Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
File: d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft (raw, json)
Hash identifier: UiOx946WpfpNQrApToA031aIiTSDRddlbQXZpHZsg9U=
Subject key identifier: 52:9C:5B:07:55:21:96:B7:80:35:40:50:08:9B:F0:A1:16:73:8D:3B
Authority key identifier: 77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
Certificate issuer: /CN=779fbaaac6541ab318529eb025613c6520e47646
Certificate serial: 019F9323C98DAE250B237A46BBEC322FF62C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
Manifest number: 087A
Signing time: Fri 24 Jul 2026 08:00:23 +0000
Manifest this update: Fri 24 Jul 2026 08:00:23 +0000
Manifest next update: Sat 25 Jul 2026 08:00:23 +0000
Files and hashes: 1: 1ULsjrhU_Mgs_8Mvd-oE1b7ANaE.roa (hash: BPqaZcuEdD+lQrMI+iPU/GW6APEbwg38yW1mZjGwXr8=)
2: d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl (hash: kshqnumDOqYb5B/3RFuOTFL+C2w542ytkwYueaFBxSM=)
3: pXo0ZUaV-y6EDCcUoSCUhqpPURU.roa (hash: EuVKLvC6yGpoLeqj+M0pu9788Rfc943eOWrQgVLBCHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:c9:8d:ae:25:0b:23:7a:46:bb:ec:32:2f:f6:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779fbaaac6541ab318529eb025613c6520e47646
Validity
Not Before: Jul 24 08:00:23 2026 GMT
Not After : Jul 25 08:00:23 2026 GMT
Subject: CN=529c5b07552196b780354050089bf0a116738d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6d:43:2f:5f:df:08:f7:21:bc:29:53:e1:df:
98:5d:e4:6c:c1:03:1b:15:63:2b:b8:f0:9c:f2:f4:
e1:71:69:64:ea:66:29:7a:ed:08:af:de:27:ba:75:
0e:63:eb:4f:12:65:f6:53:90:af:7c:2e:8d:2d:62:
a9:31:13:9f:d1:a5:00:3e:d2:2d:61:47:1d:a9:fc:
e4:d4:65:bb:f8:f0:b4:79:37:45:17:b6:4b:1e:49:
d3:f6:8e:5a:43:75:fa:a5:d6:71:85:ee:a0:41:25:
1b:6c:d0:e4:ab:11:a4:3b:7d:be:40:7b:d4:a5:6c:
0f:0a:58:22:5c:a6:f2:5b:6b:38:33:01:fb:4d:4b:
a4:bf:80:0a:4c:67:4b:83:ba:a2:de:52:30:e4:88:
98:40:1f:07:6d:f9:6e:cd:71:67:cd:10:8f:d4:80:
12:d5:86:e4:94:26:5a:04:fb:79:5e:a3:e0:2e:12:
ee:4d:bb:89:a1:5f:4a:00:18:21:c2:18:95:4d:9f:
9b:95:07:79:fb:8c:0d:73:5b:02:54:b1:b2:5f:2c:
7a:71:72:16:0d:86:42:4c:48:d8:a4:82:a4:97:2c:
1d:f0:eb:80:2f:7c:9c:d9:fe:53:a5:ae:6c:6e:ae:
35:88:c4:17:ef:86:e1:71:13:2d:79:98:8b:2e:d2:
c8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9C:5B:07:55:21:96:B7:80:35:40:50:08:9B:F0:A1:16:73:8D:3B
X509v3 Authority Key Identifier:
keyid:77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:08:89:fd:c4:c2:e0:dc:80:90:a8:0e:d1:9d:b3:ab:99:96:
8c:06:de:5d:90:bf:d8:1c:c2:11:8f:6b:36:0d:e6:68:8b:5c:
3e:f8:f9:9b:32:c7:e3:ed:d5:3b:64:6c:27:aa:1b:7b:d2:64:
fd:c2:8a:ff:9b:6f:2c:3c:ba:4d:5a:e5:9c:f9:ec:7b:83:a9:
d2:5c:82:32:84:c2:14:bd:11:72:b3:9a:27:5a:a6:13:42:e8:
98:52:92:09:67:1d:12:39:96:d4:90:70:87:17:e3:d3:02:3d:
bf:e2:2f:1e:df:7c:8c:2c:e1:cc:32:56:b7:62:cd:66:a2:43:
41:66:a1:be:94:8a:2b:e0:d1:51:45:a0:a1:5c:cc:79:56:c0:
e8:b5:d1:e2:f7:fa:ac:84:23:b7:b2:16:04:f9:0a:00:af:45:
17:f3:0c:94:7b:01:93:71:a0:57:2f:de:61:55:1b:ae:39:fb:
d3:43:7a:76:80:ba:c8:57:af:89:df:53:d6:e5:00:4f:1b:a7:
8f:a2:c0:85:2c:8d:2f:8b:fe:e6:7e:85:fa:ea:99:a2:97:44:
7e:6d:b2:9c:09:77:94:51:a6:d9:94:fe:81:af:dd:8f:9e:a8:
79:6b:cd:fc:61:83:16:99:20:73:c6:e6:33:f3:62:a1:91:2c:
81:35:88:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:06:19 2026 by rpki-client