Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
File: DlNS2UQbZcIBbtjrfi8jWVRDT10.mft (raw, json)
Hash identifier: Dn7gglzpm4J7WqIJbSmKWMggbCN+k+s1TcJEEWQKTGg=
Subject key identifier: 61:98:51:61:57:6B:9D:C2:64:1F:FB:B9:9F:58:23:72:57:9B:78:9C
Authority key identifier: 0E:53:52:D9:44:1B:65:C2:01:6E:D8:EB:7E:2F:23:59:54:43:4F:5D
Certificate issuer: /CN=0e5352d9441b65c2016ed8eb7e2f235954434f5d
Certificate serial: 019F95B72B9D27C31B9520BFA924833EC82C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DlNS2UQbZcIBbtjrfi8jWVRDT10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
Manifest number: 0570
Signing time: Fri 24 Jul 2026 20:00:36 +0000
Manifest this update: Fri 24 Jul 2026 20:00:36 +0000
Manifest next update: Sat 25 Jul 2026 20:00:36 +0000
Files and hashes: 1: 7HIHyHGDiVhFywfB2aUFsNjko-M.roa (hash: Iv4sArJJwlkOrpiX31eTz3pS1dqhRbw3dXCKTSlvosg=)
2: DlNS2UQbZcIBbtjrfi8jWVRDT10.crl (hash: SyHEjvZsveJOt6TFxfeVkWUhE6r/ZtIUQc5/7FUHw0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
rsync://rpki.ripe.net/repository/DEFAULT/DlNS2UQbZcIBbtjrfi8jWVRDT10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:2b:9d:27:c3:1b:95:20:bf:a9:24:83:3e:c8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e5352d9441b65c2016ed8eb7e2f235954434f5d
Validity
Not Before: Jul 24 20:00:36 2026 GMT
Not After : Jul 25 20:00:36 2026 GMT
Subject: CN=61985161576b9dc2641ffbb99f582372579b789c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:dc:f9:99:ca:4e:55:3d:ee:ad:de:e7:b8:24:
ba:97:ef:dd:bc:7d:85:21:c7:21:f5:94:71:8d:ba:
93:84:18:2e:57:f0:9f:86:ac:2c:a5:ab:88:45:6e:
e9:ae:02:5e:48:ed:27:ad:36:76:ae:63:24:e4:70:
db:fa:a9:9f:bb:e6:80:ff:95:88:bb:70:fb:a1:ae:
7c:22:29:8b:04:e2:01:d8:96:cf:88:d5:e2:9e:e5:
aa:3a:d1:c0:86:19:8d:63:7f:6e:72:e0:be:14:2b:
9f:35:fd:2f:6c:31:01:88:3a:59:d8:4d:ca:83:2b:
4a:49:ba:0c:fe:e5:4b:fd:6c:e4:9e:b2:bb:73:95:
33:93:97:7d:47:dc:40:53:15:4f:3c:70:71:82:34:
c2:42:55:66:61:28:dc:34:2d:1d:df:75:81:ea:b6:
ad:c6:05:9f:9b:c3:b0:e2:77:43:67:71:a9:1a:93:
f6:49:97:b6:95:ee:13:a5:6d:9e:8d:50:92:15:dd:
18:c0:f1:48:22:0e:78:ae:de:a0:7f:ce:24:52:bd:
e0:88:69:3e:64:ec:3a:20:d5:2d:59:b5:24:88:ad:
c3:2b:14:f3:9f:c2:01:e0:bd:71:1d:67:bb:b3:dc:
37:19:dd:66:24:d3:5e:f2:4d:e7:f6:ca:cb:ee:9e:
d1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:98:51:61:57:6B:9D:C2:64:1F:FB:B9:9F:58:23:72:57:9B:78:9C
X509v3 Authority Key Identifier:
keyid:0E:53:52:D9:44:1B:65:C2:01:6E:D8:EB:7E:2F:23:59:54:43:4F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlNS2UQbZcIBbtjrfi8jWVRDT10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:28:ec:19:40:c9:3a:11:41:d0:e8:3b:da:cf:2f:ab:db:7a:
bb:99:dd:1b:36:3c:1c:dd:42:3e:a1:a8:18:9e:08:16:c9:10:
ad:eb:96:4a:69:29:fe:ec:81:bf:04:bb:cb:47:6a:ad:c9:10:
47:17:33:a0:dd:52:29:80:e8:ad:d9:a8:a1:5c:4b:3e:1c:34:
df:3b:f2:0d:1f:7a:fc:a9:6f:17:f3:ae:2c:c2:ea:b3:e1:da:
a0:23:4b:00:05:05:01:33:be:2e:e1:16:5e:47:3c:b2:79:d3:
09:7a:3b:c3:29:00:96:24:46:12:0b:6c:cf:51:ef:37:f4:b8:
ae:8a:e6:dd:3f:b9:72:81:0c:39:03:a1:af:0d:e0:71:12:76:
c1:33:90:54:5d:1c:fc:aa:01:ce:d9:e0:a4:d5:87:5b:09:75:
99:8e:ab:2e:ce:e3:38:55:51:3a:26:83:87:08:45:31:a3:45:
ee:be:54:2d:6c:73:41:ff:e6:16:f6:27:9a:8a:8b:ce:b8:f3:
d8:dc:a7:db:c3:52:12:7b:2a:c8:f3:78:b0:b4:9f:7e:94:6d:
42:75:db:79:c9:3f:19:fc:c1:e6:4d:23:30:da:ce:c9:06:db:
6f:3f:05:d9:ef:93:68:f6:82:05:ec:9a:f9:36:72:96:80:35:
8f:53:59:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:25:26 2026 by rpki-client