Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
File: diY1mUnOzyQYxaLbIayrhd2Rk9g.mft (raw, json)
Hash identifier: B4nxRXjN8uyIQH+aMhEARdeoZhUhpvf8UTlunX4L21Y=
Subject key identifier: A0:CE:4C:0D:BE:8B:81:A0:77:DD:EF:3C:11:B8:B1:9F:71:B5:61:2E
Authority key identifier: 76:26:35:99:49:CE:CF:24:18:C5:A2:DB:21:AC:AB:85:DD:91:93:D8
Certificate issuer: /CN=7626359949cecf2418c5a2db21acab85dd9193d8
Certificate serial: 019F935BBBBDA8A66200FEB7C3745741EFD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 09:01:30 +0000
Manifest this update: Fri 24 Jul 2026 09:01:30 +0000
Manifest next update: Sat 25 Jul 2026 09:01:30 +0000
Files and hashes: 1: Ra_O1tJPqxceyq_rAhiwFMOrKjw.roa (hash: Rmyhdy6TeiiXlYpWyq2MVfXDcJgMeLMhA0axqCrhBSg=)
2: diY1mUnOzyQYxaLbIayrhd2Rk9g.crl (hash: tv1xs1CCteRaJ3qqN5vaLasurD1FPDVPffxlGe0nrjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:bb:bd:a8:a6:62:00:fe:b7:c3:74:57:41:ef:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7626359949cecf2418c5a2db21acab85dd9193d8
Validity
Not Before: Jul 24 09:01:30 2026 GMT
Not After : Jul 25 09:01:30 2026 GMT
Subject: CN=a0ce4c0dbe8b81a077ddef3c11b8b19f71b5612e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2b:b2:3a:d4:37:dc:9f:d0:00:87:30:24:59:
51:81:84:84:6e:c9:ef:08:56:0a:8a:bd:ff:2d:06:
58:d9:dd:06:b1:b3:d0:a4:12:26:e6:84:05:93:65:
0e:1d:b4:3d:49:ef:bc:d3:d6:ca:06:d1:ae:12:5d:
b2:54:bc:02:c6:0b:3c:6e:e5:d3:aa:32:d6:28:52:
fe:8d:1c:7d:4d:fb:d7:96:0f:75:ab:d2:b0:27:d4:
bc:07:8d:8a:4e:1a:3e:d1:ed:08:0e:da:48:1d:0a:
1e:20:78:34:df:65:59:95:be:38:3d:f2:48:f9:b4:
dc:f7:1f:05:2b:1f:24:fa:55:df:0f:0a:ae:0a:61:
e1:bc:3f:3d:ec:a3:5a:5b:f0:6f:30:7a:a1:6a:e0:
9a:a7:eb:e2:f6:35:e3:c5:60:84:c0:f8:17:1a:7d:
95:90:90:c7:87:c3:78:d8:10:a7:82:e6:21:bf:ab:
3f:dc:ac:91:ee:a7:8e:58:6c:34:cd:9d:b9:e2:ba:
10:aa:c9:43:f5:fe:a8:c8:fe:c9:bb:cc:66:6a:d1:
53:a9:ec:12:d0:85:9a:42:b7:4e:e6:9f:f4:80:4f:
8e:f8:c7:17:38:67:ac:87:25:fb:1a:33:13:9e:3f:
aa:c2:82:eb:c9:92:72:a3:2d:d9:89:15:00:a4:4d:
15:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:CE:4C:0D:BE:8B:81:A0:77:DD:EF:3C:11:B8:B1:9F:71:B5:61:2E
X509v3 Authority Key Identifier:
keyid:76:26:35:99:49:CE:CF:24:18:C5:A2:DB:21:AC:AB:85:DD:91:93:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:87:7b:4d:b0:1c:5f:ee:49:5c:a8:81:a1:24:1f:bf:f7:37:
52:7c:ce:df:6f:8d:7c:3a:1c:33:a8:2c:99:b2:1e:42:d8:bc:
b5:1a:7f:14:cb:83:e3:52:33:29:3d:7d:f7:d6:32:78:4b:ce:
9c:ca:f9:64:08:04:02:ff:65:28:88:c5:f8:69:87:f5:2c:e2:
f7:21:27:70:f5:6c:75:5f:2b:13:14:6c:5a:d8:af:0e:7b:9a:
09:8f:e9:25:58:ea:53:96:6b:4d:8a:e3:0e:5f:ae:b7:cd:51:
6d:3d:84:71:ec:df:5c:75:0c:c0:3a:88:40:96:ef:8d:16:27:
71:4f:f5:93:3c:ab:2c:1b:02:30:19:1e:45:c5:0a:69:d3:cf:
a3:4f:ea:45:8e:d5:99:85:34:af:63:eb:1a:71:5b:de:21:b0:
12:10:ad:4d:79:04:af:8c:c5:b6:a7:f3:20:4d:30:ff:4e:28:
db:09:37:51:cc:07:6a:59:41:03:ae:8e:ad:c8:e0:dd:cb:54:
ae:c1:a1:7d:cd:f9:37:92:8e:3c:29:04:7f:56:dc:36:44:58:
2f:3e:7c:96:cd:62:42:c6:38:8c:07:e2:7f:a1:65:67:69:8f:
28:fb:0b:3a:84:ae:0c:49:7e:4f:f6:13:58:16:3d:62:22:b7:
51:ff:e5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:23:43 2026 by rpki-client