Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
File: dRk72fhLSp7UegO9-JLZ55i3Jyc.mft (raw, json)
Hash identifier: g6XNpWIaqYWQkT3VXwi5JSZxuurV6qY3zfrCtoBZ+wU=
Subject key identifier: A1:73:E3:69:E2:93:F5:77:49:5B:83:2C:88:87:20:DB:1B:1C:35:FB
Authority key identifier: 75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27
Certificate issuer: /CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727
Certificate serial: 019F91DB15496DF0B989B6872074257273A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 02:01:21 +0000
Manifest this update: Fri 24 Jul 2026 02:01:21 +0000
Manifest next update: Sat 25 Jul 2026 02:01:21 +0000
Files and hashes: 1: dRk72fhLSp7UegO9-JLZ55i3Jyc.crl (hash: oMATB3H+VGDnVN/kOZCAdaUXGIqWbjiL/j6G7SlsIKA=)
2: npNQdbBPSAtnOlq0Culg6ehSO3c.roa (hash: nzhX62ENfek+KzOEsFGqCHI0pXJKicAlbiFtnu/GhCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:15:49:6d:f0:b9:89:b6:87:20:74:25:72:73:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727
Validity
Not Before: Jul 24 02:01:21 2026 GMT
Not After : Jul 25 02:01:21 2026 GMT
Subject: CN=a173e369e293f577495b832c888720db1b1c35fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fb:f6:80:24:a9:d9:37:19:94:d6:7a:a0:88:
23:7a:ba:4b:f6:a5:e4:ec:83:8c:0f:9c:83:86:aa:
ec:63:09:98:af:bf:6f:e5:aa:45:c4:b8:28:80:49:
53:52:03:84:30:55:d8:ca:8a:3c:68:3d:60:41:eb:
28:fc:91:d6:04:f0:7b:9b:c6:1e:c4:64:df:43:03:
86:f1:03:ab:9c:4d:1b:ff:01:38:8e:b3:96:1d:6e:
f0:5e:a2:89:6f:02:18:86:1f:fa:92:bc:1d:5b:80:
13:89:9e:4c:8f:d6:ff:af:cd:81:34:88:89:6c:a6:
02:ed:28:85:ab:11:d1:65:58:e3:de:0c:4a:a2:6d:
72:f2:54:55:a3:7a:e8:8c:7b:38:ab:cd:8a:9f:f1:
8a:72:27:6b:be:07:d0:7b:65:61:fa:3c:6d:f8:2f:
42:63:9e:02:95:88:e5:aa:d3:c2:e3:30:c0:d4:da:
8f:c2:6c:08:2f:f8:b9:97:09:43:04:39:8e:15:4b:
e1:d6:1e:d9:d6:fd:1b:21:92:a7:a1:15:9e:c7:a4:
72:5f:ed:0a:01:34:60:c2:fd:d0:f5:2e:85:7d:34:
f1:80:28:57:7e:37:8f:c8:40:ae:3e:f2:77:00:e3:
f2:f2:10:72:05:17:ca:eb:ae:47:ba:07:e5:2a:84:
4d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:73:E3:69:E2:93:F5:77:49:5B:83:2C:88:87:20:DB:1B:1C:35:FB
X509v3 Authority Key Identifier:
keyid:75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:09:94:d9:0b:12:7f:0d:a1:d5:56:6c:4a:6a:2d:74:e3:b5:
06:e8:ab:74:8e:4c:bf:d9:ba:1d:ec:39:26:6f:71:36:50:13:
9a:2a:3a:0f:0f:75:d8:01:eb:b3:bf:8c:40:28:85:03:c2:9a:
63:07:66:bc:fa:95:61:97:41:61:f3:3c:33:cd:8d:12:8f:e6:
51:30:3f:8e:55:cf:90:d8:de:0b:c1:65:c4:62:17:fa:8d:08:
a7:72:ff:0f:df:c0:f1:bc:bd:c8:b0:7c:59:db:eb:e3:26:38:
1d:47:5e:9d:60:e0:14:01:59:bd:61:38:58:77:83:44:85:cc:
6f:c4:49:67:90:26:61:b1:c2:d4:38:25:c4:69:f4:93:89:cc:
13:d7:93:33:25:0b:f2:20:67:bd:e5:00:04:93:35:c2:a6:b1:
0a:c7:bd:22:4f:4d:45:c9:f3:d7:0d:ac:a0:15:4c:0a:c3:01:
03:ed:2b:1c:00:67:60:04:ef:4b:9b:5a:34:a8:43:77:8a:c4:
26:ae:52:00:e9:47:7c:e5:e4:f2:77:5a:ac:9c:eb:92:19:d8:
8d:04:31:aa:5c:f2:5c:5f:b7:84:53:8f:37:01:df:39:cc:68:
db:db:b0:86:df:6f:ea:29:71:3d:17:89:de:d0:14:5f:fc:f5:
db:33:2c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:02:36 2026 by rpki-client