Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
File: bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft (raw, json)
Hash identifier: OSxFPVoFiy3mej31OGfOJRjpTaoPok1Cxx9FTQ3gzOg=
Subject key identifier: 89:23:B1:DF:76:7A:3F:B8:E4:7B:33:F8:7E:55:93:8A:F7:D0:1A:72
Authority key identifier: 6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
Certificate issuer: /CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Certificate serial: 019F92EE08243E0618C107F4C62439913643
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
Manifest number: 11CE
Signing time: Fri 24 Jul 2026 07:01:40 +0000
Manifest this update: Fri 24 Jul 2026 07:01:40 +0000
Manifest next update: Sat 25 Jul 2026 07:01:40 +0000
Files and hashes: 1: 0fPiuwb4X2weC-gKDNJaEbSPHqw.roa (hash: S57h9JaZkZt0GA+n+fixlPL0kJI1rFB4fls5bIvI/yg=)
2: 9F4nFbGxWFyzlJVE1S__5b6FPCI.roa (hash: g0Q3yvsLaJ0f1xZGMnOTjSsR0ohn67wJH/LM7dSM5CA=)
3: NJlkPEbvZj17oZnTPoUJnz4aYHU.roa (hash: 1OOkVDVrLB0wggxypUryE2P0Q8in33IuC2Ho6AYkBaQ=)
4: OiGHdHjDagoWQKaQO3HU1k4kpCk.roa (hash: ncY1ht+Hk47ecphOn2OCGatMTSfBF/c3Xm8aYEEJupM=)
5: bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl (hash: mQCRJfGCWQnyDv1/dPK/lyTG9RlnotlODFFuDXM7om4=)
6: jDxSBMWSjohu5v628YkiKBdFRCw.roa (hash: y62O2BZCFUd+VdwqqDL8Xt8x+VuksK9H256l1hzQejU=)
7: vVhNtVNsCVeIUDedNR2pXiMXJ9I.roa (hash: Vxc5nIGp5qmqYCBfvRkwh/ne6MswcuhCDYcPNLnJgwM=)
8: yIi_9pn2RiEfjk2wP_JBX7exLC8.roa (hash: g2McMZYpikW6RC/p1orB3778Rd6w3UuRKA7o0A9GRfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ee:08:24:3e:06:18:c1:07:f4:c6:24:39:91:36:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Validity
Not Before: Jul 24 07:01:40 2026 GMT
Not After : Jul 25 07:01:40 2026 GMT
Subject: CN=8923b1df767a3fb8e47b33f87e55938af7d01a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:84:37:a1:59:0d:de:a0:e7:e7:b9:37:9e:b9:
ef:34:51:ff:19:0a:e7:1b:84:d0:de:69:ef:5f:86:
20:76:0a:ac:06:19:47:f1:fb:a8:9c:17:fd:c6:6a:
86:30:63:d0:2c:55:ee:fe:d2:94:f2:5a:55:85:d8:
90:fa:dd:f0:d7:b2:47:93:7e:23:f2:b1:59:91:15:
de:26:f5:68:7f:3c:24:d2:cc:9f:18:20:8e:b0:a7:
38:30:e9:58:35:8e:a1:9a:24:66:29:d1:33:9e:8a:
03:b7:84:d6:9c:28:84:3b:82:bd:47:6c:55:db:8e:
50:10:0a:a2:cb:04:1d:94:e2:88:7a:45:84:95:7e:
74:f5:c3:66:d0:7e:85:01:98:fc:8d:58:cd:86:29:
32:a8:52:68:c9:b3:5b:7f:e2:a8:93:a8:59:bf:6e:
5c:8c:95:13:0f:b6:1a:cf:d6:13:00:08:e7:7f:2f:
4a:48:f6:ce:0c:e8:b0:4d:3f:02:8a:ed:53:81:7d:
a6:9d:8f:61:4c:21:dd:bb:0d:78:56:07:5a:22:bd:
c0:c5:d6:39:16:35:d7:74:78:4d:ef:ef:3b:5b:e3:
f2:14:4c:2f:45:d4:d6:8c:80:0f:e7:c9:36:3f:0c:
21:4d:50:b4:0d:ad:fe:b9:dd:91:0e:d3:49:1d:cf:
de:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:23:B1:DF:76:7A:3F:B8:E4:7B:33:F8:7E:55:93:8A:F7:D0:1A:72
X509v3 Authority Key Identifier:
keyid:6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:30:46:99:18:63:46:74:f6:9c:a9:15:8e:08:ea:45:2b:8c:
75:d5:dd:3f:8c:83:e3:ad:47:7b:99:69:46:ed:c6:71:c7:c9:
2a:ff:c7:17:4d:f6:26:31:48:de:5c:36:17:07:b6:7e:f1:75:
53:c8:b3:41:f9:66:25:3e:1b:c2:5e:33:04:9e:9c:56:51:09:
68:de:f4:a2:f4:7e:f7:6f:ef:ff:24:82:f3:f5:17:20:61:7d:
18:71:69:9a:25:4e:e2:2a:85:e8:7a:38:79:30:80:3d:d7:bb:
a3:32:a9:e4:b0:02:57:3c:52:39:84:f6:28:10:ec:bc:e3:17:
2e:66:26:f3:a7:c2:71:1d:d1:ed:3b:00:fa:1e:3f:dd:be:6b:
11:eb:6a:db:5b:a3:83:f3:f7:25:75:3b:37:0c:d5:d0:0c:eb:
a7:29:c1:25:47:3e:45:d1:f9:4f:9e:4d:45:fc:68:07:c7:78:
ab:32:16:71:7f:a5:22:6b:2c:75:c6:68:d1:92:c4:15:64:5a:
d1:a8:54:65:99:77:c7:e7:2a:fb:3e:33:7a:b3:fd:40:da:33:
a0:7f:e9:57:95:0b:d1:4a:10:c7:ee:dc:88:38:5e:75:41:b7:
3b:88:65:84:88:49:e0:c3:f1:50:c1:6f:f1:dd:16:4b:c0:38:
06:cf:6f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:22:51 2026 by rpki-client