Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft
File: rfDfdxFHQeE6F9chPmlWv5YntVg.mft (raw, json)
Hash identifier: BhEzz8Cl80eJlvFc/sXhOXGbewlGE4UoURNejSzqfNE=
Subject key identifier: E4:BA:D1:47:1B:25:74:CF:D6:05:50:F7:51:FE:C7:91:57:8D:21:C7
Authority key identifier: AD:F0:DF:77:11:47:41:E1:3A:17:D7:21:3E:69:56:BF:96:27:B5:58
Certificate issuer: /CN=adf0df77114741e13a17d7213e6956bf9627b558
Certificate serial: 019F940006E6BAE343175B9F9581AA5DB5E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfDfdxFHQeE6F9chPmlWv5YntVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft
Manifest number: 187C
Signing time: Fri 24 Jul 2026 12:00:57 +0000
Manifest this update: Fri 24 Jul 2026 12:00:57 +0000
Manifest next update: Sat 25 Jul 2026 12:00:57 +0000
Files and hashes: 1: 8eYijGU89HKkHPl1vQkVznR2YWI.roa (hash: GVKbdEH+zbWNIRI6lkz6XipadG7YSN2rD9CEidAiQUs=)
2: rfDfdxFHQeE6F9chPmlWv5YntVg.crl (hash: HU0NcLFO29mFF9MgfjDWwVehOBdehJsjjR63Y348Auw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfDfdxFHQeE6F9chPmlWv5YntVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:00:06:e6:ba:e3:43:17:5b:9f:95:81:aa:5d:b5:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf0df77114741e13a17d7213e6956bf9627b558
Validity
Not Before: Jul 24 12:00:57 2026 GMT
Not After : Jul 25 12:00:57 2026 GMT
Subject: CN=e4bad1471b2574cfd60550f751fec791578d21c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2a:1f:0b:96:6a:a9:da:f4:27:db:cf:ba:85:
cb:92:89:be:86:aa:81:41:a4:09:e2:b5:02:cf:19:
83:25:56:49:e7:ba:be:3a:c7:8c:eb:92:35:8d:8f:
07:0b:e4:d5:3d:5b:ff:3b:a1:29:35:cc:07:be:b3:
36:2b:d6:3e:e5:b9:b8:26:f0:a5:57:89:a2:b6:a9:
c6:1f:2c:c8:4a:48:80:9b:12:d6:49:0d:d9:8a:55:
0e:8a:a7:65:ea:c9:58:16:e5:a5:76:2e:ff:49:d0:
42:58:87:75:c0:16:49:77:d5:e4:ab:7e:c1:0e:38:
42:e6:ac:07:1b:8a:ad:bf:5b:d4:46:01:f9:64:2f:
28:21:32:b9:67:6c:c5:c3:bd:6e:8c:9d:f2:b2:3c:
31:1a:b7:8f:a6:28:d0:6d:ba:ec:3f:4b:97:96:72:
56:61:a0:66:4c:01:bb:5e:23:ee:f3:d9:8f:eb:d9:
fb:5a:79:d8:fb:15:ee:29:c3:c0:38:7a:d5:1c:ca:
65:51:0c:8b:40:38:57:cc:6e:8f:86:a2:44:fb:86:
9b:ba:c4:e9:64:c6:09:d1:58:5d:fc:c0:16:7a:1f:
88:d8:72:34:1b:63:ae:f4:bb:a2:1b:0e:30:b9:85:
35:30:8d:84:1b:5c:0b:c8:ed:79:2a:e5:2b:6f:6e:
bf:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BA:D1:47:1B:25:74:CF:D6:05:50:F7:51:FE:C7:91:57:8D:21:C7
X509v3 Authority Key Identifier:
keyid:AD:F0:DF:77:11:47:41:E1:3A:17:D7:21:3E:69:56:BF:96:27:B5:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfDfdxFHQeE6F9chPmlWv5YntVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:9e:43:00:59:89:a9:18:fb:38:c3:4a:94:c5:88:76:a0:55:
d2:5f:38:68:0c:8b:ec:d2:dd:01:39:3b:28:2e:c8:00:9b:c2:
de:69:63:46:03:ee:56:f0:a2:c3:9e:87:10:60:d7:e7:69:f8:
6b:f3:06:79:39:f7:ef:19:0a:57:1d:81:53:25:75:59:9b:b6:
82:3d:13:1c:9c:0a:93:73:f4:72:84:22:a8:c1:25:b1:ce:5f:
6a:10:da:c3:28:03:c8:40:24:c2:44:04:f7:8e:e1:f6:33:80:
f0:69:68:18:23:99:64:ce:aa:c4:af:8e:a2:dd:61:4f:7e:b8:
63:cd:72:db:dd:47:5a:4a:9b:d8:08:d5:89:d0:86:a1:b4:00:
cd:f0:0d:00:e7:da:9f:e0:ef:63:6e:fa:1e:8d:87:b8:f0:e8:
15:36:ea:9c:cf:be:90:65:6e:54:51:17:f6:de:97:57:3a:cf:
c3:a5:89:ae:20:82:64:12:19:21:4a:c4:51:85:3a:28:62:82:
12:74:e2:e6:9d:1f:cb:d9:eb:71:06:e2:f2:36:9d:d4:08:49:
c0:16:b4:d1:45:5d:8d:f6:91:63:c3:2b:39:2e:4a:0b:2a:e1:
9b:e0:f9:86:42:87:cb:35:fb:d4:d7:75:ad:52:33:24:66:96:
5b:73:5b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:53:18 2026 by rpki-client