Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
File: roP3h5wsdKEWUrXgivZKrJCACwQ.mft (raw, json)
Hash identifier: hXC+zt15uaPYwlfPZ31hI7ncp9Cbnppyc87VhTWtSxY=
Subject key identifier: 50:CE:90:A7:71:AB:81:B8:3B:65:D1:6B:84:2B:6E:97:97:4F:0A:05
Authority key identifier: AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
Certificate issuer: /CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Certificate serial: 019F8E6BCE15C9AD845E79C90773A4F907FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
Manifest number: 19C6
Signing time: Thu 23 Jul 2026 10:00:57 +0000
Manifest this update: Thu 23 Jul 2026 10:00:57 +0000
Manifest next update: Fri 24 Jul 2026 10:00:57 +0000
Files and hashes: 1: FbBfmY8BU8VigyDn7YgxLgSnlUs.roa (hash: tHVNex4gUdJAzQ5EQ6S1mMwVxpmtkwTF/khuntIVx8c=)
2: _8o003HukJtANidMUuNfF8h2iro.roa (hash: RD6ivkH2YAIVnq+oPiaSNKTUKGIT1SfwklfHbiuRs50=)
3: roP3h5wsdKEWUrXgivZKrJCACwQ.crl (hash: Irxasf+bC2xFY8YsICEXiQA3EK3qwfovnA5gh2RAZX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:6b:ce:15:c9:ad:84:5e:79:c9:07:73:a4:f9:07:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Validity
Not Before: Jul 23 10:00:57 2026 GMT
Not After : Jul 24 10:00:57 2026 GMT
Subject: CN=50ce90a771ab81b83b65d16b842b6e97974f0a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8e:e5:9c:fe:35:2a:a8:39:9f:8e:41:fe:0d:
fc:72:c9:46:90:38:26:3b:62:b3:ee:d7:5c:be:02:
04:ee:f0:4b:b9:e9:1e:13:f3:c2:a3:7e:9a:44:7c:
a0:85:83:8b:f3:c9:ab:26:e2:f6:17:d3:e2:64:27:
dd:3c:9a:0c:a9:23:d9:82:8f:4a:b5:8d:e1:5f:1a:
67:e5:a3:89:75:72:49:89:36:c3:76:4c:61:02:31:
25:6f:c4:9f:b1:33:cb:bb:1e:02:a6:4a:4c:b5:f7:
2d:a9:b1:d2:80:68:7f:8d:8c:37:8b:d5:36:ec:18:
62:8e:2a:7c:cb:ff:53:fb:28:c7:d2:28:0a:62:04:
bb:d9:f9:8f:19:a6:d7:65:3f:b0:aa:52:d0:54:55:
7c:65:92:89:9e:e7:b1:2d:16:34:fd:44:f1:6b:51:
1f:3e:94:3c:2e:95:af:ea:70:c9:ef:b9:9f:15:3f:
fc:85:99:0a:be:3e:a0:b9:69:87:ba:6e:82:7a:3d:
3a:b6:8b:f7:7c:84:90:05:b4:9c:e1:cf:9f:9e:6c:
14:4c:c5:80:21:27:5c:c6:c7:19:6f:6a:6a:d6:92:
59:7c:1b:95:ef:04:80:e0:0f:cd:11:c2:86:a2:0e:
06:da:75:cd:2d:c7:a8:18:e5:0a:e3:12:a2:28:ed:
e6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:CE:90:A7:71:AB:81:B8:3B:65:D1:6B:84:2B:6E:97:97:4F:0A:05
X509v3 Authority Key Identifier:
keyid:AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a7:ff:63:4b:c1:26:f9:62:b9:33:57:99:fe:1b:6e:97:6f:
84:14:34:62:5d:d6:5f:ed:2b:b7:06:ff:5d:1d:57:25:e3:9a:
b2:ed:cd:48:26:03:79:12:88:1e:b2:f1:c6:ba:56:71:5e:b8:
4b:e4:a4:5b:15:49:11:13:1c:83:2f:49:66:26:b7:a9:dd:eb:
dc:67:fb:b6:9b:a9:9a:d5:84:33:13:a5:a6:7c:52:85:4b:71:
f2:d8:85:92:52:12:12:da:bd:8d:3b:b4:88:82:dd:81:43:66:
e2:7c:9b:4a:c0:b7:be:b5:50:50:8b:9d:47:46:5e:e2:6a:7f:
f0:d3:73:5d:6d:ed:88:17:0c:94:b9:fd:6e:42:1d:8a:9a:57:
52:61:7a:c4:c5:87:9d:a5:e6:b3:51:f6:dd:f2:3d:a0:32:73:
93:33:c2:38:f6:11:96:36:85:fe:e8:a0:93:f1:85:c9:8b:2a:
ce:61:ef:08:f6:58:d5:8f:05:e0:55:bf:42:dc:7c:1c:ee:0a:
21:0b:d4:84:03:46:f2:c0:a9:c4:94:9a:14:05:db:7e:22:31:
e7:54:e5:3d:10:52:c6:00:6f:7e:a0:6d:18:4f:7c:08:97:77:
5e:c3:83:f0:59:ed:5b:f4:7c:6c:94:b1:89:05:c4:ff:d4:88:
e6:bb:41:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:38 2026 by rpki-client