Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
File: Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft (raw, json)
Hash identifier: xaMwoSMHYZbdNrisk1nUdukH9ITmVztMmeeG2KezWPw=
Subject key identifier: 41:AE:4D:6D:36:CF:9A:AA:55:65:5B:FF:BD:71:3D:51:48:B4:02:8D
Authority key identifier: 0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92
Certificate issuer: /CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92
Certificate serial: 019F95800BFE0E0E1FD6935C091DF7B006F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
Manifest number: 19CE
Signing time: Fri 24 Jul 2026 19:00:24 +0000
Manifest this update: Fri 24 Jul 2026 19:00:24 +0000
Manifest next update: Sat 25 Jul 2026 19:00:24 +0000
Files and hashes: 1: DkVdvbXhpbo9CQqVcVFBg1LNoNE.roa (hash: qaF1R+er71d5hFs2KTiNhXAjh56KPYgioy+6tvssIEE=)
2: Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl (hash: DMJr3zKI3c6rtEenXqMRpdc6gt7APyjk+1JjljH+KoI=)
3: WIQ88PUyl0Wn69b9mzqB92sF45M.roa (hash: ATP8ajAQ0MqjrK6hyWC+m5lGC/lxKRtV3XstqqIRErs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:0b:fe:0e:0e:1f:d6:93:5c:09:1d:f7:b0:06:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92
Validity
Not Before: Jul 24 19:00:24 2026 GMT
Not After : Jul 25 19:00:24 2026 GMT
Subject: CN=41ae4d6d36cf9aaa55655bffbd713d5148b4028d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9c:c8:89:37:88:0a:04:da:09:19:7d:9f:c5:
57:7c:c8:33:9a:1e:c5:64:6b:ee:0a:5b:ab:dd:c5:
ff:a8:6f:cc:1d:4b:00:0d:a9:02:1c:b0:0c:fa:25:
ea:4b:16:f5:cd:c3:ff:3f:89:c7:38:88:05:35:aa:
3c:75:2b:d4:28:e0:7c:0d:fe:91:62:d0:19:78:72:
1c:41:22:62:8d:27:43:3c:ef:1a:ab:1b:5d:87:7f:
ee:2b:79:f4:d1:65:0e:57:e1:70:f4:43:71:44:00:
24:4c:44:df:bd:15:5a:40:9f:33:eb:90:eb:a8:82:
1f:20:d9:3b:b9:57:e7:db:ce:df:cb:2e:19:7f:d0:
dd:73:94:f1:e2:23:7f:71:30:ad:56:73:12:36:f7:
5a:d5:e0:ff:cf:44:77:68:41:c1:bb:55:ce:d9:e6:
ac:51:74:d9:66:aa:b1:51:fc:37:cf:60:ea:cb:d0:
92:f3:2e:c5:0c:8b:0d:e6:f4:0e:4b:2b:9a:a7:36:
55:4b:c2:10:aa:3d:1d:3a:12:8c:fc:4b:ac:87:5e:
78:43:83:0c:d8:51:46:3a:7c:74:5e:7e:63:cb:de:
34:95:78:c8:32:21:0b:5a:5a:bf:5c:1e:fb:2a:4f:
68:9b:16:4e:eb:d4:e9:ec:b4:32:8e:3e:50:a9:b0:
aa:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AE:4D:6D:36:CF:9A:AA:55:65:5B:FF:BD:71:3D:51:48:B4:02:8D
X509v3 Authority Key Identifier:
keyid:0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:8e:54:ba:21:6a:ce:14:88:e7:d6:7d:a8:0a:99:a7:ed:7e:
25:d0:d1:c5:99:20:c4:29:26:39:f0:45:f3:4a:35:cd:0c:ba:
22:12:aa:33:9e:90:41:3f:fc:ce:cd:4d:85:89:53:c6:7d:4a:
cd:8b:c9:1c:a0:e1:85:d3:38:c7:44:c4:a8:76:68:32:8b:9a:
5b:b9:3b:4d:9d:ae:17:87:da:04:ae:d0:22:05:d1:86:c5:fe:
8b:0d:f6:f1:c1:fd:ce:52:a7:1d:ce:32:bc:20:28:2a:45:5b:
77:92:56:99:45:ed:4b:9d:50:76:b0:ca:bd:89:c2:cc:49:48:
24:6b:2f:0f:7e:f3:57:f2:03:fe:0e:fb:ae:87:c8:2b:94:f9:
56:30:28:50:2b:12:23:8b:47:97:e5:4c:6d:78:15:3e:67:44:
90:07:50:ae:54:53:da:7c:79:9d:4a:94:31:f0:6f:d2:e7:83:
e6:33:d4:38:91:93:bb:db:20:b6:dc:d0:30:f7:9b:fd:46:91:
7c:95:f6:a3:d2:81:2a:f3:89:e9:32:67:53:8b:6c:66:73:09:
4a:fc:26:28:ee:86:ae:67:4b:72:30:e1:17:c4:ac:29:f0:ec:
8b:4a:c5:1e:1e:59:88:16:0e:39:c8:1f:57:08:ad:b9:ba:db:
43:58:ac:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:13:08 2026 by rpki-client