Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
File: RWF9LghjWN2nvbDcRmyhyG7U_so.mft (raw, json)
Hash identifier: cRd5+v+vMBWJ6IKoy+9LlhtHPUu+lu7XJKjUU/1QXw0=
Subject key identifier: DF:03:7F:EA:C5:5C:C2:AC:90:B4:70:1E:08:37:82:2E:80:5B:16:E9
Authority key identifier: 45:61:7D:2E:08:63:58:DD:A7:BD:B0:DC:46:6C:A1:C8:6E:D4:FE:CA
Certificate issuer: /CN=45617d2e086358dda7bdb0dc466ca1c86ed4feca
Certificate serial: 019F927EDC74D86C4A80241DF04097AD71D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
Manifest number: 195B
Signing time: Fri 24 Jul 2026 05:00:15 +0000
Manifest this update: Fri 24 Jul 2026 05:00:15 +0000
Manifest next update: Sat 25 Jul 2026 05:00:15 +0000
Files and hashes: 1: 7WMHMRqYOCVJJOdVZn2toCGJ2Gg.roa (hash: u4kYKOpJoWTw0MlXSHwcNaxRXss2R6FxZn1Z49E09Go=)
2: RWF9LghjWN2nvbDcRmyhyG7U_so.crl (hash: RmlRAdnI4HSxN8aY3eplMS5Ras/AfsHpVENy16a2acw=)
3: Y9TiWW63huz2Y3RHyUrV0t01KvA.roa (hash: rNdERlf12PuGe5Ze8mFCZtIt+e3TVhdioA/m3kjwSCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7e:dc:74:d8:6c:4a:80:24:1d:f0:40:97:ad:71:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45617d2e086358dda7bdb0dc466ca1c86ed4feca
Validity
Not Before: Jul 24 05:00:15 2026 GMT
Not After : Jul 25 05:00:15 2026 GMT
Subject: CN=df037feac55cc2ac90b4701e0837822e805b16e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1f:85:a8:dd:a3:d3:17:e5:ae:43:6d:80:88:
0d:32:8f:c8:c2:de:de:74:3e:a0:cc:d8:cf:15:b2:
4e:8d:48:ab:d8:88:de:20:a5:87:46:3d:e4:26:98:
68:6c:82:65:6b:d8:4c:09:4f:42:ab:cf:d2:ed:a5:
bf:5d:3e:5d:83:e8:00:dc:0c:43:94:92:05:81:23:
7b:1a:ac:12:73:cf:87:0e:dc:39:fa:27:35:13:2a:
09:e3:6f:0d:6b:6a:cf:b6:ec:c9:d5:c6:70:f8:2f:
b7:c5:4c:20:a7:02:be:1d:f4:49:74:49:b4:e5:87:
b4:56:9d:19:54:85:c3:c4:92:41:08:39:70:08:b8:
6d:42:c6:ea:cf:1e:e0:71:0c:0c:47:67:3f:c8:ab:
2b:4d:d6:13:93:4d:7a:5c:39:9f:2e:c2:5a:a3:e9:
21:d9:1d:e1:08:b6:a6:8e:8f:9b:75:d4:21:54:c0:
b8:a3:d2:cd:c6:98:7d:57:52:7f:f9:33:21:66:52:
a8:68:5d:5b:50:36:c9:11:c6:7b:dc:91:83:d0:11:
61:b9:a4:31:e6:c7:35:a3:34:21:55:ab:50:12:8b:
99:7a:6c:3a:cd:04:56:19:1c:cd:16:ee:14:61:56:
7d:cf:22:da:cc:ca:67:88:8f:24:28:d8:9c:1e:ac:
d4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:03:7F:EA:C5:5C:C2:AC:90:B4:70:1E:08:37:82:2E:80:5B:16:E9
X509v3 Authority Key Identifier:
keyid:45:61:7D:2E:08:63:58:DD:A7:BD:B0:DC:46:6C:A1:C8:6E:D4:FE:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e3:49:1e:21:b7:4d:7c:6b:51:b4:03:bd:81:c9:d3:15:e2:
74:df:49:c9:a1:12:50:d8:6e:68:01:d7:82:2e:de:11:5d:61:
34:f6:68:15:9f:3a:3f:cb:69:ba:61:47:c5:ac:be:cb:49:bf:
bd:a4:aa:61:01:56:93:c2:61:12:fa:d0:65:0f:43:43:d9:c7:
34:c9:ea:79:9c:26:9a:2d:cd:be:b2:bc:8c:95:9d:05:0e:c3:
a6:52:76:fe:e9:4d:fd:cb:a7:9d:07:7b:23:61:5e:7e:57:ec:
f9:72:14:10:6c:90:3c:e8:3b:63:ec:fd:33:68:a4:cc:a0:69:
00:d7:aa:ca:4b:ea:5c:a1:f0:31:19:9f:8b:10:3f:fc:d0:79:
a4:71:e6:f1:90:96:bd:06:a5:7e:ac:36:e0:a2:03:48:eb:d1:
21:a9:7d:aa:fb:d0:23:fe:e7:d7:41:96:06:42:ba:65:dc:23:
70:a0:c4:64:4c:aa:d1:5b:68:a9:a2:2d:c4:9c:59:18:81:22:
e6:75:ef:14:71:18:9f:92:d6:d9:75:5b:8e:fa:5c:59:8e:77:
11:1a:2c:24:ae:cd:1c:48:1c:8f:fc:2e:a6:bf:65:4c:42:bc:
75:e6:ee:7b:76:d0:18:b2:74:55:11:c6:77:0d:82:f0:b1:f3:
59:84:f1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:15:27 2026 by rpki-client