Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d5d1cd-0027-40af-819f-83a22a4faa4f/1/d4U3vcs1Mgx41ZgZpQs2HrlYILc.mft
File: d4U3vcs1Mgx41ZgZpQs2HrlYILc.mft (raw, json)
Hash identifier: 0fSwiIYK7uKU6sL53+f5J6peJU5CaGwAP5tpJEIl+tI=
Subject key identifier: 92:E8:5F:61:B4:59:B7:BC:7F:84:07:AA:28:E4:38:76:E9:DF:14:83
Authority key identifier: 77:85:37:BD:CB:35:32:0C:78:D5:98:19:A5:0B:36:1E:B9:58:20:B7
Certificate issuer: /CN=778537bdcb35320c78d59819a50b361eb95820b7
Certificate serial: 019F92114D9BD48A7140CC40790688ABEEC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4U3vcs1Mgx41ZgZpQs2HrlYILc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/d5d1cd-0027-40af-819f-83a22a4faa4f/1/d4U3vcs1Mgx41ZgZpQs2HrlYILc.mft
Manifest number: E1
Signing time: Fri 24 Jul 2026 03:00:35 +0000
Manifest this update: Fri 24 Jul 2026 03:00:35 +0000
Manifest next update: Sat 25 Jul 2026 03:00:35 +0000
Files and hashes: 1: K2Dc5OBuZ-3GVexCh6zp51MBUis.roa (hash: c29k2Uu3E6+pH0/RU1RBK1xurercCYLwxnC+Kb8waAo=)
2: d4U3vcs1Mgx41ZgZpQs2HrlYILc.crl (hash: Cb8hjxUJ7s7jGnvgwUwjd8ozV9YwrSej1CAmsA2+yew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/d5d1cd-0027-40af-819f-83a22a4faa4f/1/d4U3vcs1Mgx41ZgZpQs2HrlYILc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/d5d1cd-0027-40af-819f-83a22a4faa4f/1/d4U3vcs1Mgx41ZgZpQs2HrlYILc.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4U3vcs1Mgx41ZgZpQs2HrlYILc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:4d:9b:d4:8a:71:40:cc:40:79:06:88:ab:ee:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778537bdcb35320c78d59819a50b361eb95820b7
Validity
Not Before: Jul 24 03:00:35 2026 GMT
Not After : Jul 25 03:00:35 2026 GMT
Subject: CN=92e85f61b459b7bc7f8407aa28e43876e9df1483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d2:d8:97:13:b3:59:80:7d:c4:3d:65:cf:9d:
12:00:7c:e0:cf:a2:c4:38:21:bc:fc:95:17:dc:fa:
99:29:52:20:d9:d0:88:23:07:7a:4c:43:3a:f9:29:
80:a3:d3:c6:fc:65:3c:50:70:4b:cf:59:3f:68:1f:
24:2d:4a:5b:4b:b1:19:bc:bb:08:56:45:ce:de:25:
1e:c7:34:bd:ab:ff:3c:e9:78:73:9d:ab:f2:e5:bb:
6a:e6:3f:3e:4b:8c:72:07:98:b3:76:83:86:c5:2b:
48:94:99:83:2f:8f:37:a4:fe:ec:52:45:e6:5d:66:
2a:4d:45:81:e4:5a:c3:d6:34:ed:0b:eb:4f:1f:39:
a9:f1:10:8f:5a:94:35:44:8c:fa:75:37:a9:8c:c3:
35:ab:03:a6:da:58:ca:bb:21:25:36:38:3e:65:61:
49:29:f2:f1:32:e0:31:67:e9:d2:b7:52:e5:dc:7d:
e8:b3:bb:10:01:04:59:b2:d5:09:e4:61:5e:50:1e:
ca:4c:d9:72:19:f7:47:7a:aa:60:62:da:d9:6d:f7:
2a:3a:18:ca:f7:9a:4b:9d:76:2f:c9:91:80:69:4c:
67:9c:78:e3:29:7b:e7:19:f7:35:58:e6:f5:ad:14:
5b:c4:0c:15:b7:4c:f2:22:4c:cd:68:f2:b4:7a:9b:
32:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E8:5F:61:B4:59:B7:BC:7F:84:07:AA:28:E4:38:76:E9:DF:14:83
X509v3 Authority Key Identifier:
keyid:77:85:37:BD:CB:35:32:0C:78:D5:98:19:A5:0B:36:1E:B9:58:20:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4U3vcs1Mgx41ZgZpQs2HrlYILc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d5d1cd-0027-40af-819f-83a22a4faa4f/1/d4U3vcs1Mgx41ZgZpQs2HrlYILc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d5d1cd-0027-40af-819f-83a22a4faa4f/1/d4U3vcs1Mgx41ZgZpQs2HrlYILc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:f4:29:e4:b7:9a:a3:9c:35:45:0d:29:e7:56:82:97:34:93:
73:d7:e6:f1:ef:27:96:a3:16:ea:5c:ed:88:ac:08:92:0f:5d:
cb:27:c3:39:56:eb:49:c0:7f:82:67:d8:fb:af:69:43:19:8e:
33:36:12:48:2a:b3:d7:b9:f8:69:ca:e6:d2:7e:96:88:d2:9b:
9c:9e:f8:9c:fa:12:9c:c5:38:ad:d2:cc:44:5f:af:7d:94:16:
14:af:f6:a2:b7:b5:ab:15:c4:f9:1d:c5:f7:b4:a2:f3:53:1e:
be:45:01:75:77:0c:9a:a6:c8:55:5d:37:8e:56:b5:e4:63:ba:
fb:8f:6c:e1:23:71:47:b4:f4:50:64:30:1d:e5:6e:a3:de:8d:
81:63:4e:38:7a:7b:27:51:f2:14:13:b7:c0:fa:11:43:9e:fd:
20:3b:28:d7:c4:0e:19:3c:d1:1f:d5:9f:02:72:77:58:e5:47:
cb:ff:78:0f:39:e2:5e:d7:f6:21:d7:61:57:75:b3:f7:c4:2e:
2b:b4:a6:b9:e1:32:2b:65:f4:31:87:cc:38:a2:37:1f:9e:f1:
4d:17:1d:6a:19:f4:49:ed:d6:8f:e0:97:33:cc:ba:e2:51:7d:
5a:3f:4b:7d:e5:81:7b:40:23:18:99:62:df:5e:ab:95:f8:5f:
60:a3:39:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:25:17 2026 by rpki-client