Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
File: 21m85hup0qDjVb4B8TQbjfdq69s.mft (raw, json)
Hash identifier: 71fIZnjlwlqt4bE8uavzB0WahvXSFBewU2ygru+RxVM=
Subject key identifier: 27:A3:DC:EA:49:07:27:34:A2:2A:79:34:98:77:5D:06:E6:A5:51:9F
Authority key identifier: DB:59:BC:E6:1B:A9:D2:A0:E3:55:BE:01:F1:34:1B:8D:F7:6A:EB:DB
Certificate issuer: /CN=db59bce61ba9d2a0e355be01f1341b8df76aebdb
Certificate serial: 019F90C78D3F9EF770C7645355F24CF7DB10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 21:00:24 +0000
Manifest this update: Thu 23 Jul 2026 21:00:24 +0000
Manifest next update: Fri 24 Jul 2026 21:00:24 +0000
Files and hashes: 1: 21m85hup0qDjVb4B8TQbjfdq69s.crl (hash: vp6/PkgFj6IS/+ws80lvPe8ks9m3EiC69tLe77DMO2Y=)
2: 61huzXEr5q5M8J__iIN7IjunhKg.roa (hash: cj477SS4T7qNzSNkI+8mGSK4iNQUtTpYpphXIshKx+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:8d:3f:9e:f7:70:c7:64:53:55:f2:4c:f7:db:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db59bce61ba9d2a0e355be01f1341b8df76aebdb
Validity
Not Before: Jul 23 21:00:24 2026 GMT
Not After : Jul 24 21:00:24 2026 GMT
Subject: CN=27a3dcea49072734a22a793498775d06e6a5519f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ea:02:90:2f:71:09:42:56:0a:54:9d:1d:d2:
ff:36:9f:56:72:d2:21:be:52:76:4e:8e:a8:1f:56:
62:23:f4:f8:fc:db:c0:ac:25:40:08:24:0b:61:3e:
6d:ed:1f:b1:04:ca:37:78:41:69:93:28:34:5f:ac:
c2:3b:6d:22:1f:25:c5:11:b0:b7:fe:e1:cb:9c:80:
d9:e7:9f:46:b1:99:71:bf:50:49:a9:85:16:4c:b0:
e8:2a:79:eb:57:93:18:91:dd:b3:26:cd:19:9b:b1:
8e:90:30:30:38:a3:8f:0f:24:bf:64:7f:07:70:f6:
3f:8a:0c:66:e0:36:43:0b:d5:63:ec:b6:47:c2:8f:
e0:19:32:0a:85:b2:c2:16:67:56:e0:72:87:1b:6e:
ea:41:78:3d:1e:a8:49:15:96:69:80:12:d1:04:8e:
8e:a8:b7:8e:73:9d:0e:1d:75:f6:66:32:2c:0c:9a:
29:57:bc:8c:7a:fd:8a:13:2a:46:35:bd:f9:df:99:
17:b5:59:1a:7b:06:a0:31:68:a3:83:ea:b5:41:d6:
45:e9:3e:6f:d3:54:d3:66:6c:8d:34:24:e5:cf:a4:
a0:4e:6d:29:93:65:bf:83:36:93:e4:a9:bd:dc:c5:
48:48:ff:2f:bb:e5:4a:0d:6c:36:a2:22:38:cb:4c:
fa:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A3:DC:EA:49:07:27:34:A2:2A:79:34:98:77:5D:06:E6:A5:51:9F
X509v3 Authority Key Identifier:
keyid:DB:59:BC:E6:1B:A9:D2:A0:E3:55:BE:01:F1:34:1B:8D:F7:6A:EB:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:1f:b3:fa:21:8d:0a:2e:a2:f9:8b:d9:2a:d7:78:c5:41:5b:
63:5d:4f:15:03:82:aa:43:da:5b:3b:ee:96:09:a5:ed:03:aa:
92:88:ce:70:ed:7c:fb:00:7c:7b:4c:78:df:a1:93:f0:f8:8b:
32:da:86:c2:29:82:68:2f:b2:d2:20:0e:d9:41:a1:be:09:09:
99:b3:24:93:0c:fe:f6:77:3a:83:de:fe:54:e6:10:2a:bb:b4:
2e:d8:74:c0:a8:9a:8f:f5:98:a3:72:e9:68:e6:fd:19:5c:b6:
99:b3:80:fb:e4:da:07:d1:5d:21:d4:05:62:c4:d4:ac:78:75:
57:13:8e:60:4f:d8:5f:ac:a6:d7:12:8d:f8:fe:e1:5d:57:18:
52:97:38:ce:ae:03:a7:4a:fb:6a:cd:aa:6c:90:7a:90:a8:27:
a2:58:db:b0:1f:a3:82:c6:94:66:d8:d7:70:bd:92:09:85:9d:
e0:dd:7f:95:09:93:78:ed:f4:16:4d:60:1d:41:ac:8e:78:21:
d7:b0:81:58:61:2c:08:dc:16:65:dc:28:9b:24:76:79:c0:9b:
70:07:de:7a:7a:6b:a9:1d:2b:b6:3c:ca:22:68:80:1a:9b:4f:
7d:7e:7b:32:d0:62:09:13:46:db:1d:1b:12:d7:a0:cc:0e:d6:
23:bb:8f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:39:09 2026 by rpki-client