Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
File: dpjJmefwST7jZjTokrN8nzv5QH0.mft (raw, json)
Hash identifier: l+B0ABwBXe4IehlLdyuy7OJKZFxqtIVu7bL4UOMlt+Y=
Subject key identifier: D7:A1:82:4C:56:5E:D3:ED:BA:B5:BB:3F:B0:B3:38:B7:2B:90:00:55
Authority key identifier: 76:98:C9:99:E7:F0:49:3E:E3:66:34:E8:92:B3:7C:9F:3B:F9:40:7D
Certificate issuer: /CN=7698c999e7f0493ee36634e892b37c9f3bf9407d
Certificate serial: 019F8EA24EB67CF6C1D415404E74539D8C4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
Manifest number: 19C5
Signing time: Thu 23 Jul 2026 11:00:29 +0000
Manifest this update: Thu 23 Jul 2026 11:00:29 +0000
Manifest next update: Fri 24 Jul 2026 11:00:29 +0000
Files and hashes: 1: M14xo_CjfWqzAqnbxh_nHmNq1aA.roa (hash: 4CoJeZzMAxXXWnHh4hW+p8AyqZ5yU/74Z6UgXwaueCY=)
2: dpjJmefwST7jZjTokrN8nzv5QH0.crl (hash: r61kSoV9MaMZBR78x60MnxB2oJ8D5U3dqeWgmlQeOXU=)
3: xrp0HnIK2w9afEJM1GDVJOl5JvA.asa (hash: 55HCFpG/ZJNwGEZUAcO2TsiWkfEa5pv4wg7vR6XeG3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:4e:b6:7c:f6:c1:d4:15:40:4e:74:53:9d:8c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7698c999e7f0493ee36634e892b37c9f3bf9407d
Validity
Not Before: Jul 23 11:00:29 2026 GMT
Not After : Jul 24 11:00:29 2026 GMT
Subject: CN=d7a1824c565ed3edbab5bb3fb0b338b72b900055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:70:5f:e5:e1:6f:06:a9:57:ef:40:7e:2c:68:
b3:32:ce:41:3e:cc:79:11:93:91:55:2b:1e:f5:61:
24:18:e0:51:d5:8b:a2:78:cd:4f:59:8a:fe:31:bf:
83:94:83:2e:c1:44:6c:7c:e6:2b:93:ee:53:41:49:
ff:ca:e8:2e:18:b9:97:cf:cf:c0:71:ed:4a:a4:21:
2c:c9:47:d0:1a:d7:9e:cb:99:2a:4b:32:96:d0:bf:
44:cf:f0:f6:d4:bd:03:7e:b8:64:d8:00:43:ef:66:
4d:d3:c9:c5:9b:05:e9:b7:59:df:f5:f1:be:9f:1b:
47:8f:6b:f8:f0:3d:25:2c:51:d0:74:a1:90:7d:7a:
b5:7c:43:f0:37:f0:7d:8c:d1:13:0f:b9:03:a3:a5:
2f:00:85:cc:1e:d1:74:b6:b4:34:5e:e0:45:b9:8d:
4f:84:2f:e5:7e:5b:da:64:70:d5:33:76:cb:91:1d:
ca:1c:06:37:96:98:df:6e:c8:73:39:d8:12:1a:8e:
f4:0c:be:f7:60:e2:0c:05:24:38:e8:19:1e:b2:44:
60:78:d5:44:9f:0b:52:94:b2:7a:ad:78:78:5c:29:
50:d1:55:af:12:80:6d:0f:66:40:9f:7c:07:67:63:
ec:54:04:51:3c:1a:2c:9e:72:5f:c0:f7:44:05:0a:
df:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A1:82:4C:56:5E:D3:ED:BA:B5:BB:3F:B0:B3:38:B7:2B:90:00:55
X509v3 Authority Key Identifier:
keyid:76:98:C9:99:E7:F0:49:3E:E3:66:34:E8:92:B3:7C:9F:3B:F9:40:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:00:2e:a2:e8:dc:e0:11:73:82:ae:02:26:52:2a:98:92:b7:
4b:da:2b:0a:b0:d6:03:89:1b:21:2e:c6:d0:36:ed:b5:97:74:
83:57:31:9d:d5:07:34:91:4c:56:42:1f:6f:e2:d6:ec:78:d1:
e2:22:73:a5:7a:b6:56:3d:94:b7:15:d3:9c:0d:3f:82:3a:b8:
f3:89:b1:2e:32:12:be:c5:0e:c1:a9:78:13:d2:33:7b:23:04:
9c:1d:e5:0e:ad:17:a0:9d:83:0b:3f:7e:64:59:da:65:d3:2d:
23:ca:35:fb:5c:f8:02:cf:cb:8c:13:05:3f:7d:72:af:b5:22:
f9:95:98:9b:0f:de:f3:b0:c7:7f:0d:f1:11:44:1b:a3:2a:56:
b2:28:d6:35:af:90:fb:48:d7:05:ea:12:01:7f:d7:e8:75:f7:
71:ee:22:e0:d2:87:29:23:6a:ea:ef:ba:42:13:97:cc:04:70:
7f:3a:e4:41:15:a2:c1:69:1a:f9:d6:01:a6:8e:45:d0:f7:39:
33:f6:92:3b:6d:16:63:b5:a7:9d:ae:78:3a:2c:41:8a:42:8f:
70:ab:68:d6:ee:56:9c:8d:eb:c0:85:57:40:7b:ca:6a:39:76:
ce:f1:3e:63:d9:29:25:50:6b:90:c9:a4:e0:c4:82:ad:59:76:
20:79:5d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:15 2026 by rpki-client