Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
File: 2671wyvqS1TRfiQbXMyvB7wKjuk.mft (raw, json)
Hash identifier: Qdt4xc4CP/wZBzY1xXrJJAdRAd/CIyRTKNV545OSBeA=
Subject key identifier: 5C:8C:EC:97:79:E9:D8:41:CB:EB:65:18:74:7C:E1:D3:05:32:FB:85
Authority key identifier: DB:AE:F5:C3:2B:EA:4B:54:D1:7E:24:1B:5C:CC:AF:07:BC:0A:8E:E9
Certificate issuer: /CN=dbaef5c32bea4b54d17e241b5cccaf07bc0a8ee9
Certificate serial: 019F8FB53ABBC0F0BB31D2843015E30CA289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
Manifest number: 133F
Signing time: Thu 23 Jul 2026 16:00:46 +0000
Manifest this update: Thu 23 Jul 2026 16:00:46 +0000
Manifest next update: Fri 24 Jul 2026 16:00:46 +0000
Files and hashes: 1: 1-95gw9KACRY59GXkCu6E44De0Qk.roa (hash: iKh5qfmB78EvSPQTYq74QtU0CuU4qb/tMvQfB/d/g9c=)
2: 2671wyvqS1TRfiQbXMyvB7wKjuk.crl (hash: FK4hPSvJrRHTLzFKw9Q6fTfLojfDtestRkV+7kdDMFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:3a:bb:c0:f0:bb:31:d2:84:30:15:e3:0c:a2:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbaef5c32bea4b54d17e241b5cccaf07bc0a8ee9
Validity
Not Before: Jul 23 16:00:46 2026 GMT
Not After : Jul 24 16:00:46 2026 GMT
Subject: CN=5c8cec9779e9d841cbeb6518747ce1d30532fb85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e1:3f:1d:10:55:5c:e6:85:88:c5:b7:6e:dd:
0c:7f:02:c2:a7:7f:72:fc:b1:90:a2:91:ba:b9:8d:
39:57:5c:e7:fa:0f:2c:92:f3:a0:64:03:da:09:8d:
07:fb:a1:9e:35:a1:e8:d1:43:91:b8:e5:fd:72:00:
b0:8e:a3:a9:54:74:5c:bd:1c:dd:29:2d:df:7f:d4:
72:13:21:2b:36:a3:50:11:19:53:c9:14:ea:ba:82:
bd:3c:3b:04:02:4c:ef:51:e6:9d:d6:42:9f:c6:b4:
a0:82:9f:1d:02:c6:13:85:b6:51:6f:94:45:c1:c4:
52:d3:6d:de:2a:df:32:8b:c7:a1:1f:75:8a:90:da:
b3:ce:a4:74:62:e4:bc:ed:a4:fc:9a:fa:ba:dd:f0:
ae:57:38:e6:09:53:b6:ed:02:49:ef:53:5d:70:41:
b4:b9:37:7d:03:d7:22:14:de:6b:29:05:04:b6:49:
40:52:dc:04:8c:1e:18:61:50:31:99:35:5d:14:1b:
cb:ac:09:8e:8f:c5:d4:01:63:62:31:d4:88:a8:f6:
86:d4:2b:02:62:22:c2:79:8d:a6:f7:6c:1b:0a:c4:
0e:22:9e:a1:f6:4b:e1:22:30:45:33:47:91:11:c0:
c2:da:8d:dc:79:35:a5:c6:df:31:58:6d:90:f3:d8:
6b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8C:EC:97:79:E9:D8:41:CB:EB:65:18:74:7C:E1:D3:05:32:FB:85
X509v3 Authority Key Identifier:
keyid:DB:AE:F5:C3:2B:EA:4B:54:D1:7E:24:1B:5C:CC:AF:07:BC:0A:8E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:53:39:8c:4e:17:96:2e:26:08:ce:b1:13:af:a9:60:04:29:
40:9d:86:d8:83:07:0a:5e:36:32:d8:3e:d5:d7:b5:d0:26:1a:
ab:ae:dc:53:31:f7:35:53:2d:3a:89:1e:c2:f6:14:ac:46:00:
b1:e6:06:c7:6b:44:5d:5e:42:94:b2:ad:87:9a:79:8c:d7:85:
6b:e9:8d:46:f7:7b:65:9b:b0:fb:e1:d8:20:c3:43:54:a0:f5:
aa:b0:d8:3f:02:69:0b:8c:10:1d:91:d7:01:c7:ea:4a:5a:23:
80:c1:48:1c:d5:ac:39:47:14:d3:b1:d5:f9:e0:43:b1:5b:63:
7e:2c:76:20:4a:e1:df:61:1a:00:75:af:a3:dc:ef:88:5d:65:
6d:92:bf:0d:71:9c:f0:2c:1d:e6:a4:9d:37:83:5d:e8:f7:05:
72:89:84:dc:90:9b:db:ad:56:88:26:56:1f:67:02:97:4b:db:
45:f3:ad:ad:9d:f5:41:c4:7b:e4:f1:90:73:19:3f:9c:56:7d:
84:cd:98:85:a4:c1:e4:60:5b:4a:52:36:8b:92:3f:8a:66:fd:
29:2e:f6:12:41:6a:01:21:6c:a7:6e:a7:95:84:3f:8a:cb:ea:
21:4e:79:47:c0:90:84:79:3b:fe:64:38:44:49:76:c5:37:7a:
a8:e4:53:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PtTq7wPC7MdKEMBXjDKKJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYWVmNWMzMmJlYTRiNTRkMTdlMjQxYjVjY2NhZjA3YmMw
YThlZTkwHhcNMjYwNzIzMTYwMDQ2WhcNMjYwNzI0MTYwMDQ2WjAzMTEwLwYDVQQD
Eyg1YzhjZWM5Nzc5ZTlkODQxY2JlYjY1MTg3NDdjZTFkMzA1MzJmYjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuE/HRBVXOaFiMW3bt0MfwLCp39y
/LGQopG6uY05V1zn+g8skvOgZAPaCY0H+6GeNaHo0UORuOX9cgCwjqOpVHRcvRzd
KS3ff9RyEyErNqNQERlTyRTquoK9PDsEAkzvUead1kKfxrSggp8dAsYThbZRb5RF
wcRS023eKt8yi8ehH3WKkNqzzqR0YuS87aT8mvq63fCuVzjmCVO27QJJ71NdcEG0
uTd9A9ciFN5rKQUEtklAUtwEjB4YYVAxmTVdFBvLrAmOj8XUAWNiMdSIqPaG1CsC
YiLCeY2m92wbCsQOIp6h9kvhIjBFM0eREcDC2o3ceTWlxt8xWG2Q89hr2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyM7Jd56dhBy+tlGHR84dMFMvuFMB8GA1UdIwQY
MBaAFNuu9cMr6ktU0X4kG1zMrwe8Co7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjY3MXd5dnFTMVRSZmlRYlhNeXZCN3dLanVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9kZWU2NmYtNDVjYy00Y2I0LTlmYmIt
NjQyY2U2NzRmOTc0LzEvMjY3MXd5dnFTMVRSZmlRYlhNeXZCN3dLanVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9kZWU2NmYtNDVjYy00Y2I0LTlmYmItNjQyY2U2NzRmOTc0
LzEvMjY3MXd5dnFTMVRSZmlRYlhNeXZCN3dLanVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhVM5jE4X
li4mCM6xE6+pYAQpQJ2G2IMHCl42Mtg+1de10CYaq67cUzH3NVMtOokewvYUrEYA
seYGx2tEXV5ClLKth5p5jNeFa+mNRvd7ZZuw++HYIMNDVKD1qrDYPwJpC4wQHZHX
AcfqSlojgMFIHNWsOUcU07HV+eBDsVtjfix2IErh32EaAHWvo9zviF1lbZK/DXGc
8Cwd5qSdN4Nd6PcFcomE3JCb261WiCZWH2cCl0vbRfOtrZ31QcR75PGQcxk/nFZ9
hM2YhaTB5GBbSlI2i5I/imb9KS72EkFqASFsp26nlYQ/isvqIU55R8CQhHk7/mQ4
REl2xTd6qORT7A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:45:11 2026 by rpki-client