Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
File: dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft (raw, json)
Hash identifier: mVlix7roaTXDrJY2s1zjCZYf/UOkoFFNHwnVC9idU38=
Subject key identifier: D4:11:7C:95:D9:9E:68:13:70:9C:54:78:57:E0:07:CF:1C:99:D4:6B
Authority key identifier: 74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
Certificate issuer: /CN=7450810f13df8d9019f157c36fbd0f6db9862992
Certificate serial: 019F8EA26B84816E915C6965010345F65810
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 11:00:36 +0000
Manifest this update: Thu 23 Jul 2026 11:00:36 +0000
Manifest next update: Fri 24 Jul 2026 11:00:36 +0000
Files and hashes: 1: dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl (hash: HSxiLHp5IFXtiy9khsS1YzwyNs9eU0e4GQ0QH9dVEF4=)
2: vWKPs1EksdLNehXFmCXDKSULnXk.asa (hash: yNn9JtBbsWodt41KzrmjveQKUch9zXpyA0sczkLauf4=)
3: yV3n7Of-XfxujJs_oZpOk9T5zxc.roa (hash: RWU+lLoWMG+Uf+PGBYW1EPxQGP3cMIviVCgLyu7si9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:6b:84:81:6e:91:5c:69:65:01:03:45:f6:58:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7450810f13df8d9019f157c36fbd0f6db9862992
Validity
Not Before: Jul 23 11:00:36 2026 GMT
Not After : Jul 24 11:00:36 2026 GMT
Subject: CN=d4117c95d99e6813709c547857e007cf1c99d46b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d6:4f:00:7a:5b:a7:e8:16:2f:dd:67:30:e0:
5c:8c:07:2e:87:e1:5a:02:b6:ba:e8:77:f8:62:9c:
28:f3:4d:63:c4:c4:a8:a5:b9:41:d9:c1:74:3d:29:
84:9a:d6:d9:15:98:da:82:25:23:39:4e:0e:90:78:
25:78:12:66:aa:5a:0e:57:44:fe:0d:65:96:68:2c:
04:98:26:0b:16:01:b7:54:d1:6d:8a:28:d9:31:ed:
74:d5:17:f8:25:1d:31:aa:f2:2b:a1:a8:ca:8d:1c:
b2:70:90:62:75:e6:6a:92:99:0e:f8:3e:ef:67:0e:
45:72:85:71:ef:e9:4e:dc:9e:ac:bb:f6:d1:69:99:
41:1d:a3:4c:62:65:c4:c0:9d:03:5e:f2:2d:d6:81:
f9:ea:98:6c:23:ec:7a:f3:df:00:60:71:70:11:dd:
47:58:4c:5d:f0:e8:f8:4f:09:89:32:8e:ca:ad:6d:
66:35:e5:56:84:2e:33:0e:fd:7b:bc:2c:11:25:83:
39:64:42:1e:5e:4a:db:7d:49:f9:c8:16:bd:11:24:
fb:56:e9:70:5e:a1:82:f6:e5:62:f6:e7:97:2e:03:
4c:88:37:82:a3:d2:4d:a3:ec:6f:6b:df:e3:f7:41:
a6:52:56:f3:49:7f:d2:6b:5b:dc:df:fb:0f:5e:14:
dd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:11:7C:95:D9:9E:68:13:70:9C:54:78:57:E0:07:CF:1C:99:D4:6B
X509v3 Authority Key Identifier:
keyid:74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f1:e1:72:2e:d6:0b:5f:5a:1a:8e:5f:38:d3:4e:4b:bd:1e:
cf:64:bf:c1:96:33:76:14:fe:f9:b2:fa:f2:02:65:49:8a:76:
c9:5c:5b:e0:d2:c9:60:c5:b3:ed:7e:ef:0b:5c:62:e5:00:2f:
b7:ac:b1:96:ee:d4:a5:2b:01:42:e6:10:1b:0f:0c:7c:7a:68:
89:b7:6c:67:f7:28:72:aa:4e:3c:00:e8:4a:ed:53:52:41:18:
13:e5:90:05:4e:b9:64:6f:64:69:03:65:7c:19:10:7a:33:a4:
8a:f5:0f:b0:b8:63:8a:9a:f7:d5:0f:c5:af:eb:3c:47:3c:2b:
6f:41:7f:c4:60:f6:a7:b0:ed:e2:84:61:52:27:f6:43:d8:10:
1f:8e:2e:02:17:f7:c1:09:ba:9e:0a:bb:88:e0:85:22:c0:88:
8d:1d:59:d9:b0:30:be:69:bd:6e:30:65:a1:17:40:17:04:b5:
4a:dd:41:9b:7b:7f:25:96:79:9f:0a:a5:58:2b:91:3d:9e:ce:
2c:a2:17:46:89:97:5c:f0:7e:1c:bb:86:1f:1c:d3:56:ba:64:
75:4c:df:1d:9d:a3:10:5a:6e:42:47:e1:94:e1:ff:f3:52:fb:
53:8b:8e:22:f0:13:e4:0f:10:3e:bf:de:62:7e:cb:b4:39:55:
98:6d:00:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:46 2026 by rpki-client