Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.mft
File: D3jqRswh1F7WEmjUqfVnMsheIVA.mft (raw, json)
Hash identifier: ncQBxobhRUoQ9e9ZCofyhG86/mjROdL34lOv8y5uchI=
Subject key identifier: BF:EA:60:89:50:CC:FC:E7:DB:92:F6:B5:18:D9:8D:99:20:93:D8:8A
Authority key identifier: 0F:78:EA:46:CC:21:D4:5E:D6:12:68:D4:A9:F5:67:32:C8:5E:21:50
Certificate issuer: /CN=0f78ea46cc21d45ed61268d4a9f56732c85e2150
Certificate serial: 019F905A8B475A041365B02F860467E8156A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3jqRswh1F7WEmjUqfVnMsheIVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.mft
Manifest number: 19C5
Signing time: Thu 23 Jul 2026 19:01:20 +0000
Manifest this update: Thu 23 Jul 2026 19:01:20 +0000
Manifest next update: Fri 24 Jul 2026 19:01:20 +0000
Files and hashes: 1: D3jqRswh1F7WEmjUqfVnMsheIVA.crl (hash: q1GjG+UOreMzlxvxmJHSMH6c2C7jLOjtw5hI2get4h8=)
2: hFTnWGImSrItjvTZMgv5Y6qcHWI.roa (hash: pZbkXKYC4cfW4J3LrFAYotHKXZiiOIa/hV0bOys/6DA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3jqRswh1F7WEmjUqfVnMsheIVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:8b:47:5a:04:13:65:b0:2f:86:04:67:e8:15:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f78ea46cc21d45ed61268d4a9f56732c85e2150
Validity
Not Before: Jul 23 19:01:20 2026 GMT
Not After : Jul 24 19:01:20 2026 GMT
Subject: CN=bfea608950ccfce7db92f6b518d98d992093d88a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f8:15:aa:81:14:ca:52:af:8f:3e:29:ad:1a:
e1:b7:d6:c1:60:96:9e:6b:4d:66:a0:c1:a8:0d:76:
81:c1:dc:ec:d1:b9:a0:4d:af:5b:8b:c5:61:6f:87:
12:a1:41:03:c1:06:bc:7f:68:8a:11:5f:e1:31:10:
77:52:3d:27:ff:ba:7d:85:a8:fc:2d:1b:65:28:e1:
86:89:ad:6a:81:da:0d:62:cd:82:53:0c:1b:7a:e9:
49:dd:b5:84:5b:ed:e7:b0:f7:a9:0d:d5:4b:b6:a2:
dc:71:a6:b5:5d:b1:79:44:b0:cf:4d:66:05:cb:bc:
ef:c4:94:62:4c:53:29:24:7d:5a:5a:cd:cc:df:69:
1e:8c:8e:cd:4b:d6:cb:6c:ea:3f:c9:ea:a8:39:ba:
0e:de:ba:dd:6b:c6:21:94:bf:f2:69:af:c6:44:8e:
8f:6b:cd:dc:d3:03:e3:18:2e:f3:74:e4:60:7c:a6:
28:c3:b1:59:4b:36:4c:4d:62:ef:7c:93:5f:92:89:
03:c0:73:31:71:a6:85:19:c8:5b:95:09:ce:bc:38:
2b:3a:77:ac:57:6d:d1:86:d6:c8:e5:70:59:e1:bb:
1f:c5:e4:2c:70:3f:44:fa:52:54:e7:d5:75:84:87:
fe:48:1a:d4:bf:ca:e7:0b:36:5d:81:de:1c:c2:0d:
81:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:EA:60:89:50:CC:FC:E7:DB:92:F6:B5:18:D9:8D:99:20:93:D8:8A
X509v3 Authority Key Identifier:
keyid:0F:78:EA:46:CC:21:D4:5E:D6:12:68:D4:A9:F5:67:32:C8:5E:21:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3jqRswh1F7WEmjUqfVnMsheIVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e9:f5:9b:a4:52:2a:95:6d:fa:cd:70:2e:89:4c:c8:bd:39:
79:0b:18:c6:62:39:4b:af:59:69:c2:94:c6:87:43:97:90:64:
c9:8f:01:fc:eb:d7:7b:3d:e9:3f:43:4e:c0:79:12:db:a4:2b:
17:85:29:73:f4:9f:f2:d6:03:3e:da:dd:a5:6d:e7:3d:7f:a4:
34:46:6b:fa:f5:75:16:25:af:56:ed:00:b1:a1:12:56:9f:4b:
05:6f:e7:8a:97:1d:94:92:16:10:db:32:b3:e2:61:27:ec:b0:
2a:90:e9:a4:66:5f:6e:74:5f:bd:e6:3f:a8:84:05:ad:e0:9d:
b5:87:6c:e4:05:83:65:79:58:17:3f:70:ea:5a:f4:ea:b0:cb:
f6:92:e5:db:46:4b:28:14:c1:f8:6b:83:02:6b:d7:c9:4f:63:
13:f8:da:21:73:ac:13:ab:43:61:ad:54:29:75:ab:8e:a0:1e:
d2:9a:d9:af:2d:b0:31:5e:e9:d0:a7:0f:1e:a4:ce:d9:fe:30:
ca:5d:99:a1:25:78:28:2c:03:a3:aa:98:e4:ea:bf:31:d7:f2:
6b:2d:81:76:9d:8d:b7:ea:d0:a8:7e:ff:5a:09:1c:45:91:93:
55:48:86:49:12:93:d3:be:ec:a2:26:f4:85:0c:1a:65:34:10:
85:86:82:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:39:00 2026 by rpki-client