b:8f:aa:49:15:b8:ad:8e:2c:36:e8:7f:33:
76:33:ae:ce:ce:73:72:85:5b:20:9f:9a:1f:d8:a5:
f8:ea:22:af:df:99:6a:8b:60:88:43:bb:25:0e:a5:
e0:ff:df:0b:6c:d3:23:f6:17:37:59:8e:66:70:53:
aa:31:f5:ea:cd:a4:af:9c:a2:8d:00:d0:90:84:42:
45:ab:f2:6a:30:00:4e:90:6c:96:c6:b8:77:75:fb:
ec:73:b0:c0:0d:ea:a2:5b:01:26:8d:11:d2:91:af:
b0:30:12:61:74:0c:0a:26:a4:06:e6:bc:29:35:27:
4f:09:28:27:8c:5d:e8:1e:d4:9b:2b:a8:c7:4e:00:
9b:46:d0:38:fb:0e:53:84:6f:b0:2e:a4:3d:3d:6d:
f7:22:8f:c3:63:25:ec:4b:90:05:c4:09:23:79:07:
5c:31:a4:09:a4:05:11:c9:c3:9c:eb:26:45:21:63:
73:58:2a:7a:a8:57:ca:13:f6:17:02:43:64:0a:46:
88:dc:b2:5c:86:e5:f4:d7:23:30:fe:f0:c1:71:59:
68:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:53:48:C5:C5:E0:A7:3A:DD:BD:DB:AD:D6:A3:A9:8A:8F:C6:3E:87
X509v3 Authority Key Identifier:
keyid:0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:f8:39:05:83:87:89:6f:49:3c:8f:91:6c:60:c6:52:ad:b6:
64:6b:dc:a7:4e:95:6c:a2:12:75:f3:2e:b8:05:bb:c1:be:72:
6f:ec:80:a3:93:d6:0d:8b:3e:9c:48:f0:9e:52:f5:4e:86:e8:
e6:79:75:70:44:20:fb:3c:4b:29:94:9d:33:ff:59:89:ab:d0:
93:d5:2d:39:1b:33:e3:c2:95:91:7a:e2:09:26:d8:1a:2c:92:
19:f2:8f:94:2e:5a:83:6e:a7:8a:18:0e:78:c1:ef:51:34:83:
72:65:ed:ec:25:42:f9:3b:5c:62:4f:b2:b7:0a:af:79:3a:74:
ea:7d:5f:f7:62:a9:e9:88:7b:0e:fb:1b:f8:da:b7:8d:a6:ad:
af:02:16:74:f3:e4:8f:0f:cb:d3:c2:d5:c3:a9:ed:f2:45:fd:
ec:58:b8:79:80:6e:5e:d0:40:c0:cb:9d:49:27:07:af:c9:6b:
7b:1b:6b:b6:d8:77:df:20:1b:79:58:cb:9e:19:0a:ca:2c:1e:
f6:4e:e9:ae:e0:07:9b:71:44:da:f6:f1:b4:6b:4e:33:56:66:
43:97:e8:60:6a:65:af:e8:50:9c:90:34:b9:aa:62:e8:68:12:
53:b8:b5:ed:0d:7a:c1:a3:f9:4a:8d:ad:c1:bd:67:4f:c0:0e:
58:5e:5a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:26:06 2026 by rpki-client