Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
File: v4CafmyhTQoal2Zz4DGeNOlW7T0.mft (raw, json)
Hash identifier: HIRX6yHIyrgkcpvSAvVio0tO4q9EVOvdyL+XvO6xvWs=
Subject key identifier: 07:F9:25:E5:03:9A:51:87:00:8D:8D:DB:66:0D:2C:9F:8F:27:54:0F
Authority key identifier: BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D
Certificate issuer: /CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d
Certificate serial: 019F91DA928E8A71E72C925744354A6C984E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
Manifest number: 19D0
Signing time: Fri 24 Jul 2026 02:00:48 +0000
Manifest this update: Fri 24 Jul 2026 02:00:48 +0000
Manifest next update: Sat 25 Jul 2026 02:00:48 +0000
Files and hashes: 1: 0531BAkLXZV67nncfLvNCkjbh-k.roa (hash: euvg4/4Sr2jxjMgLytVs8+6OJsRY0QQOvsQOdksVnGQ=)
2: MgSoiC6Hu1yTUAZdbU-vK0dVtuc.roa (hash: a2ZSZdWNOxousuGf0RH1BivI79B+5I59lCuIYIMOr3Y=)
3: S0e9H4nYj-dsFcnpYcONEEZPd4E.roa (hash: NU7H83v507Zrj9FWzAhWcvmD14bF+kjt08VtHrtE1qY=)
4: rN2UtVdj6caj6yMxQCrHsSKZMvI.roa (hash: Z3x5j+qIaBAKVKD7voN6LPA49rIP+QJqgn0Mulf73dQ=)
5: v4CafmyhTQoal2Zz4DGeNOlW7T0.crl (hash: a2qR2lXMv4IO/QCIQfayOhernE+kL3YKAu/SLJegJ34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:92:8e:8a:71:e7:2c:92:57:44:35:4a:6c:98:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d
Validity
Not Before: Jul 24 02:00:48 2026 GMT
Not After : Jul 25 02:00:48 2026 GMT
Subject: CN=07f925e5039a5187008d8ddb660d2c9f8f27540f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4d:80:3a:6c:29:c4:1c:ba:1f:9e:1a:e2:40:
f5:9b:66:e4:20:ae:d7:2b:fe:7f:f2:c4:b4:39:42:
62:f2:58:de:bb:7f:17:d7:8f:33:99:f5:cd:16:33:
bc:65:54:ad:16:1d:35:5b:3c:36:01:58:6c:eb:61:
60:d9:fe:08:df:3e:40:56:ad:25:d5:d3:cd:f3:fa:
a0:d8:ae:82:c2:11:aa:52:03:59:9b:3b:aa:70:8f:
79:be:a6:8e:9b:b5:80:4b:62:64:85:ef:03:4b:a6:
1d:15:cc:ef:bc:91:c5:f5:15:60:54:21:e9:9a:96:
4a:f5:e7:1e:62:52:bd:89:10:ec:69:ec:41:a0:fc:
f0:7e:03:b0:9e:1a:b8:3c:60:02:23:74:e5:aa:7f:
d6:26:43:5d:3f:58:45:b9:d9:d8:f0:c6:a5:3a:d9:
6b:4a:0d:14:fb:55:92:08:3d:1d:c9:35:ba:41:32:
98:a3:b2:4b:4f:63:5e:ce:33:27:06:28:40:16:5d:
67:26:93:fe:95:db:3e:97:4b:cf:88:07:fd:9c:e1:
6f:6c:aa:61:76:6f:fd:43:0e:c1:67:1e:d6:e6:d4:
73:5e:df:56:77:15:23:d9:2a:21:c2:db:a4:0d:76:
71:aa:48:b1:77:8e:de:d4:bd:6b:bc:73:e0:6c:d9:
06:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F9:25:E5:03:9A:51:87:00:8D:8D:DB:66:0D:2C:9F:8F:27:54:0F
X509v3 Authority Key Identifier:
keyid:BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b2:1d:3d:28:6d:7d:24:51:ac:17:17:90:25:ec:90:f4:0f:
fa:77:0b:eb:72:8b:2f:b1:00:ec:4a:79:ed:57:71:31:3c:bf:
55:e2:26:83:87:b6:55:69:ef:6c:da:ba:03:82:7e:07:fc:ca:
c6:a1:4a:94:d3:67:39:c8:10:ae:c8:1f:9d:0c:82:4a:e7:a4:
af:0b:2f:6b:c5:fd:8b:fd:ac:93:6b:1a:0a:33:b5:83:16:0c:
08:fe:5b:6a:d0:38:48:bd:1c:60:99:40:ac:27:78:57:59:5f:
14:74:85:c9:82:7b:9a:42:47:c0:72:d5:59:54:f2:19:0b:a9:
1f:09:fc:24:59:68:72:3a:ce:24:9e:c5:be:15:0d:35:c4:1c:
00:64:52:ea:13:7e:2b:4d:28:6e:73:be:46:4c:8d:f7:d9:4f:
9c:21:df:20:92:a3:4a:92:cd:95:6f:b2:bd:bb:45:05:dd:12:
a7:b7:0e:a0:94:d1:3a:bd:63:14:3a:1f:3b:bf:13:7e:e5:d5:
f5:34:22:fb:ee:eb:8b:58:7b:0a:f2:20:bc:4e:21:8d:50:8d:
7e:6a:be:43:66:2d:25:35:21:a7:89:92:98:f1:1c:9a:32:b5:
f5:51:6f:4c:5b:9d:a1:fb:ac:c5:45:64:14:fd:1b:bb:87:ae:
3e:6d:c6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:39:51 2026 by rpki-client