Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
File: dqNyt1TkkgjWRqp4WeNItHXlJtI.mft (raw, json)
Hash identifier: 8J/WZkpikc1OM1ChinL14Lyc8jXJy8cpW4c1RLhGH9c=
Subject key identifier: 63:3B:04:32:4C:07:E8:73:0D:6E:E1:76:16:B5:4B:51:4B:4A:59:11
Authority key identifier: 76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
Certificate issuer: /CN=76a372b754e49208d646aa7859e348b475e526d2
Certificate serial: 019F92EDCE1A8B2B93AF64DD80DA88BF3614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 07:01:26 +0000
Manifest this update: Fri 24 Jul 2026 07:01:26 +0000
Manifest next update: Sat 25 Jul 2026 07:01:26 +0000
Files and hashes: 1: dqNyt1TkkgjWRqp4WeNItHXlJtI.crl (hash: IQod+M7xgaAFyxrJM708C93LcTU0DKDINtmvaEa8ztk=)
2: hU1lZW7ePs-jJStAbmgwJQdywgk.roa (hash: GCbi7/7u241zxcC9BwBBXY2OG87lKhbUz6RrhT+13oQ=)
3: oBx_PUd9jIs7YBgUmwcA4lLwIh8.roa (hash: hhGP/lSRzYSBVwOdWUcy+jdF25VySsbxm9Awg1JpKdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:ce:1a:8b:2b:93:af:64:dd:80:da:88:bf:36:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a372b754e49208d646aa7859e348b475e526d2
Validity
Not Before: Jul 24 07:01:26 2026 GMT
Not After : Jul 25 07:01:26 2026 GMT
Subject: CN=633b04324c07e8730d6ee17616b54b514b4a5911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1e:9f:1b:f1:31:b8:b4:99:4d:8f:20:fd:7d:
0c:e2:6c:ff:df:91:c0:ef:e3:75:b2:52:a4:4a:3d:
4c:83:74:52:51:7c:83:49:9b:cf:62:99:dd:92:dc:
31:76:7d:ee:4d:1f:b3:b9:b2:54:0e:58:75:c3:34:
5a:83:27:30:7f:60:de:a6:7e:89:97:f8:2a:ad:83:
7a:18:48:97:d6:29:d7:72:39:0c:fb:4a:4e:dc:0d:
04:fa:f6:58:98:08:17:a1:15:11:44:43:cd:76:c5:
c4:a3:63:bb:b2:d6:96:6e:9b:d0:9f:ea:3f:4b:38:
5f:6e:38:43:3f:85:1c:d9:f3:eb:14:72:74:bf:1c:
3c:86:d4:18:5f:2f:fe:ef:d4:c6:5b:24:bc:30:f4:
b5:14:59:05:f6:50:a7:86:0b:5b:2e:cb:13:76:ec:
39:58:5e:0e:bb:8c:1f:71:ff:bd:14:9b:0b:7f:1c:
68:f4:b6:93:56:2a:a5:23:41:cf:1c:41:6f:78:03:
aa:6f:3b:2d:f3:6f:3d:0c:cb:bc:49:01:02:4e:83:
01:5a:58:4e:98:c0:99:9f:75:73:7f:d4:fe:f3:65:
42:1c:cc:22:71:d6:8b:db:64:24:dd:f2:9a:0c:44:
5b:01:de:09:d1:bb:53:d9:76:21:9a:f2:22:a6:9d:
c8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3B:04:32:4C:07:E8:73:0D:6E:E1:76:16:B5:4B:51:4B:4A:59:11
X509v3 Authority Key Identifier:
keyid:76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:40:d3:29:58:c9:d2:f8:55:5a:c8:b3:94:e8:57:8c:8d:c4:
7e:90:cb:60:ad:40:55:4e:3f:87:5c:b0:38:7c:46:94:84:e5:
d1:42:36:87:a4:3e:09:a3:ec:51:ac:53:56:40:fe:f9:78:71:
5e:3e:b2:f3:df:f7:80:39:f2:d5:ac:92:ee:b5:dd:e3:be:d6:
ce:d2:60:d3:4e:f6:43:46:2b:e4:ac:b6:26:7e:00:1f:66:a2:
94:bc:46:9d:48:01:e6:ef:63:1d:aa:a0:55:5f:9c:cf:29:78:
cb:bf:d2:9e:d4:ea:ff:7c:c6:87:32:eb:32:38:b0:65:0e:b2:
44:2b:f6:33:b6:8e:33:5a:7f:44:64:98:0c:36:2b:0d:64:b7:
00:2e:3d:f0:bb:c5:61:63:01:05:1f:35:dd:dd:8c:fc:18:45:
c0:b9:29:f9:00:57:2f:a9:9c:6c:b8:d7:17:6a:7d:73:26:e6:
05:9f:57:c6:1e:7f:0f:c6:36:7d:81:98:ca:32:bf:7a:9f:b3:
92:63:02:c4:fc:2e:8a:22:bc:17:16:4d:ba:47:1e:c9:23:00:
50:fd:98:32:be:d6:7d:2d:b3:06:96:7b:af:19:2c:02:c7:82:
1c:3a:7d:53:62:df:cf:30:77:b9:e0:ca:8e:45:09:9b:90:f7:
2e:85:3d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:29:55 2026 by rpki-client