Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/v99XKOyr1W70Y3NWlVhmylRoaRo.mft
File: v99XKOyr1W70Y3NWlVhmylRoaRo.mft (raw, json)
Hash identifier: A3ngofPrJ5phdbSu7aJRNb0I7cEkxWUYh6DW+rBS0KE=
Subject key identifier: EB:73:93:A8:93:F1:FB:68:09:7C:CE:1B:9C:96:2B:95:24:88:20:BC
Authority key identifier: BF:DF:57:28:EC:AB:D5:6E:F4:63:73:56:95:58:66:CA:54:68:69:1A
Certificate issuer: /CN=bfdf5728ecabd56ef4637356955866ca5468691a
Certificate serial: 019F90FE6AD5DA26AA068A1656B97B3C408B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v99XKOyr1W70Y3NWlVhmylRoaRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/v99XKOyr1W70Y3NWlVhmylRoaRo.mft
Manifest number: 05E9
Signing time: Thu 23 Jul 2026 22:00:20 +0000
Manifest this update: Thu 23 Jul 2026 22:00:20 +0000
Manifest next update: Fri 24 Jul 2026 22:00:20 +0000
Files and hashes: 1: 3BcGBZCHDgJs9gSoEvIJqO6Wdng.roa (hash: QqrBTNsjue3924ijEFZUnNRSzA8ZRhSOavKbIrZOqys=)
2: v99XKOyr1W70Y3NWlVhmylRoaRo.crl (hash: ULhzajwiN3sLil1soGk8/8eK1Frd4hxH0jVPnmAbUsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/v99XKOyr1W70Y3NWlVhmylRoaRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/v99XKOyr1W70Y3NWlVhmylRoaRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/v99XKOyr1W70Y3NWlVhmylRoaRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:6a:d5:da:26:aa:06:8a:16:56:b9:7b:3c:40:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfdf5728ecabd56ef4637356955866ca5468691a
Validity
Not Before: Jul 23 22:00:20 2026 GMT
Not After : Jul 24 22:00:20 2026 GMT
Subject: CN=eb7393a893f1fb68097cce1b9c962b95248820bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d4:55:dd:f0:46:ce:7f:86:09:94:48:9e:1b:
de:42:bd:08:95:1b:bb:2a:c6:1e:bd:1e:06:69:6d:
fb:85:cd:a4:93:40:78:8c:1a:f4:77:4a:b3:9b:99:
38:84:dc:35:e9:ec:35:d7:9e:ec:3d:a2:99:bf:88:
af:0c:18:ac:05:81:32:fa:61:f6:dd:e7:65:ef:ee:
43:3f:13:7e:70:2c:6b:d5:6b:f3:78:7a:f4:63:f8:
f1:d0:bf:7b:0e:a6:79:9c:5f:f9:55:c2:c8:60:7f:
48:b5:08:7d:f4:b7:d8:74:19:08:fd:d8:f6:f7:cf:
95:31:65:88:63:96:b3:c7:1f:55:da:4c:98:14:6d:
3e:19:74:57:7b:37:9f:e6:47:d0:ec:10:52:50:92:
d6:92:45:d0:18:02:7f:46:fe:e2:89:e2:a1:ea:ef:
9d:ff:7e:e6:9a:1f:7e:57:73:44:23:d3:86:aa:98:
60:a2:d2:bb:35:c6:4e:fe:38:22:04:a9:c6:9f:8d:
78:60:dc:46:1c:43:b6:5f:f1:bc:92:c1:89:09:64:
34:35:2d:48:fc:d9:41:34:67:a1:0e:d7:7c:7d:75:
d0:a9:7d:b2:12:d5:ab:92:d9:91:b1:a6:76:fc:d4:
cf:35:af:c3:02:f5:30:15:6f:ca:75:40:4d:71:94:
21:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:73:93:A8:93:F1:FB:68:09:7C:CE:1B:9C:96:2B:95:24:88:20:BC
X509v3 Authority Key Identifier:
keyid:BF:DF:57:28:EC:AB:D5:6E:F4:63:73:56:95:58:66:CA:54:68:69:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v99XKOyr1W70Y3NWlVhmylRoaRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/v99XKOyr1W70Y3NWlVhmylRoaRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/v99XKOyr1W70Y3NWlVhmylRoaRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:65:8d:07:61:ac:52:0c:62:62:e7:61:11:73:90:3c:68:0f:
e1:b8:20:86:f8:ad:33:31:97:dc:93:97:28:fd:ca:ff:3f:e5:
95:30:e0:d2:41:6e:92:24:ad:f3:94:e2:79:32:ad:3a:b8:1e:
4f:6f:5f:b4:6f:8f:b6:f9:86:00:f4:f9:69:2a:be:aa:71:b6:
16:2d:2d:ce:62:fc:c6:c3:07:20:55:10:8a:38:5f:87:0b:dc:
05:9a:b6:95:27:e7:d5:fc:b7:e7:b3:d0:19:6c:e4:f9:87:57:
95:c8:19:59:07:61:81:15:ce:59:5b:88:4a:a5:1b:c0:44:c0:
88:b0:46:9c:d6:a5:b7:4e:7f:f6:67:30:e1:bd:3f:f9:34:06:
5c:48:f9:bd:d6:00:08:69:df:50:45:e8:7c:6b:17:fe:81:15:
fe:e1:8d:2f:c9:ad:52:3f:13:e8:41:e2:f7:c7:31:36:5f:3a:
c1:04:e3:e3:27:75:f4:31:7f:b8:49:e7:21:b8:be:b0:a5:2f:
d4:1b:32:a9:e4:9b:0a:75:d3:a0:f4:46:c1:fa:14:19:81:ed:
74:3d:9e:03:50:48:00:3d:99:53:a4:7c:99:74:8c:29:42:26:
59:5c:f5:04:d9:91:ab:fd:ed:02:0b:99:31:5d:f3:48:f7:b6:
8d:c8:c2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:22:13 2026 by rpki-client