Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
File: cd9sdT6ghb7zcrOSYw90uldpbuU.mft (raw, json)
Hash identifier: AOUdXMNmfnaNLI8GXN+jy7ErbVPStnJOjabDEH6FIY4=
Subject key identifier: 63:C5:F9:9F:15:B6:39:77:D3:31:D3:A1:7A:A0:95:D5:75:A2:5F:1B
Authority key identifier: 71:DF:6C:75:3E:A0:85:BE:F3:72:B3:92:63:0F:74:BA:57:69:6E:E5
Certificate issuer: /CN=71df6c753ea085bef372b392630f74ba57696ee5
Certificate serial: 019F946DC837E2791A6FEE23C95C5378B7D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
Manifest number: 16D9
Signing time: Fri 24 Jul 2026 14:00:50 +0000
Manifest this update: Fri 24 Jul 2026 14:00:50 +0000
Manifest next update: Sat 25 Jul 2026 14:00:50 +0000
Files and hashes: 1: 90fOLXtBv8zjOyjcz26gkbyoNvE.roa (hash: Ru1YTQpQd39yRjLzCahK22aUJjQHLniT2w2j16/8ijY=)
2: GNQd5Bm0mjUJd67uPNG6cQdgvFk.roa (hash: 0ulANNIaOCC2eudb71uMMJn10FX8G4OgvsoxQ5AP27o=)
3: cd9sdT6ghb7zcrOSYw90uldpbuU.crl (hash: 8OiJOIoFTu1ezVUPSaGvLX3VZj0/IenKNVP28UCgMhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:c8:37:e2:79:1a:6f:ee:23:c9:5c:53:78:b7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71df6c753ea085bef372b392630f74ba57696ee5
Validity
Not Before: Jul 24 14:00:50 2026 GMT
Not After : Jul 25 14:00:50 2026 GMT
Subject: CN=63c5f99f15b63977d331d3a17aa095d575a25f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:72:16:09:a4:b0:d5:41:23:05:00:96:08:83:
8f:f7:78:38:a3:76:01:55:60:51:5c:f5:e7:d3:2b:
e3:c3:98:b7:bd:e1:45:5d:01:47:ee:2e:f1:23:fe:
e8:89:71:1f:65:bd:ef:f6:88:93:07:c6:0d:30:94:
a8:49:bd:a9:83:96:bf:8d:9d:b8:16:0f:79:6e:a9:
ab:18:93:2e:c1:fd:9f:88:21:d4:48:e0:4d:d1:e6:
d0:a3:32:0d:ca:65:94:90:ec:01:84:1f:94:fa:93:
ef:20:67:65:83:12:8f:67:23:91:4e:e1:06:3d:27:
5c:9c:78:ee:53:cd:cc:f3:d9:80:41:80:ce:7d:ed:
f6:9d:ba:6c:47:f4:19:bd:ef:b5:b9:c7:0f:a7:aa:
56:6f:36:5a:cc:bd:9f:74:89:cd:13:3f:e7:e7:d9:
45:b7:5b:9d:91:67:47:31:8f:9c:9f:f5:16:ba:ed:
36:6b:ce:59:9e:68:b6:95:2e:01:a5:53:74:62:9a:
17:93:15:95:64:49:61:bb:f8:a8:28:73:e5:d1:81:
50:57:f4:64:f2:7c:fa:c6:04:78:e5:e0:b8:66:20:
f3:60:c2:e2:2e:be:da:c3:93:b8:2c:93:cf:64:58:
0e:e7:c5:cd:8f:60:be:26:8e:8e:c5:f9:f7:c4:ef:
da:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C5:F9:9F:15:B6:39:77:D3:31:D3:A1:7A:A0:95:D5:75:A2:5F:1B
X509v3 Authority Key Identifier:
keyid:71:DF:6C:75:3E:A0:85:BE:F3:72:B3:92:63:0F:74:BA:57:69:6E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f7:53:8f:38:c2:96:bf:37:78:a4:a7:4f:d5:a5:74:21:fb:
43:a2:de:8e:75:d5:c7:e4:1f:0c:b3:d5:8a:de:d7:cc:c9:2a:
15:eb:04:81:76:c3:e8:8c:96:5d:84:7a:3e:c3:d0:df:1a:d0:
19:bb:f7:fd:f2:fa:79:81:69:e3:c1:49:68:d7:d4:5b:5b:21:
cf:ac:44:e5:fe:bd:10:12:d5:c1:78:2f:c4:9b:70:81:e1:45:
d0:87:a9:b2:80:80:48:28:cf:b7:df:51:8c:c7:7a:85:53:a8:
0b:e5:b6:97:83:b2:75:f5:5b:88:e4:bf:f5:1a:c0:5f:57:1b:
d2:23:35:ac:d1:42:43:31:71:5c:7b:13:cc:27:d4:f7:89:47:
7e:c8:1c:8a:79:20:17:46:00:f7:01:3a:85:ba:05:aa:59:9e:
73:4e:3d:ab:66:27:39:35:d2:16:05:19:dd:bb:18:2e:03:11:
c6:72:fa:d5:0c:38:fa:46:e4:b0:55:20:bc:0c:6d:15:26:ac:
52:35:a4:3a:e6:eb:7c:8b:78:c4:42:2b:a8:7d:e4:4a:e0:57:
cf:db:3e:40:6f:29:ea:50:fc:c4:dc:fa:35:55:6d:e4:cb:e1:
94:e4:b3:0c:62:ae:3a:85:45:bf:ad:cf:1c:ec:e6:d3:d0:e4:
a0:72:f2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:53:00 2026 by rpki-client