Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
File: MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft (raw, json)
Hash identifier: sC6oxStDV1VRaLQH0zBdjUx3mua/0WhQUA8QpTqiQmE=
Subject key identifier: 6C:01:36:80:76:78:54:D3:E3:62:97:2F:CF:C7:2A:80:23:D4:CB:24
Authority key identifier: 31:D7:D9:D2:9C:EC:F8:E5:91:22:23:3D:71:6E:6B:05:0E:71:84:78
Certificate issuer: /CN=31d7d9d29cecf8e59122233d716e6b050e718478
Certificate serial: 019F935B923CB105ADCD37C2B74731D0088B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
Manifest number: 05A4
Signing time: Fri 24 Jul 2026 09:01:19 +0000
Manifest this update: Fri 24 Jul 2026 09:01:19 +0000
Manifest next update: Sat 25 Jul 2026 09:01:19 +0000
Files and hashes: 1: 9jfmZ8bQaVGPFDWRFHvQHmnS8fo.roa (hash: /DXZZnlzFxIqpfLKa2jzn4JOmraJhYpvlatvoWLWvdY=)
2: MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl (hash: Rmu9jl9IqmMvimvbCmUaL8MRXy+zPcHuc8kFz9nkSVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:92:3c:b1:05:ad:cd:37:c2:b7:47:31:d0:08:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d7d9d29cecf8e59122233d716e6b050e718478
Validity
Not Before: Jul 24 09:01:19 2026 GMT
Not After : Jul 25 09:01:19 2026 GMT
Subject: CN=6c013680767854d3e362972fcfc72a8023d4cb24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1f:27:fc:6a:9b:36:9b:6c:8a:12:f7:ee:46:
4c:ee:19:71:29:fd:1d:27:27:7a:bd:2f:39:bd:29:
ae:8a:d0:12:75:05:37:49:c4:cd:9d:6e:15:29:b2:
f6:0f:45:3e:77:6a:de:d2:de:9e:c6:25:27:28:33:
9a:14:61:e6:38:7b:61:dd:a2:08:aa:41:8a:eb:31:
cb:56:cd:46:e3:48:91:5e:b5:23:db:b1:6c:63:3a:
c8:3b:4c:f4:6f:7d:7f:45:0a:15:89:1e:e8:d8:58:
70:6d:ff:10:95:f8:cc:9e:fd:ef:be:90:f4:a6:2c:
57:66:e5:45:b1:f1:c3:6c:3c:bd:c8:b0:2b:e9:a8:
49:61:05:8d:45:64:49:77:aa:5e:c8:ac:be:89:95:
73:d0:1a:37:0a:9e:fd:41:7e:e7:6c:9b:f8:41:4f:
b7:dd:2e:ef:f5:0b:ed:6d:96:03:97:56:41:4b:2c:
3e:f6:b6:2d:82:ed:51:f1:9a:f3:72:c7:26:a7:fe:
ed:41:74:ae:8d:97:8a:24:8f:3a:c9:1f:e3:e1:e6:
6b:8f:99:79:c7:d6:60:28:72:d4:7c:40:ec:5b:d0:
bc:cc:82:eb:9c:aa:23:e9:d8:5a:36:2b:80:b0:aa:
3d:c6:22:69:1f:45:87:26:36:ac:1c:d3:57:5c:f1:
7e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:01:36:80:76:78:54:D3:E3:62:97:2F:CF:C7:2A:80:23:D4:CB:24
X509v3 Authority Key Identifier:
keyid:31:D7:D9:D2:9C:EC:F8:E5:91:22:23:3D:71:6E:6B:05:0E:71:84:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:7d:6b:2e:1c:c2:92:00:7f:66:ca:1c:f7:a5:02:a1:b0:0f:
6e:e2:63:3b:43:3f:82:9f:e6:3f:80:26:52:b2:a0:b7:ae:68:
71:15:24:7f:81:f6:b1:58:32:d9:32:e4:f7:54:e6:0c:bc:b4:
3e:2e:8a:1f:12:82:bc:ba:d1:ff:2e:96:b2:7e:38:7b:a5:8d:
05:38:38:61:93:24:9b:4d:b0:c1:d6:ad:c0:e7:27:e0:f2:81:
fa:64:5c:85:50:4c:a3:32:ce:44:fd:53:eb:26:17:4e:36:f9:
6b:82:0f:85:c7:3e:af:7a:29:70:cb:89:0c:37:82:a8:cb:e3:
5e:2b:f5:da:e9:3a:6a:49:98:21:7e:56:fd:89:08:f8:88:f9:
2f:24:5d:70:3b:1b:91:7e:1a:87:c5:c5:c0:53:6a:e3:bd:5b:
0c:41:da:80:13:ac:26:68:68:4f:34:28:51:7b:a0:6c:b1:35:
b9:c1:2f:4a:d0:82:49:d9:dc:73:5f:df:b7:d0:c0:03:a2:51:
83:46:bf:58:23:c3:b3:79:1e:be:3f:4d:90:3c:ab:47:36:fe:
f6:ee:08:46:b7:8b:6e:d5:3d:ea:4f:c9:bf:ff:68:69:4d:39:
b3:81:53:54:db:36:8b:c3:0d:c7:72:6d:30:48:35:84:a4:a9:
0a:74:60:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:18:14 2026 by rpki-client