Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
File: mfyNwqfBufMroZV_9JLcC6TyYP8.mft (raw, json)
Hash identifier: avzvHOxRX3+PU3iWz9pAMPcPE2piMkWzxgM/cE6NEKs=
Subject key identifier: 79:32:40:9E:7D:D1:3C:A2:20:AF:A8:86:52:4E:92:F6:B2:46:1F:38
Authority key identifier: 99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF
Certificate issuer: /CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff
Certificate serial: 019F9323C68C3C35619B7D16DF1DC4E6B5F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
Manifest number: 0430
Signing time: Fri 24 Jul 2026 08:00:23 +0000
Manifest this update: Fri 24 Jul 2026 08:00:23 +0000
Manifest next update: Sat 25 Jul 2026 08:00:23 +0000
Files and hashes: 1: 7iabnlFmeCBBjsLFJN99I8--_-4.roa (hash: XEo4P0carZV4gE6HMO4BcJUELgS7un1lJ1bRLna274A=)
2: mfyNwqfBufMroZV_9JLcC6TyYP8.crl (hash: iCqWcikQXaStO5dmUxSdh8A8DU/Hqjpk+G+Z0+vWIWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:c6:8c:3c:35:61:9b:7d:16:df:1d:c4:e6:b5:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff
Validity
Not Before: Jul 24 08:00:23 2026 GMT
Not After : Jul 25 08:00:23 2026 GMT
Subject: CN=7932409e7dd13ca220afa886524e92f6b2461f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:00:21:bf:3e:51:0a:91:0c:3b:dc:9f:83:16:
25:ca:9c:c9:d3:f7:53:fe:c8:4e:42:4f:34:8c:e5:
27:8d:b6:90:04:3a:be:c6:db:e7:7a:f1:e5:f0:17:
1e:3c:3a:2f:1f:a8:1f:65:ba:78:4d:b7:cf:a5:fe:
e3:61:2d:10:5f:4a:ab:a9:d1:f8:5a:a9:2e:4c:40:
a3:d2:4a:93:f3:0c:64:d8:2f:28:0d:f6:5a:fd:c0:
90:b3:7f:ab:d4:26:b6:be:fb:c9:62:92:3f:80:ff:
5d:24:e9:cc:75:91:a0:1e:05:5f:a2:9c:e0:d0:cc:
35:a2:30:2c:6e:ed:21:7f:86:c1:7c:e9:c0:06:ca:
0e:06:8b:3d:be:0f:6e:67:6e:ad:82:f9:1f:d2:7a:
c2:97:fe:ff:03:89:1a:22:68:e1:6b:f5:6f:e0:d6:
64:32:98:5c:7c:88:93:96:b6:b2:92:f8:d4:43:2a:
76:5f:17:f2:2f:6c:df:c4:b0:7c:a0:16:10:89:79:
25:e3:10:de:60:30:5b:5f:10:45:97:0b:8c:14:03:
4d:ec:87:5d:ff:7b:90:18:08:06:f1:f3:bf:ae:6e:
0c:8d:58:5b:60:a8:72:52:e4:13:45:ce:30:a6:3e:
a6:92:39:4e:b8:ee:80:5f:b6:b8:ba:44:c9:e6:2b:
40:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:32:40:9E:7D:D1:3C:A2:20:AF:A8:86:52:4E:92:F6:B2:46:1F:38
X509v3 Authority Key Identifier:
keyid:99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:98:80:04:62:e1:34:63:7a:34:0f:1a:71:77:73:1b:56:4a:
6c:17:63:bb:01:fd:ad:17:49:90:dd:b9:4b:9e:13:7a:2d:d8:
36:43:d8:40:87:e8:42:e4:8f:ab:30:64:cd:8a:fe:f3:e8:78:
19:df:8f:cf:28:2f:4e:a0:96:66:2d:c7:08:24:ce:7b:cd:52:
eb:b5:a6:55:5b:1b:28:59:7d:4b:ec:99:6a:a6:ed:f4:05:f2:
e0:90:69:ff:86:ae:f4:76:27:08:44:ea:3f:f2:16:e0:cb:0f:
16:74:17:ea:59:c3:e2:88:99:f7:9b:bc:b6:d4:f7:56:7e:e2:
2b:f7:7d:d7:f1:a3:bc:db:5d:8f:cf:20:5f:e0:3a:b9:e6:f2:
8b:4f:83:2b:cf:69:a3:f8:4f:96:6c:ee:84:ba:79:a4:20:f2:
b9:1e:e6:a5:d3:65:4f:56:98:7f:3f:59:b8:bf:1a:e5:55:1a:
e8:34:f6:0e:9e:02:6b:a4:68:1d:82:ff:c8:51:d3:9e:75:1b:
a1:a4:84:a9:c0:a1:ad:6c:ae:60:ef:16:31:1c:75:13:5c:47:
54:2b:c9:92:c7:fc:9f:c8:bd:62:b3:82:49:ff:4e:31:db:04:
60:c8:dd:ec:04:03:a1:7c:a0:41:69:cb:32:57:a5:b3:52:08:
87:d0:e1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:45:45 2026 by rpki-client