Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
File: RENP2YwR2Nct84DKg-33n8wAhZ8.mft (raw, json)
Hash identifier: 1kLighDkUWzqL/0ca15AlI828x/NsvzKE1VTHRfRIUQ=
Subject key identifier: FF:84:08:83:BB:34:9F:5A:63:34:F2:A7:F1:2E:6B:E5:B2:85:4D:C1
Authority key identifier: 44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
Certificate issuer: /CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Certificate serial: 019F91A427115989087FDF4FA9E161940FEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
Manifest number: 0E31
Signing time: Fri 24 Jul 2026 01:01:21 +0000
Manifest this update: Fri 24 Jul 2026 01:01:21 +0000
Manifest next update: Sat 25 Jul 2026 01:01:21 +0000
Files and hashes: 1: OTZcNe4faH1uSoNvCZiXYbKK1ds.roa (hash: uIfg5U+1EbmCjtFgcikAr/bmU9dQajvTUZ3MYk7/2xU=)
2: RENP2YwR2Nct84DKg-33n8wAhZ8.crl (hash: 0WhgTo0zFb8Cmn5C9qhUsw/K2vYwvMteQpQvhkcj/Hk=)
3: zRiHFdGjFdtLfm7gsvy2-5E0CpI.roa (hash: LIfEP9SyJvvx/mP2z1DtCTkpaRU2RlrQg1/zTilnakw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:27:11:59:89:08:7f:df:4f:a9:e1:61:94:0f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Validity
Not Before: Jul 24 01:01:21 2026 GMT
Not After : Jul 25 01:01:21 2026 GMT
Subject: CN=ff840883bb349f5a6334f2a7f12e6be5b2854dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2a:4c:bc:fc:03:55:60:60:64:b5:e6:8e:28:
7a:d6:9d:6a:37:a4:78:b4:fa:30:ae:6f:49:8e:33:
51:b3:d3:1e:38:7a:9e:fb:16:9c:28:77:af:a3:c5:
07:fe:42:13:8f:a3:fb:79:c5:dc:89:d8:2f:9b:88:
c7:ba:d8:71:46:73:e0:d6:85:09:31:b4:29:af:85:
2e:30:d5:ff:c1:5c:a9:d4:53:a2:d2:3c:6a:9a:df:
44:12:05:5b:f6:74:d3:45:26:08:44:07:fa:09:67:
49:f0:86:f9:c8:85:99:ef:23:8b:ca:aa:78:63:fa:
07:4b:25:f9:67:f4:6f:a2:86:be:e5:bc:19:5a:c5:
a5:18:1d:d7:0f:8b:61:3a:3d:2d:f3:5b:8e:60:cf:
a2:d9:3d:29:88:e5:6c:b2:90:c7:bc:0f:58:f1:14:
b7:e2:fb:9c:87:91:59:1b:78:88:de:a3:0d:a2:fa:
1b:79:89:04:ab:71:c0:f4:3b:37:c7:fe:d3:58:a7:
5b:ee:8c:c0:5f:bd:18:d5:e3:b0:93:0d:fa:2b:c8:
09:5a:58:23:d2:1d:9c:6a:9c:18:05:2d:81:d5:07:
8d:c3:ba:81:37:6e:c0:51:9f:ae:1b:b3:f7:68:1d:
77:44:9f:64:6e:c0:68:4b:22:40:98:f3:17:a8:35:
bb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:84:08:83:BB:34:9F:5A:63:34:F2:A7:F1:2E:6B:E5:B2:85:4D:C1
X509v3 Authority Key Identifier:
keyid:44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f8:e5:a3:71:46:99:89:78:b6:c9:bc:3f:64:af:68:9c:e9:
dc:2e:5a:8f:3f:38:72:b3:f9:ef:88:0f:1b:03:68:2f:46:d2:
8a:b9:40:90:57:ae:ff:60:e3:a4:15:a5:cf:4b:58:ab:34:b2:
06:17:87:ac:dc:9b:21:07:22:8d:e6:85:01:f5:c6:fe:a5:f9:
71:48:9e:f2:3e:5b:50:e9:85:a3:33:58:91:7a:ad:cf:55:18:
db:47:fb:b1:5f:bf:77:b4:c4:89:4d:75:1f:b9:dc:d4:91:70:
aa:6b:24:67:9e:05:a5:60:b5:ea:c2:31:49:04:cb:d4:51:37:
29:7a:c5:62:74:de:57:ac:9a:a6:f9:67:ca:d1:fa:07:73:4f:
5c:0d:62:bc:b8:41:e7:2f:cd:e2:6f:f1:f5:dc:c4:7c:7b:a8:
50:99:ce:15:57:fa:d2:6d:c8:7b:64:50:ee:75:42:d6:fb:a1:
8a:0f:5e:30:dd:1c:e3:e4:80:3c:a5:6e:86:f1:4d:a1:a5:bc:
29:5a:64:ba:9c:7c:e7:ef:f7:88:5d:ca:4f:b3:dc:e7:34:dd:
76:a9:72:d1:72:45:8b:08:e6:6a:bc:86:6a:4d:33:83:42:e2:
80:6a:56:08:95:6f:34:e3:f1:2f:8a:1b:f9:44:75:21:7f:00:
62:47:86:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:33:51 2026 by rpki-client