Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
File: v2wd9mI3TUrs0Miz-EMS30ISVZk.mft (raw, json)
Hash identifier: gd/AFLgZIyMTqhdddoSBcqNy866n924PdRddX6f0nPQ=
Subject key identifier: 32:15:16:10:98:DE:A2:2A:8F:F8:0A:92:9F:C3:5C:B2:0D:B9:8B:48
Authority key identifier: BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
Certificate issuer: /CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Certificate serial: 019F916D075DE5BAC9DB91F17A1EB543BEEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
Manifest number: 18A0
Signing time: Fri 24 Jul 2026 00:01:09 +0000
Manifest this update: Fri 24 Jul 2026 00:01:09 +0000
Manifest next update: Sat 25 Jul 2026 00:01:09 +0000
Files and hashes: 1: C0a13JZ0RSPrkMSd5oEqtcq4rwk.roa (hash: 6ypJkRhP+y1RaXO9CpneyswfDWMF34KW/IwPdUjopIU=)
2: SPQiaZ3julcN6ImZOduLjd1qohM.roa (hash: 0YIxYrRhuUKf32GXdhAAMFjgeWQ0j2Tfw0leBwT+5Aw=)
3: v2wd9mI3TUrs0Miz-EMS30ISVZk.crl (hash: Mgio9YTK7vPZNODomCEIj1MekUArE1ZYuPo9/zXJKh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:07:5d:e5:ba:c9:db:91:f1:7a:1e:b5:43:be:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Validity
Not Before: Jul 24 00:01:09 2026 GMT
Not After : Jul 25 00:01:09 2026 GMT
Subject: CN=3215161098dea22a8ff80a929fc35cb20db98b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:70:12:2f:60:76:36:0b:be:28:c2:69:ca:cf:
98:cb:03:69:a1:d4:28:22:ce:a8:88:ca:f0:53:84:
58:47:56:dd:99:4b:60:f7:ea:80:39:b5:63:97:a5:
83:b8:44:8d:6d:53:74:f4:86:be:0e:5e:34:0e:e3:
8e:bb:5c:03:1e:8e:74:a9:8f:f7:a8:9d:09:f5:ae:
3e:e4:2c:90:60:6c:4b:fa:03:5b:36:a9:ef:ed:79:
6b:74:01:84:48:4f:da:1c:1c:ef:e1:22:32:6d:a3:
5d:cc:b4:dc:47:96:ce:4e:db:80:de:05:3c:a5:70:
28:a6:12:57:b3:ce:d2:d5:dc:cd:d0:cb:75:73:0c:
8f:d3:74:03:c8:b7:b5:ff:a2:1c:24:22:c4:e3:cd:
83:27:a5:f3:f7:8f:bc:f7:64:44:cc:01:89:6a:6c:
45:01:c6:2f:38:a4:3c:d9:31:a3:e5:fb:17:58:2d:
b0:2c:6b:f9:8d:8c:17:74:51:92:13:b3:b1:1d:4b:
bf:ad:12:2a:2e:7d:8d:5f:04:c8:99:5f:f6:d5:f1:
39:74:d9:07:16:6d:52:6f:32:c0:f0:63:58:4a:c4:
2b:06:e9:d2:fd:c5:e8:3f:79:4c:5e:a4:d0:6b:90:
57:8f:12:f2:ad:76:71:57:66:bd:09:3c:dd:93:e4:
38:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:15:16:10:98:DE:A2:2A:8F:F8:0A:92:9F:C3:5C:B2:0D:B9:8B:48
X509v3 Authority Key Identifier:
keyid:BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:0e:e3:f6:b3:70:ac:23:59:5d:0a:6e:9e:c8:44:0a:4f:75:
d8:53:21:b6:0e:9f:35:06:0c:83:bc:61:21:1e:73:82:18:b5:
78:87:0a:43:c3:64:98:a4:06:79:c5:a5:f2:d2:2a:4b:36:c3:
42:59:02:c5:c2:78:79:47:4d:12:4b:66:5f:a6:34:2f:40:4a:
ca:0a:f0:c4:9f:30:04:88:fd:1b:5e:d1:27:de:a0:f1:b5:3b:
16:68:c6:3a:ef:fa:18:b8:07:21:83:bc:a2:bd:92:87:e6:d1:
49:b1:36:dd:39:e9:bc:82:cc:b7:19:02:44:80:8b:a9:67:2c:
d3:21:2a:1a:d4:b3:60:fa:ab:4a:8c:96:5d:7f:06:d8:70:31:
78:c7:25:1f:bb:86:2a:21:4b:27:2f:ef:ff:6f:bf:f6:0d:fc:
5b:3f:b5:f4:79:ea:ec:4c:9f:26:86:9b:d5:8e:ec:66:eb:ba:
79:d8:63:be:45:1a:67:e2:a8:2d:36:4b:fb:de:35:d1:a7:c9:
1d:0a:76:07:a2:c3:b7:ae:cb:99:d6:ae:48:1b:c8:83:39:53:
65:1d:94:1d:49:d1:d8:7c:48:9b:b6:16:74:18:6c:91:2a:7a:
be:e8:20:b0:b6:a9:74:0e:2f:a2:3c:63:aa:62:6c:17:87:13:
a3:03:39:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:06:06 2026 by rpki-client