Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/b5O_DH82JtwEWpijltR9M1tz_lU.mft
File: b5O_DH82JtwEWpijltR9M1tz_lU.mft (raw, json)
Hash identifier: W84NBPSsnVb6iLmMQevHg85NcjKAhbVPjHW+boGqFUM=
Subject key identifier: 4E:2B:C7:A8:75:81:3B:A7:7A:31:A0:CB:0A:83:68:6C:42:E0:1F:9A
Authority key identifier: 6F:93:BF:0C:7F:36:26:DC:04:5A:98:A3:96:D4:7D:33:5B:73:FE:55
Certificate issuer: /CN=6f93bf0c7f3626dc045a98a396d47d335b73fe55
Certificate serial: 019F935ABBBA4547D2D9516481CAACA07C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5O_DH82JtwEWpijltR9M1tz_lU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/b5O_DH82JtwEWpijltR9M1tz_lU.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:00:24 +0000
Manifest this update: Fri 24 Jul 2026 09:00:24 +0000
Manifest next update: Sat 25 Jul 2026 09:00:24 +0000
Files and hashes: 1: 7ZJKSnvn6eDvPf1Ga0ognzlOqUo.roa (hash: jqd1cXzeNxyDHHxxgJZE3/SIjMMDeA4xZRyGZCH75OY=)
2: b5O_DH82JtwEWpijltR9M1tz_lU.crl (hash: +y2021p1yycuql/k/dqHWM1X7Oo/Z2m0T8e2v4kvibY=)
3: f8g99RRZqCoxm5euSeYWZpHjx84.roa (hash: RAak1S/CpTHbug6ZdRWMP+IfC0d0jFHGr8IO+OZIlxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/b5O_DH82JtwEWpijltR9M1tz_lU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/b5O_DH82JtwEWpijltR9M1tz_lU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b5O_DH82JtwEWpijltR9M1tz_lU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:bb:ba:45:47:d2:d9:51:64:81:ca:ac:a0:7c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f93bf0c7f3626dc045a98a396d47d335b73fe55
Validity
Not Before: Jul 24 09:00:24 2026 GMT
Not After : Jul 25 09:00:24 2026 GMT
Subject: CN=4e2bc7a875813ba77a31a0cb0a83686c42e01f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c9:3b:bc:cb:b5:3f:f4:33:33:c6:d3:1f:60:
6b:a9:2c:99:a2:8d:73:de:78:e6:e8:23:7a:6a:61:
93:39:14:b8:70:7c:8e:2c:18:58:7d:c9:4a:c2:2c:
4d:bc:d0:9c:6f:8e:3d:2a:48:28:e2:2a:94:12:42:
e0:2f:90:a3:b1:f0:b5:65:01:a0:86:5d:85:08:04:
14:da:06:2f:e9:e9:f9:64:50:e0:22:5f:f4:11:b0:
d2:8d:06:3a:54:46:18:1e:15:36:c8:58:d5:6e:1d:
97:28:d1:13:a2:1e:4c:64:71:b4:03:0f:82:ad:02:
24:de:96:83:d1:ba:5b:f4:79:9b:5b:95:c5:92:6e:
5f:64:57:53:4e:68:85:b8:f5:20:3e:52:d7:b5:c5:
b5:34:6b:36:22:39:19:fa:ce:12:17:25:2f:80:fe:
83:c9:86:70:5c:fd:e4:9a:33:3a:87:26:12:74:5b:
9c:90:bd:ea:31:8b:c2:e0:07:2b:76:53:46:96:a1:
9c:f4:ca:17:12:60:97:d3:42:5e:05:2a:48:a1:f0:
7a:bd:c8:48:2a:a0:cd:9b:c6:7c:8f:ed:70:d8:1e:
a5:4e:28:fb:ec:74:30:3a:06:73:d9:05:ca:2c:1b:
96:96:48:1e:47:90:d1:82:f0:a7:ea:77:52:3e:61:
0a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2B:C7:A8:75:81:3B:A7:7A:31:A0:CB:0A:83:68:6C:42:E0:1F:9A
X509v3 Authority Key Identifier:
keyid:6F:93:BF:0C:7F:36:26:DC:04:5A:98:A3:96:D4:7D:33:5B:73:FE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5O_DH82JtwEWpijltR9M1tz_lU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/b5O_DH82JtwEWpijltR9M1tz_lU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/b5O_DH82JtwEWpijltR9M1tz_lU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:bc:4e:29:5d:00:2d:b5:86:d7:d7:9f:29:9a:b6:27:4f:71:
df:1b:5e:e1:91:c8:f9:fa:0f:0c:1f:8d:98:a1:28:09:e7:cd:
06:ff:00:b9:6a:74:48:a6:fb:80:30:9f:91:21:3e:9e:5b:dd:
34:41:03:c6:be:86:bc:62:53:61:49:db:4f:8a:d1:ad:de:86:
b6:41:27:6c:5d:71:91:5d:df:4c:e5:1e:63:7a:29:d2:26:be:
90:88:13:77:5f:ac:0b:a5:d0:92:5a:62:78:42:09:8b:96:cb:
96:7b:1d:34:4c:da:19:d4:68:d8:42:f1:eb:1e:e8:a5:bd:b6:
0b:a3:74:81:07:8f:09:ca:5a:b4:ea:ce:c6:74:99:98:05:5e:
74:cc:e9:b5:62:96:0d:b2:20:a5:3a:e1:70:1f:b0:21:64:2e:
ea:d4:1e:bc:69:7f:77:45:88:b4:ec:f5:d9:d6:98:b8:4d:7f:
60:87:16:b1:e2:28:1f:bc:13:3b:8c:1b:c7:32:01:ed:b7:e8:
a2:04:10:f1:35:66:ab:14:4c:45:ac:34:8c:54:55:78:95:af:
5b:aa:b6:f6:e2:a5:f9:74:a5:13:67:5a:4b:bb:1c:2f:74:d1:
95:1a:5d:2b:ed:bd:b6:4f:ba:66:5f:34:95:16:9c:f6:3b:4b:
ed:59:4d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:15:49 2026 by rpki-client