Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
File: RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft (raw, json)
Hash identifier: xauxZ/Iir01l4GU+tMyjb/7hu2mBenZEexPsBLryD4k=
Subject key identifier: 43:A4:C7:E1:73:2E:99:25:C6:DC:49:D7:4A:EB:55:2F:3B:77:6A:49
Authority key identifier: 45:D3:4F:D0:48:B5:97:B3:E5:F7:DA:89:DF:E6:46:57:69:7E:8E:E3
Certificate issuer: /CN=45d34fd048b597b3e5f7da89dfe64657697e8ee3
Certificate serial: 019F90C79E2A9C8CC78D2B864B481438AB0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
Manifest number: 04D1
Signing time: Thu 23 Jul 2026 21:00:29 +0000
Manifest this update: Thu 23 Jul 2026 21:00:29 +0000
Manifest next update: Fri 24 Jul 2026 21:00:29 +0000
Files and hashes: 1: BWVL9f-KpOOHJHITcd_zmQga4BM.roa (hash: 16slF0zkT/3GuOWybhDOTweAZ519QDUn0ORtD9/qMi4=)
2: RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl (hash: QzhltgLliKL4+CHfUkgmG0D5gKhjRs+cUmwMFXdgG7E=)
3: wFIGK-hJfwnzYHOy-0zpMlYIwX8.roa (hash: ijX/47c/1yaEzAjtMYS0nchNRSTG2HHJG2gdZxBcrMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:9e:2a:9c:8c:c7:8d:2b:86:4b:48:14:38:ab:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45d34fd048b597b3e5f7da89dfe64657697e8ee3
Validity
Not Before: Jul 23 21:00:29 2026 GMT
Not After : Jul 24 21:00:29 2026 GMT
Subject: CN=43a4c7e1732e9925c6dc49d74aeb552f3b776a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e5:14:51:aa:54:79:ff:b4:da:78:99:98:f6:
aa:2a:38:a6:8c:a2:d4:e9:36:cc:56:43:04:d2:b0:
c3:3d:2c:44:4b:1c:dc:dd:2c:ff:cb:72:b1:c2:1c:
31:4e:01:09:c2:1a:57:62:82:93:42:8f:fd:4d:8e:
d9:a5:9e:78:19:c9:e8:31:77:c1:10:55:08:d5:16:
8e:27:d1:08:af:74:b7:0c:c5:93:5b:37:45:36:3f:
16:65:84:67:1d:5f:bf:51:ae:0b:83:c5:e8:9b:6a:
e8:9a:e3:e3:bb:88:f3:b3:53:d0:dc:6f:04:d2:4d:
e6:69:26:3d:cc:a0:34:07:c7:ff:b9:5a:c7:b2:3e:
56:5e:b5:77:8d:e1:e6:1d:90:04:be:c7:55:f5:dd:
fd:aa:4c:d9:09:eb:f9:72:aa:78:8b:91:c6:72:50:
45:61:e2:c1:66:8e:8d:ce:99:d4:72:6e:6b:77:0c:
90:40:94:b9:61:91:8a:e9:b4:d7:a2:bf:08:b2:bf:
c1:a4:78:42:d0:af:32:a2:28:ee:aa:e8:dc:20:d1:
3e:b7:35:e1:c1:0e:b1:27:c3:74:cd:c1:b3:ab:21:
94:9f:1d:4f:c1:84:9b:da:65:93:07:9e:c9:c0:41:
89:b0:6f:d3:f0:7c:9d:2a:4b:b5:a2:2b:b3:37:3d:
f9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A4:C7:E1:73:2E:99:25:C6:DC:49:D7:4A:EB:55:2F:3B:77:6A:49
X509v3 Authority Key Identifier:
keyid:45:D3:4F:D0:48:B5:97:B3:E5:F7:DA:89:DF:E6:46:57:69:7E:8E:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:9f:a5:87:37:72:fd:f5:e9:d1:94:d2:c6:64:41:6a:a3:85:
c7:39:f3:8e:88:13:cc:57:87:32:69:d9:af:fc:16:f7:1a:ed:
f2:cd:62:8b:98:ca:45:8f:71:28:d6:f6:d6:32:d0:27:c5:3d:
28:b9:a7:44:29:fb:aa:dc:ee:02:41:d0:2c:a6:f6:3d:41:97:
c5:d1:33:a4:ea:16:82:3b:2e:a5:1b:db:67:1c:6d:b1:36:0c:
1e:e3:76:f9:e4:ff:70:47:d5:7d:9a:4a:53:ef:47:55:18:1d:
84:fd:a2:fc:bc:70:25:9d:83:13:cd:06:e3:5a:68:66:36:f5:
24:cc:30:55:fb:44:58:c2:e1:b5:f6:2d:64:1a:81:e9:8e:88:
5d:e2:e7:74:db:28:70:0c:18:0e:9e:11:19:ea:24:69:f4:d3:
5e:c6:4f:be:df:43:a1:68:e3:17:a1:41:05:85:fe:7d:89:4e:
d5:ba:04:e0:57:a7:c0:61:21:83:74:8f:5d:1e:39:a5:e4:db:
f5:c3:64:1e:35:63:87:c8:f7:05:8f:6d:ef:41:7b:c6:03:01:
53:51:15:67:a1:7b:52:93:2f:05:7d:82:fa:33:5d:14:8f:c3:
9d:41:89:40:4a:d9:2d:90:18:ad:7d:bb:cb:9d:b1:20:8e:8b:
f7:7e:1b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:32:40 2026 by rpki-client