Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
File: dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft (raw, json)
Hash identifier: 9df8zMTebx+dTfOlF1wvFe0FHWI2frxtPwuye+8oCOk=
Subject key identifier: 46:70:01:17:4F:09:29:94:79:C3:A9:B7:92:87:F8:3C:75:9F:02:C7
Authority key identifier: 74:E4:3F:9E:5A:E3:F6:EA:FB:50:68:AE:88:F1:8C:29:E4:43:59:07
Certificate issuer: /CN=74e43f9e5ae3f6eafb5068ae88f18c29e4435907
Certificate serial: 019F92486BD106C8D26770708C302712A545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
Manifest number: 19C5
Signing time: Fri 24 Jul 2026 04:00:47 +0000
Manifest this update: Fri 24 Jul 2026 04:00:47 +0000
Manifest next update: Sat 25 Jul 2026 04:00:47 +0000
Files and hashes: 1: T4BJnDBfE6AyBSAWAjPZ1GzLlMM.roa (hash: SXBhd3/vnyIoPB/kDRi62FVnMbysfno7J5T9Eftc8tY=)
2: dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl (hash: Zg6rY9PKrvyOY5TvhHKrhCUidwEaxEV0wIVnQSGyBOI=)
3: tSpDrZGtdp0mH1aXKivR6nDrhuY.roa (hash: xkSEr+C7WhhCLocSo1zhSLhZi6gcFYi1jnV4sR3gnUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:6b:d1:06:c8:d2:67:70:70:8c:30:27:12:a5:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e43f9e5ae3f6eafb5068ae88f18c29e4435907
Validity
Not Before: Jul 24 04:00:47 2026 GMT
Not After : Jul 25 04:00:47 2026 GMT
Subject: CN=467001174f09299479c3a9b79287f83c759f02c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f9:da:18:81:ea:a3:c7:12:b2:11:f2:e1:9f:
3f:c9:16:8a:e1:f4:6c:74:77:3d:91:d0:d4:80:65:
07:38:5f:9b:e8:52:8f:62:e5:ea:71:2f:ef:30:01:
c4:ae:39:ae:f5:9b:f1:f5:0b:00:25:20:eb:5c:2f:
f4:a2:04:9e:48:29:44:fa:d3:da:b2:15:c3:ae:16:
82:1b:d8:b2:df:dc:b0:5c:31:78:4c:fb:c1:c0:94:
d9:95:33:e7:91:40:a4:84:44:a2:2a:98:1d:9b:97:
78:67:89:82:c4:d6:b7:58:7e:6c:d2:b7:77:7d:bb:
46:55:0f:19:d8:1f:ab:00:c7:e6:6d:9c:22:84:cc:
a8:c2:c0:36:9c:20:c4:90:33:a2:1f:62:ff:9f:b5:
6e:ae:89:4b:9b:44:99:00:52:bb:63:39:23:de:c3:
7e:64:6d:24:e8:3a:73:cd:ea:80:ee:f6:ea:f7:30:
76:7e:c8:58:20:81:e8:c9:8b:d8:5b:79:1f:ac:50:
4e:ca:15:c3:3e:bd:8a:0f:0b:9e:fb:df:24:e1:78:
23:ec:b3:04:8f:b1:fb:a2:b6:ff:e0:90:61:85:3c:
3b:f3:34:96:ea:cf:51:ea:8f:74:c0:a8:6e:a3:13:
a0:d3:6f:d0:d3:f7:5c:41:69:c0:ba:ad:70:9c:f5:
4f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:70:01:17:4F:09:29:94:79:C3:A9:B7:92:87:F8:3C:75:9F:02:C7
X509v3 Authority Key Identifier:
keyid:74:E4:3F:9E:5A:E3:F6:EA:FB:50:68:AE:88:F1:8C:29:E4:43:59:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:1e:14:17:d0:9e:90:20:b9:07:ef:4a:07:1e:8f:0f:6a:6e:
a0:15:38:1f:ce:b6:aa:6f:75:b0:3c:e0:45:61:84:39:b1:14:
eb:47:5c:c7:d8:c1:e5:bb:69:72:5e:dd:2f:5c:df:23:e8:86:
e4:1d:6c:e0:ec:19:a9:09:9e:54:53:31:c1:5b:65:a4:f0:74:
da:df:00:d7:b0:71:ed:13:7b:dc:ac:a4:a4:a3:06:bd:48:3a:
35:a5:13:0b:ec:5b:5b:65:14:7d:c4:5d:b9:b1:3a:1e:d7:fe:
e5:4a:b4:d5:b4:9a:a2:18:2c:74:c7:03:4b:df:d3:df:55:7e:
48:2a:60:8b:01:3e:19:6c:33:2d:e8:73:34:99:7b:20:7d:92:
d7:b4:5c:61:9f:6c:85:77:c6:2a:ff:29:03:4d:df:cc:e3:04:
06:db:9f:98:6c:e2:31:3f:b4:ff:70:0d:25:f6:be:ac:ce:d9:
f0:e2:63:c9:eb:d5:18:bf:a6:26:ec:12:bc:0d:40:f1:08:69:
bb:41:28:91:c1:e3:e8:60:2b:ef:0b:f6:54:17:ba:de:fd:ca:
b1:8f:31:af:14:87:7f:85:59:fb:a1:c6:e8:b6:a9:19:fa:ce:
70:67:a7:2e:dc:e5:f9:27:84:12:b2:88:72:59:63:ca:63:ef:
4f:d0:ca:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:43:19 2026 by rpki-client