Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
File: DSkZIlh_dQ94oZeVy9ibxymvF9U.mft (raw, json)
Hash identifier: 24oKO3tNmQyiY3yX5+GQrWrzcQ/U0tlqQoIp67sBKTc=
Subject key identifier: 99:F9:B1:50:C4:27:20:A7:EC:DB:A1:FC:1F:D5:F1:3C:A4:0F:C7:3A
Authority key identifier: 0D:29:19:22:58:7F:75:0F:78:A1:97:95:CB:D8:9B:C7:29:AF:17:D5
Certificate issuer: /CN=0d291922587f750f78a19795cbd89bc729af17d5
Certificate serial: 019F92ECE8C700385A217D9FDC1526C50A06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
Manifest number: 163F
Signing time: Fri 24 Jul 2026 07:00:27 +0000
Manifest this update: Fri 24 Jul 2026 07:00:27 +0000
Manifest next update: Sat 25 Jul 2026 07:00:27 +0000
Files and hashes: 1: DSkZIlh_dQ94oZeVy9ibxymvF9U.crl (hash: yFTUpsXf/r02E8kQg4PcUw3JfJtFgLhm6a2b58W6E3I=)
2: HumGUcM3JA5WttmoWk-JTSCdCgM.roa (hash: HnfAs+SxCScsW89JwwIoJO2V9u8mCg1vCQuYyQrU9JY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ec:e8:c7:00:38:5a:21:7d:9f:dc:15:26:c5:0a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d291922587f750f78a19795cbd89bc729af17d5
Validity
Not Before: Jul 24 07:00:27 2026 GMT
Not After : Jul 25 07:00:27 2026 GMT
Subject: CN=99f9b150c42720a7ecdba1fc1fd5f13ca40fc73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:87:53:94:d3:0d:7c:e1:f3:b6:99:00:2b:1f:
33:d9:7a:f4:67:dd:30:69:37:65:a7:f8:8e:80:0e:
51:84:2b:ae:61:15:fc:cf:b5:15:71:f1:b6:9c:c9:
8d:5a:a3:8a:96:44:22:e0:7e:cc:8a:26:23:38:98:
7d:ae:f2:c1:19:54:1f:19:d1:7e:ed:38:a0:5a:10:
a0:a3:88:55:f4:db:45:c8:0e:93:fc:e0:ea:f4:c6:
35:cb:27:71:e9:12:54:1c:99:63:80:34:d7:04:e5:
26:fe:56:c2:e1:3d:0f:5c:e9:99:d5:16:93:c8:1c:
78:0d:93:10:aa:04:a5:0d:06:bb:a5:03:dc:e6:27:
e7:3b:98:2d:f9:a1:d7:b4:f4:03:bb:08:bb:c3:04:
2a:6e:43:ea:37:2a:2d:4a:43:3c:a9:31:4f:33:e7:
50:28:8d:20:33:01:f4:5c:d9:d2:8d:ac:90:26:20:
e2:f8:0b:f0:e2:c8:a6:07:41:ae:cf:88:f5:17:f9:
07:a9:68:cb:e6:08:3d:f9:3b:f6:51:4f:25:7f:32:
ff:ff:59:51:ff:6e:bd:0b:b4:b9:15:8f:55:72:de:
47:ef:dc:23:fd:06:3f:fc:1e:4b:1c:18:93:a8:f7:
f0:65:b6:e5:d2:5d:12:4f:0e:13:73:87:fc:e6:b2:
6b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F9:B1:50:C4:27:20:A7:EC:DB:A1:FC:1F:D5:F1:3C:A4:0F:C7:3A
X509v3 Authority Key Identifier:
keyid:0D:29:19:22:58:7F:75:0F:78:A1:97:95:CB:D8:9B:C7:29:AF:17:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:af:26:64:26:6a:8f:0c:bb:0a:19:7c:71:69:9f:b7:c5:2e:
11:fe:cb:c4:b3:d9:a2:c8:64:07:17:cc:0b:a3:e3:f5:46:a6:
0a:16:ee:61:0d:31:94:1e:d9:03:72:8c:11:5b:58:38:bf:53:
82:b4:07:71:53:27:bf:33:7b:9b:0f:84:50:c7:28:b5:27:b5:
b0:b4:2d:6c:b5:a6:dc:c7:47:61:af:01:6f:4b:a1:09:24:eb:
9a:1f:63:d8:9f:21:29:50:9d:46:83:2e:52:32:d5:f3:7f:f1:
61:0c:27:a8:26:02:6c:a7:d0:57:56:9b:9d:ed:08:d3:f7:e3:
7f:07:08:8a:61:26:dc:c5:dd:9e:6e:91:c2:27:d3:26:cc:4c:
0d:29:73:9b:35:4c:d0:66:69:bf:33:f0:51:91:24:e6:31:59:
15:f9:93:93:a1:46:a6:0e:c8:43:ab:14:a7:13:17:33:af:06:
58:83:9b:5a:df:7b:90:b4:bf:c7:d9:2a:f3:4a:7c:13:20:ab:
8f:f3:b0:99:c8:c3:dc:c8:14:92:2a:40:45:a8:2b:a5:8a:28:
b1:92:ba:62:5d:15:b5:20:a5:c0:98:a8:05:f0:6b:f0:9b:82:
88:83:7c:bf:ce:14:3c:62:75:d7:b2:3a:33:c4:f4:e5:20:1b:
31:2b:14:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:04:29 2026 by rpki-client