Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
File: DyFSGnEnFX99rwrQkTlK1aHM53k.mft (raw, json)
Hash identifier: FAU8EeRa5e8qX9eCpAz91WThS8btUNpfoeAjAUCcpGk=
Subject key identifier: 52:AB:81:06:BA:4A:B6:40:32:38:7A:F1:CA:AA:F3:D2:4B:88:F5:7F
Authority key identifier: 0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
Certificate issuer: /CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Certificate serial: 019F921194D1A175D83CC1E467688B809AA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
Manifest number: 19D3
Signing time: Fri 24 Jul 2026 03:00:53 +0000
Manifest this update: Fri 24 Jul 2026 03:00:53 +0000
Manifest next update: Sat 25 Jul 2026 03:00:53 +0000
Files and hashes: 1: 0IWvtKpWz8nwzfyztFPG-10e-ec.roa (hash: M3DL2KpstDY4RX5irHxTIoQ7SYVzPk7eR23DZZrDMbo=)
2: DyFSGnEnFX99rwrQkTlK1aHM53k.crl (hash: JOSljwEJh07dmQtllfQgXFJwGxohJQOI+nvz6g66z5s=)
3: pYVSN2AB9mwBr8yDS1zYwXrTuMQ.roa (hash: xWYPQfiNQqIYcOLgwTTjRZ9fSTqKYlkmjs7r1ngIGF4=)
4: uXN7_MtPKMwhSTIFKpLUwo-V5P8.roa (hash: 8z/tTyMqQq524Fl02SLcRSjti3sQ0AEo40zN2vpCYes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:94:d1:a1:75:d8:3c:c1:e4:67:68:8b:80:9a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Validity
Not Before: Jul 24 03:00:53 2026 GMT
Not After : Jul 25 03:00:53 2026 GMT
Subject: CN=52ab8106ba4ab64032387af1caaaf3d24b88f57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:18:14:81:84:39:5c:81:32:7f:3a:15:55:4f:
06:e7:c0:a8:cc:f8:bc:da:74:8e:16:bb:16:ea:3f:
d6:89:4e:2c:1d:4b:e3:f8:e4:25:fc:64:d5:05:12:
92:08:33:82:82:c0:8c:be:63:3d:18:be:1f:56:e3:
2c:9f:c8:25:99:ec:74:6c:fb:7d:e8:34:bc:31:fd:
a6:f4:73:3c:9c:bb:0f:40:fc:37:68:a7:1a:ed:24:
4f:ad:6d:d4:3f:4d:d8:42:f3:89:e2:a5:70:36:47:
af:30:20:c2:d5:4c:a4:ae:5b:4f:5f:6b:5c:90:00:
4f:61:42:44:8c:38:4e:9c:50:8a:8e:73:20:d7:8e:
09:d9:db:e0:0b:cb:d3:a0:57:b0:d0:56:a4:46:b1:
f2:26:81:12:e4:df:78:fe:0d:d2:7c:3b:b3:77:ec:
96:e2:01:ef:42:c9:19:d6:a3:b4:67:70:be:02:cc:
12:a1:e1:37:82:b3:85:3d:a2:4a:ed:98:ec:d0:61:
83:99:c2:f5:c4:e9:2f:17:5d:67:0e:b3:cd:49:64:
59:38:1e:77:bd:28:94:29:b3:40:2a:60:1c:b5:33:
b4:62:cb:44:b8:36:30:f4:c5:a2:40:d0:9d:05:70:
9f:eb:80:6f:41:29:7c:09:de:33:a9:ea:89:34:64:
6b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AB:81:06:BA:4A:B6:40:32:38:7A:F1:CA:AA:F3:D2:4B:88:F5:7F
X509v3 Authority Key Identifier:
keyid:0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:95:fd:b9:a1:13:14:84:b7:d9:5f:06:44:71:49:1a:8a:4a:
6e:44:ce:6e:cd:98:d8:54:cf:94:7a:1b:f4:af:21:9c:4a:d1:
61:5c:33:14:f4:a2:4b:08:a3:e0:5c:25:19:a9:af:63:17:4a:
1c:ef:1b:a2:4e:0a:2d:52:da:a9:34:80:ea:2f:81:5e:67:cd:
04:3d:c7:ec:9e:d6:85:6e:dc:a9:06:33:af:94:06:a5:2d:6d:
2b:46:e2:d2:9b:bc:72:08:89:8f:e3:e5:30:b0:59:f8:22:8b:
17:ca:f8:2d:50:c4:94:35:9b:42:32:c2:b6:d7:31:7c:b1:36:
6f:d0:d7:c9:12:ef:cc:e1:2f:3d:07:40:0c:d5:81:54:f4:64:
31:37:26:0f:f2:dd:94:aa:a4:27:5a:a6:84:a6:f2:ce:ce:a7:
f1:01:01:6b:e6:95:9c:5b:b2:ce:47:f8:ed:9f:55:c3:fc:06:
3c:a5:32:e1:b7:9b:17:36:11:ed:76:9f:d8:19:1e:b2:16:41:
cf:38:31:9f:f9:ee:90:8e:70:e7:fc:dc:32:f0:b8:74:7b:11:
e4:be:95:ef:72:d9:3c:fe:bf:73:14:45:e1:82:68:85:ab:ad:
d9:a6:9e:fe:06:35:19:a5:a2:8c:90:c7:c1:6f:d7:a2:16:2c:
cd:88:80:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:56:21 2026 by rpki-client