Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
File: D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft (raw, json)
Hash identifier: SknxrN1QREG8+P+/yCt1ykmDJY94+gBxvj2qImoMLow=
Subject key identifier: CB:AA:09:64:09:83:28:56:FC:0F:21:87:BE:58:F0:BA:E3:40:83:1A
Authority key identifier: 0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D
Certificate issuer: /CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
Certificate serial: 01A001DD7201900DECF6CCA2DB1DA0467259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
Manifest number: 18DF
Signing time: Fri 14 Aug 2026 20:01:24 +0000
Manifest this update: Fri 14 Aug 2026 20:01:24 +0000
Manifest next update: Sat 15 Aug 2026 20:01:24 +0000
Files and hashes: 1: D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl (hash: 71kBWABQbQpSEY/2ajAPfHmQ+yqN2a7wELl02eiLsQA=)
2: gM2StpLZVmvayJcUvILE4XZXuLw.roa (hash: KQMOAlvZrGCc1yTty62TEDax5SGCNvxrkbvizSS1atc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:72:01:90:0d:ec:f6:cc:a2:db:1d:a0:46:72:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
Validity
Not Before: Aug 14 20:01:24 2026 GMT
Not After : Aug 15 20:01:24 2026 GMT
Subject: CN=cbaa096409832856fc0f2187be58f0bae340831a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ac:df:3f:21:76:c6:43:e0:e4:52:39:54:35:
5c:4e:e6:98:30:2b:2d:e8:07:94:b5:52:b3:84:5e:
4d:02:76:6d:f6:97:ff:21:ac:f6:fd:e6:15:8d:bd:
df:10:96:4b:0f:1e:88:ad:ba:23:31:61:2c:7e:08:
9e:a8:7d:b1:3a:30:94:24:26:01:86:66:72:22:09:
e2:9a:5a:e7:30:8d:a1:37:bc:b5:55:fa:fe:bf:fc:
c5:a7:be:10:8d:b1:05:08:af:70:cb:83:0b:69:39:
4a:78:ca:81:0d:e6:2b:57:46:c6:00:ba:9f:63:42:
0b:39:6f:88:78:49:ca:f7:33:9f:5a:e9:f1:08:ad:
3b:77:6a:b1:0b:5b:fc:c6:e2:df:28:f5:88:e7:c6:
ca:ed:d8:10:28:c7:4b:c7:ae:ff:d3:f4:ea:4c:54:
10:40:3a:c9:a6:e9:9d:15:f8:5b:de:01:93:db:fd:
12:0c:b7:3c:72:ca:b6:ef:23:39:7f:43:e4:3d:35:
64:62:66:73:0f:0d:c1:37:c8:21:fc:c3:6b:28:3e:
a7:3d:0d:5b:f9:fc:99:9d:6b:c6:88:af:b3:10:65:
57:8b:5a:b7:07:a7:3f:da:55:43:c3:8f:36:29:f7:
dc:12:6b:c0:8b:09:f9:dc:40:4b:d2:b3:0a:84:ff:
dd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AA:09:64:09:83:28:56:FC:0F:21:87:BE:58:F0:BA:E3:40:83:1A
X509v3 Authority Key Identifier:
keyid:0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:00:57:1a:a6:d6:9a:7c:13:c1:a0:68:3d:69:f7:f5:0d:fd:
c0:0b:16:37:da:c5:da:d8:a6:bf:7e:3a:28:3d:5a:18:33:ff:
14:5d:82:4c:36:72:f0:20:5f:ce:99:22:cd:8f:97:d6:84:97:
b9:16:5a:62:78:ba:d3:f4:31:cf:6c:07:21:a2:63:cd:c9:2f:
2c:77:76:ba:fb:50:91:fb:74:41:b9:a3:1f:9c:9b:ba:eb:2a:
62:a2:94:3f:c8:f0:6d:c6:ff:7e:68:de:e6:a4:4a:2b:ea:e0:
5d:0f:47:a9:68:33:5a:1a:fa:b8:46:2a:fb:05:dd:ef:21:37:
7d:09:2a:65:53:17:b7:89:06:25:b3:97:af:e0:87:de:78:e0:
79:e5:28:da:56:fa:82:8a:6e:b4:8b:61:18:91:96:06:d6:9e:
6a:83:cf:7e:cc:19:9b:76:ab:46:6b:0e:db:35:f8:21:6f:cb:
55:06:c1:c3:aa:34:cc:3c:85:07:ae:5f:0b:45:62:df:1e:79:
ef:51:c2:b6:df:4c:4c:41:aa:70:d3:fb:2d:57:b5:d3:56:c1:
e3:ab:42:f3:79:6e:61:1b:e9:17:4f:dc:81:6b:c4:a2:b5:4f:
4a:dc:dd:96:36:a7:e9:e9:6b:b7:35:38:9a:58:28:92:05:5a:
68:fb:ff:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:51 2026 by rpki-client