Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/MiDNbPP4Ze9s-gQiLCI88g7n4Eg.mft
File: MiDNbPP4Ze9s-gQiLCI88g7n4Eg.mft (raw, json)
Hash identifier: ZmDDEak3nS5lPwt/ecpOuZY20gfRnrLOoRav/J3yfD4=
Subject key identifier: 5B:27:08:7C:95:87:07:35:58:A7:9F:03:AC:1B:45:96:FD:21:71:CF
Authority key identifier: 32:20:CD:6C:F3:F8:65:EF:6C:FA:04:22:2C:22:3C:F2:0E:E7:E0:48
Certificate issuer: /CN=3220cd6cf3f865ef6cfa04222c223cf20ee7e048
Certificate serial: 019F954919C5F5BEE0B348A669C952D0552E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MiDNbPP4Ze9s-gQiLCI88g7n4Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/MiDNbPP4Ze9s-gQiLCI88g7n4Eg.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:00:23 +0000
Manifest this update: Fri 24 Jul 2026 18:00:23 +0000
Manifest next update: Sat 25 Jul 2026 18:00:23 +0000
Files and hashes: 1: MiDNbPP4Ze9s-gQiLCI88g7n4Eg.crl (hash: RMMHa9DK7T6VgjxU3Q7466dc0Q9Vithc9uDZTuiRsCM=)
2: kFL249yBJc4sSXnfovKwJ6mjCww.roa (hash: HJelDmFXzIdgkYrGpNACjTkxKKW9AU78etwdV7+OHDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/MiDNbPP4Ze9s-gQiLCI88g7n4Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/MiDNbPP4Ze9s-gQiLCI88g7n4Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MiDNbPP4Ze9s-gQiLCI88g7n4Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:19:c5:f5:be:e0:b3:48:a6:69:c9:52:d0:55:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3220cd6cf3f865ef6cfa04222c223cf20ee7e048
Validity
Not Before: Jul 24 18:00:23 2026 GMT
Not After : Jul 25 18:00:23 2026 GMT
Subject: CN=5b27087c9587073558a79f03ac1b4596fd2171cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ec:14:58:97:a4:9d:22:c5:a4:45:27:12:3f:
86:42:48:61:26:f8:67:a6:95:b6:17:c1:57:94:ac:
5d:63:4f:ba:e9:f6:d0:ce:fc:9f:bb:5e:40:53:85:
41:7a:52:36:aa:a3:dc:6e:40:50:08:63:43:d2:ae:
de:24:6b:76:ee:c7:16:2e:ec:97:b4:b6:5c:e9:cb:
56:10:34:01:ee:d8:4b:cf:68:6e:f7:16:03:c9:7a:
4b:8a:0b:df:18:af:7d:4d:44:c2:c9:5c:9b:1d:a9:
8d:6e:99:1e:b7:2d:32:27:1f:ad:eb:9a:04:22:19:
4a:a7:10:ea:98:21:2f:d9:c3:13:58:87:22:75:dd:
03:46:5e:bf:a9:26:0e:80:b2:81:e2:a7:e8:09:fd:
1f:91:fc:a1:e7:6d:b7:7f:33:8e:08:18:68:66:c4:
a4:a1:dc:fa:43:1a:3e:72:4f:89:58:6b:3d:41:9c:
22:33:09:d1:47:c5:ec:5d:26:11:0a:d1:40:0d:cb:
72:01:e9:28:cc:89:c4:62:83:89:95:b4:0e:0b:90:
3a:71:96:14:02:85:68:e1:b3:74:84:48:f1:b7:95:
a2:ea:cc:b4:e8:6b:3c:94:f9:f5:31:d7:de:cf:57:
d9:8e:0c:72:62:da:45:93:6d:30:01:97:0a:c0:09:
23:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:27:08:7C:95:87:07:35:58:A7:9F:03:AC:1B:45:96:FD:21:71:CF
X509v3 Authority Key Identifier:
keyid:32:20:CD:6C:F3:F8:65:EF:6C:FA:04:22:2C:22:3C:F2:0E:E7:E0:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MiDNbPP4Ze9s-gQiLCI88g7n4Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/MiDNbPP4Ze9s-gQiLCI88g7n4Eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/MiDNbPP4Ze9s-gQiLCI88g7n4Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:eb:84:ab:a9:e6:c7:5a:cd:14:d7:86:d9:52:17:ba:46:b3:
7b:6b:05:a4:d1:aa:ab:05:55:c3:fc:7d:34:87:85:e7:df:63:
2c:e7:6c:fb:9f:6e:61:0f:c3:43:d8:43:cb:8e:1b:11:4f:16:
68:bf:79:ce:a3:b2:6f:f3:63:d9:30:ba:dd:a0:06:5a:b0:ff:
d2:d3:0f:b4:88:c2:bb:70:61:5e:2a:e3:c7:5d:e1:d1:77:bf:
2e:cc:5a:eb:09:45:25:8a:bf:90:05:27:36:31:58:31:ef:79:
1f:4a:38:48:b2:31:d7:99:08:00:37:84:e8:3c:26:81:8a:ec:
97:e3:ee:9a:43:58:c7:22:0a:56:93:63:a2:be:9f:6c:e2:6a:
c1:71:4c:3b:64:dd:b5:c8:53:84:65:40:f9:a6:37:11:a1:71:
46:11:7d:66:30:5f:f2:77:ee:84:a1:92:f6:7b:9b:d7:bb:5d:
b8:22:67:9d:c8:b2:c8:72:8a:c5:05:80:e0:4c:ff:d9:7a:b3:
25:e8:71:58:36:ad:e6:ea:c3:0f:df:09:57:a0:a0:82:04:c7:
fe:45:40:25:45:44:b1:29:d2:4a:72:a5:0d:dd:ef:76:8e:58:
34:d1:f4:79:37:03:25:fc:b9:84:e0:ed:99:98:e9:14:16:69:
59:3e:05:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:48:06 2026 by rpki-client