Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
File: _0cFo2PcHY0OpRybmh7L04B70FQ.mft (raw, json)
Hash identifier: 9QjGlTd7eees51zhDWWRNKPpf+eVgHs6AbjDJMyXX8k=
Subject key identifier: EE:D4:32:F2:11:1E:F4:49:53:5B:D2:4F:7C:9A:17:D5:81:EF:EA:FB
Authority key identifier: FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
Certificate issuer: /CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
Certificate serial: 019F9400251470C217F844EEB8867562C6FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
Manifest number: 19CC
Signing time: Fri 24 Jul 2026 12:01:05 +0000
Manifest this update: Fri 24 Jul 2026 12:01:05 +0000
Manifest next update: Sat 25 Jul 2026 12:01:05 +0000
Files and hashes: 1: DJeUFnamTZ95ip1wqQB6GBsmyiQ.roa (hash: MVnppoj2mz3TnYvjg2uHh/9JjoQIHJwR2BBiRIQrPeE=)
2: GHjJjwBpoAdhz9IMpI8-MFbmhXg.roa (hash: Yg81SKjjSUrf7wcCQo3l8C3jEm5E2w8HUv9yWnStEig=)
3: _0cFo2PcHY0OpRybmh7L04B70FQ.crl (hash: zXgUfcsdpW1jK8MjUTXvjkPCGS5TRgiy4Aikjq+zBDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:00:25:14:70:c2:17:f8:44:ee:b8:86:75:62:c6:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
Validity
Not Before: Jul 24 12:01:05 2026 GMT
Not After : Jul 25 12:01:05 2026 GMT
Subject: CN=eed432f2111ef449535bd24f7c9a17d581efeafb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:67:98:3c:e3:9a:a4:fb:5c:98:5d:d9:97:8f:
24:04:a4:34:21:7d:d3:8c:0c:16:a7:58:02:5d:dc:
49:9e:fc:29:ae:37:d6:91:ba:9e:51:1f:b5:c4:85:
ca:64:3a:72:82:4e:c5:1d:d8:02:70:16:ce:ad:05:
a2:76:e1:44:6e:5a:8a:7a:70:f7:a5:db:6a:8f:99:
03:c8:e4:fa:5c:6e:19:55:80:1f:18:35:d6:88:18:
e6:b7:59:96:8d:ce:53:89:62:77:38:36:e2:02:1a:
ed:c8:d4:f2:d5:ab:b5:ce:70:73:a8:ff:fa:2a:0c:
98:a0:6e:1f:9a:a9:75:ec:15:79:e4:72:0f:67:87:
4b:d8:a7:97:c6:97:24:ec:f2:be:ab:13:7b:e5:7b:
f3:ec:53:fd:5b:57:44:44:88:d5:3e:fb:ce:26:3e:
45:d6:7a:96:2a:d9:62:11:91:e6:eb:66:7a:b7:9a:
56:6d:d7:94:0e:0c:1b:f1:04:d4:ab:01:35:a4:41:
3f:76:3f:07:e5:b7:1b:f3:4f:0f:07:69:3b:46:b0:
0a:81:87:c0:73:b6:1d:27:b8:28:59:9d:be:f2:4a:
2d:b4:1c:22:b5:de:9c:b2:26:70:f7:c8:8d:07:64:
8d:4d:16:60:80:c3:a7:ba:4b:63:19:52:f5:a3:93:
ac:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D4:32:F2:11:1E:F4:49:53:5B:D2:4F:7C:9A:17:D5:81:EF:EA:FB
X509v3 Authority Key Identifier:
keyid:FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:75:e5:ee:5a:b9:d2:6d:a0:2a:ff:a2:84:12:79:e9:35:a7:
c6:4f:9d:45:8e:4d:ed:5d:19:1e:36:f2:44:c1:1c:09:72:a9:
ca:b6:75:e2:af:1c:df:9f:47:b9:3e:95:68:be:8c:c2:7a:f2:
c8:2e:1c:d8:ae:86:45:18:60:58:57:9e:88:ea:5e:46:24:60:
92:45:a6:28:42:ea:81:97:b4:a5:b6:02:ec:7c:4d:91:df:4b:
c3:03:0b:c9:86:02:aa:59:84:a2:c7:67:fa:23:63:5f:13:9f:
e9:fb:7f:43:8b:8d:61:11:cf:a8:81:28:49:a4:56:f5:01:e9:
c0:c1:bd:9b:52:f2:ad:c4:55:e5:c6:ad:1c:ff:e1:c0:68:41:
8e:4e:fe:d7:ca:1b:3a:84:1a:77:14:43:01:ce:cd:3f:a6:99:
88:b7:81:29:a4:02:30:3b:d5:fd:ca:c0:27:d8:c3:f2:6a:88:
eb:7f:fb:fd:44:eb:34:ab:eb:f1:10:1b:1f:38:f2:e8:5b:d1:
0f:16:38:84:83:d0:59:98:44:d9:c0:6a:b8:6f:e7:bb:22:85:
df:e3:42:a3:1c:13:48:dc:7f:34:9b:2b:60:ad:63:a3:b1:88:
f1:c4:ee:61:20:e0:71:5b:2c:20:e9:79:82:48:e0:32:47:e1:
8f:57:93:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:02:05 2026 by rpki-client