Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
File: Djye4b4zCP1r1KfHrCudkQCJt3k.mft (raw, json)
Hash identifier: KFptXYGTW0zihyuvyo1FxLW61tRjWZRPh+V1YQRKlmk=
Subject key identifier: DC:7C:45:6D:83:E0:BC:E4:5A:87:E0:09:D1:07:82:A0:67:5C:89:5A
Authority key identifier: 0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79
Certificate issuer: /CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
Certificate serial: 019F916C74483B0C33D609E9CF80D4954CFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 00:00:31 +0000
Manifest this update: Fri 24 Jul 2026 00:00:31 +0000
Manifest next update: Sat 25 Jul 2026 00:00:31 +0000
Files and hashes: 1: Djye4b4zCP1r1KfHrCudkQCJt3k.crl (hash: ZiK2/G8ZbYKimNv7w7KRHN9LGFahaUPcGX9JOu85ZIs=)
2: Rn3_9vFVXU06CNsxoJF1MmOpw7M.roa (hash: xyFTVjGVyU+raorbvx64u0pXwIGXyRN5Lt5srPA+50U=)
3: f-ogC67M0j6pmdbRailAwDmYBsk.roa (hash: AiwIB7mPfTBWZfsnFMwdI5gkTn2LtdcdGevndgaf5SE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:74:48:3b:0c:33:d6:09:e9:cf:80:d4:95:4c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
Validity
Not Before: Jul 24 00:00:31 2026 GMT
Not After : Jul 25 00:00:31 2026 GMT
Subject: CN=dc7c456d83e0bce45a87e009d10782a0675c895a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7f:85:fa:eb:37:2c:e5:32:17:f0:49:e9:c6:
1c:d8:85:72:48:ee:96:65:d5:cc:7b:6e:a0:18:47:
db:f8:3d:c8:12:25:12:cf:c0:3f:5f:45:86:7a:e9:
ec:b1:99:c5:27:c0:3e:f9:dc:a4:0c:48:b1:3f:a5:
e0:d7:3c:69:7b:bc:8f:d3:a1:cb:54:d7:49:b9:05:
b0:06:f8:fb:4f:d8:9f:3a:ee:cb:3a:eb:a0:3b:11:
cf:b9:63:96:c7:a4:4b:4c:35:60:f7:b1:14:3b:2e:
03:db:14:b9:1b:61:01:9b:96:b3:74:4e:2c:34:41:
a0:77:95:88:b8:d9:78:91:63:96:31:29:53:d8:59:
93:02:0c:17:26:87:c6:a5:3a:02:24:03:11:33:98:
25:a4:e4:f1:c0:f7:76:96:f3:63:fa:45:c5:38:e0:
12:61:24:45:a3:e1:75:47:3b:41:18:e1:8a:e6:08:
7c:70:c5:a6:bb:02:69:ea:73:0e:9a:3d:5b:14:a9:
0d:91:28:a7:25:f9:c2:c5:01:f6:60:b9:55:dd:2e:
aa:57:49:4a:3e:63:e6:a3:f6:34:74:dd:3d:12:25:
62:7b:20:a7:48:fd:4e:cd:4b:9d:85:09:9d:42:5b:
1b:60:c9:8b:78:7a:6c:57:51:b9:dc:ab:ae:c5:80:
41:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:7C:45:6D:83:E0:BC:E4:5A:87:E0:09:D1:07:82:A0:67:5C:89:5A
X509v3 Authority Key Identifier:
keyid:0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:27:a3:e2:aa:aa:fa:ee:52:ac:b1:ce:65:0b:f3:77:77:77:
04:f1:c2:47:c3:92:48:24:0f:69:c1:64:da:f0:c8:36:e7:2a:
ce:d2:54:3a:b6:84:76:2a:4e:08:15:a7:74:7c:ae:c1:59:1d:
0f:82:04:66:9d:9f:a8:d5:6d:ba:05:73:eb:9d:a0:23:22:5d:
a3:2a:56:91:5e:97:b3:7a:d9:d9:60:27:ea:7d:0d:a2:ec:43:
73:7c:5a:d5:31:16:bd:1d:b3:5a:43:6f:13:23:17:31:d9:96:
48:ac:a8:b3:49:7d:05:2f:bb:de:99:3e:c0:5a:a5:9a:47:ce:
0b:dd:47:99:77:89:ed:49:38:22:da:a2:f9:3a:7b:aa:85:1a:
4d:aa:23:b8:1d:02:cb:9e:bc:ac:b8:d4:73:e5:cd:bd:e2:01:
63:f8:7a:c1:e0:ef:0e:b0:e7:c2:74:aa:94:99:2b:73:dc:9f:
52:1b:34:27:07:9d:6a:c7:cc:ee:09:46:65:76:5c:e5:fa:f5:
37:6e:10:92:c9:3d:65:b9:cc:58:61:c4:c4:4c:fb:4b:5c:d8:
41:df:3b:4c:4a:82:eb:c9:48:75:98:f7:b0:fd:91:48:22:c0:
7c:19:bc:0f:67:d0:36:f4:a4:ec:bb:50:2f:9e:db:3f:a0:28:
ae:03:68:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbHRIOwwz1gnpz4DUlUz+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlM2M5ZWUxYmUzMzA4ZmQ2YmQ0YTdjN2FjMmI5ZDkxMDA4
OWI3NzkwHhcNMjYwNzI0MDAwMDMxWhcNMjYwNzI1MDAwMDMxWjAzMTEwLwYDVQQD
EyhkYzdjNDU2ZDgzZTBiY2U0NWE4N2UwMDlkMTA3ODJhMDY3NWM4OTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3+F+us3LOUyF/BJ6cYc2IVySO6W
ZdXMe26gGEfb+D3IEiUSz8A/X0WGeunssZnFJ8A++dykDEixP6Xg1zxpe7yP06HL
VNdJuQWwBvj7T9ifOu7LOuugOxHPuWOWx6RLTDVg97EUOy4D2xS5G2EBm5azdE4s
NEGgd5WIuNl4kWOWMSlT2FmTAgwXJofGpToCJAMRM5glpOTxwPd2lvNj+kXFOOAS
YSRFo+F1RztBGOGK5gh8cMWmuwJp6nMOmj1bFKkNkSinJfnCxQH2YLlV3S6qV0lK
PmPmo/Y0dN09EiVieyCnSP1OzUudhQmdQlsbYMmLeHpsV1G53KuuxYBBHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNx8RW2D4LzkWofgCdEHgqBnXIlaMB8GA1UdIwQY
MBaAFA48nuG+Mwj9a9Snx6wrnZEAibd5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGp5ZTRiNHpDUDFyMUtmSHJDdWRrUUNKdDNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9jYWEyZGEtNWViYy00NWNiLWI4ZmUt
MDhmM2U4OTA3YzQyLzEvRGp5ZTRiNHpDUDFyMUtmSHJDdWRrUUNKdDNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9jYWEyZGEtNWViYy00NWNiLWI4ZmUtMDhmM2U4OTA3YzQy
LzEvRGp5ZTRiNHpDUDFyMUtmSHJDdWRrUUNKdDNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAASej4qqq
+u5SrLHOZQvzd3d3BPHCR8OSSCQPacFk2vDINucqztJUOraEdipOCBWndHyuwVkd
D4IEZp2fqNVtugVz652gIyJdoypWkV6Xs3rZ2WAn6n0NouxDc3xa1TEWvR2zWkNv
EyMXMdmWSKyos0l9BS+73pk+wFqlmkfOC91HmXeJ7Uk4Itqi+Tp7qoUaTaojuB0C
y568rLjUc+XNveIBY/h6weDvDrDnwnSqlJkrc9yfUhs0JwedasfM7glGZXZc5fr1
N24Qksk9ZbnMWGHExEz7S1zYQd87TEqC68lIdZj3sP2RSCLAfBm8D2fQNvSk7LtQ
L57bP6AorgNoyg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:18:27 2026 by rpki-client