Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
File: V0zKiZ71v0I38Pa90XeSIbIAUvM.mft (raw, json)
Hash identifier: 5USW8ekl7HQsM+otD4PFDOM5U5W6AwQZeUzfwsvu5Cg=
Subject key identifier: 16:C7:D7:44:DB:E7:8C:61:E8:22:54:B0:EA:68:68:B9:85:31:23:DA
Authority key identifier: 57:4C:CA:89:9E:F5:BF:42:37:F0:F6:BD:D1:77:92:21:B2:00:52:F3
Certificate issuer: /CN=574cca899ef5bf4237f0f6bdd1779221b20052f3
Certificate serial: 019F8FEC8CD7B6A4883D787B38813F6145C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
Manifest number: 19CF
Signing time: Thu 23 Jul 2026 17:01:12 +0000
Manifest this update: Thu 23 Jul 2026 17:01:12 +0000
Manifest next update: Fri 24 Jul 2026 17:01:12 +0000
Files and hashes: 1: LEuYoFCXhInzPdNgWnas4QB6xcE.asa (hash: 9rbkn1NHCcTS6LE4JL5/e1dtTrb/DOIhiwih8TaALY0=)
2: V0zKiZ71v0I38Pa90XeSIbIAUvM.crl (hash: ZgGo6MkzNzOGeOt28xsK9yX1IOW8TKy9/Wf2oSIQaiE=)
3: hUSppmm3TUDUe9c3zKVYGDhp5FI.roa (hash: wajskwcklMoTdKJT16kOKBQL/f8FpnT58RrghPxKbEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:8c:d7:b6:a4:88:3d:78:7b:38:81:3f:61:45:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=574cca899ef5bf4237f0f6bdd1779221b20052f3
Validity
Not Before: Jul 23 17:01:12 2026 GMT
Not After : Jul 24 17:01:12 2026 GMT
Subject: CN=16c7d744dbe78c61e82254b0ea6868b9853123da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:62:63:2c:82:50:22:0b:ff:f8:3b:0e:87:95:
85:c5:07:c4:6a:c8:83:8e:7f:f7:68:07:da:fa:95:
14:c4:78:bf:6b:7e:95:92:ce:49:3a:ce:5d:cf:fe:
ec:99:c6:8e:ae:e3:ba:a1:20:2e:6f:1d:d1:4d:68:
b9:67:50:95:14:9c:70:12:70:39:6d:42:9b:54:b5:
1a:cd:d8:4c:91:6c:c3:f2:8c:30:9a:7b:4e:0f:d8:
44:f7:e7:c5:a8:f0:72:00:53:3e:55:e6:da:6f:6f:
18:8b:8f:05:0a:39:25:b5:bc:da:fe:73:55:d5:54:
09:de:91:62:e6:4b:56:4f:0d:45:69:8a:1c:a4:b3:
6b:10:79:20:a4:15:cb:e0:db:c6:2a:9d:f2:47:e8:
5e:25:e3:99:81:f6:b6:f1:2c:18:69:ff:27:72:1b:
08:4b:61:f7:c8:f1:c5:40:27:f9:64:d5:01:5d:00:
c9:f6:99:68:c9:3a:f8:21:6c:02:90:c0:91:c7:a8:
9a:b9:7d:82:0b:70:40:c8:ce:44:5b:e2:61:27:03:
6d:d7:4d:d6:81:d2:f4:44:3d:e1:5f:65:33:e7:a4:
26:fc:31:98:11:85:43:c2:48:a5:b1:a2:e0:ee:9e:
d2:d4:31:1b:4d:4d:3c:20:fc:fa:94:68:72:39:8d:
69:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C7:D7:44:DB:E7:8C:61:E8:22:54:B0:EA:68:68:B9:85:31:23:DA
X509v3 Authority Key Identifier:
keyid:57:4C:CA:89:9E:F5:BF:42:37:F0:F6:BD:D1:77:92:21:B2:00:52:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ba:77:61:82:11:61:ec:d9:53:c7:cf:f0:65:f9:18:67:c5:
c3:5b:2e:d5:62:79:36:94:81:99:7e:b9:22:54:99:53:f2:fe:
73:a7:be:1e:09:f8:16:d0:a8:fa:6a:a1:fa:36:63:eb:25:bc:
c7:44:4d:b3:09:13:5f:4c:f4:a5:f1:bc:b3:1a:3b:2c:3e:68:
39:76:41:0c:00:f3:e6:4c:0f:2b:cf:25:a3:f0:21:88:15:9b:
0e:9a:65:50:b2:2a:86:8e:f9:88:e2:72:f8:2b:c5:78:ba:16:
ec:7a:e5:23:2f:64:56:e4:fc:68:1a:cf:f0:f4:c0:10:4c:ee:
7c:20:73:c3:3a:2b:40:5b:de:49:c0:d8:35:bf:5e:1a:61:8a:
04:d8:d1:31:b8:ab:91:2c:8e:c0:fc:d7:8a:1f:27:f8:02:09:
d5:87:2a:56:94:8e:df:23:ad:07:f5:5d:d0:f3:eb:fa:26:21:
5f:b8:36:9f:f5:c2:9d:3d:b4:18:41:28:db:63:f3:16:ee:7c:
f2:1f:e0:b4:a9:59:a3:54:e8:b4:7f:73:a7:b1:60:ea:43:15:
2e:b1:97:53:57:91:eb:64:88:fb:46:34:f2:a9:04:d8:e7:af:
3f:b1:38:af:4c:a0:57:8f:9b:51:61:af:dc:57:5f:f1:5f:68:
3b:24:1f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:08:40 2026 by rpki-client