Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
File: _Dq1XVdQnL-ueYvXGqojs0RNjlo.mft (raw, json)
Hash identifier: tFmyAC8GkzMeXJFt5w5SF+kkFPh0DHuTXn9bBKXSHH8=
Subject key identifier: 8C:CD:AA:0C:F8:07:18:CD:29:CB:A8:D3:29:E5:BF:6C:C3:2F:FB:5F
Authority key identifier: FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
Certificate issuer: /CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Certificate serial: 019F90FF123488B7B46FA365817BAFCC03DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
Manifest number: 0A2E
Signing time: Thu 23 Jul 2026 22:01:03 +0000
Manifest this update: Thu 23 Jul 2026 22:01:03 +0000
Manifest next update: Fri 24 Jul 2026 22:01:03 +0000
Files and hashes: 1: _Dq1XVdQnL-ueYvXGqojs0RNjlo.crl (hash: cnGYg4yNWEgXe7qJp+hnauL+vXrX4xvSoYtb0XpmlV8=)
2: bdFa7noc5JULgEIUUp2O_nnsfX8.roa (hash: oE4E3OOq0qDI/T3VHEtrFh4lpygnjYYLcPsEtbasbyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:12:34:88:b7:b4:6f:a3:65:81:7b:af:cc:03:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Validity
Not Before: Jul 23 22:01:03 2026 GMT
Not After : Jul 24 22:01:03 2026 GMT
Subject: CN=8ccdaa0cf80718cd29cba8d329e5bf6cc32ffb5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9e:e0:70:06:85:08:a1:a2:8e:61:b3:4a:00:
98:fe:f6:38:11:c2:64:32:b9:56:af:63:0d:90:80:
63:91:78:39:3d:58:97:fb:43:3b:d9:ef:df:94:d5:
91:43:47:7e:b2:9b:ac:22:17:33:43:40:6d:eb:60:
a3:a4:a3:4d:3b:45:fc:03:bc:fa:c6:d9:b5:2b:2a:
e7:92:f7:5a:da:58:a3:2b:5a:78:95:5a:53:56:79:
b9:77:ac:24:39:3a:7f:86:12:bf:2c:d7:cb:f2:bf:
81:e3:03:e5:97:5d:49:dc:16:c0:77:1d:ea:65:92:
73:ca:e5:69:74:17:0d:05:a2:5e:51:ff:ab:09:8a:
55:98:d7:f3:2b:e0:8e:88:2b:ed:f2:5e:43:42:1b:
79:5a:3b:92:ad:b3:29:d7:0a:ee:cf:bd:da:cc:ed:
d5:99:9a:7e:43:d7:ee:25:7c:61:5b:8f:8f:f4:bc:
52:7e:de:a2:d9:e8:1e:6f:e9:d3:a3:e4:0c:d8:36:
32:63:80:1a:3a:10:07:0d:6c:7f:22:4e:55:3e:7c:
30:71:18:b2:97:f8:cb:f5:0d:6a:64:7f:eb:27:86:
3a:e6:4f:e0:6a:89:ce:9d:a2:a6:81:fc:a3:a5:cf:
a5:40:9f:09:5c:95:b9:ed:44:e9:61:32:c5:db:b4:
0b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CD:AA:0C:F8:07:18:CD:29:CB:A8:D3:29:E5:BF:6C:C3:2F:FB:5F
X509v3 Authority Key Identifier:
keyid:FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:cd:55:da:66:5d:54:01:f4:68:bd:1d:ea:e1:a4:71:da:13:
64:df:bb:ce:d4:75:f2:68:ad:f8:5c:2a:87:5b:eb:b3:98:56:
06:93:34:0b:61:a1:25:ee:2a:0a:66:68:8c:a4:7e:f6:a6:8b:
ff:9e:e4:26:74:b9:af:d0:70:70:f0:a2:b5:f5:44:75:ca:61:
63:27:0f:5b:6e:2d:28:64:1c:31:0a:24:06:1a:ff:c6:b5:a4:
3b:0e:c5:52:51:4c:54:5d:71:88:cc:93:d4:0f:45:39:12:eb:
58:35:e4:50:79:2b:07:9d:d1:95:25:55:f8:b6:b9:0a:7d:5d:
59:ab:44:40:4b:89:f5:fd:92:15:38:38:26:fb:a4:a7:6a:3e:
18:33:67:68:29:11:e5:d1:ba:a4:95:0a:b9:67:63:78:10:90:
96:f7:b8:43:a4:ff:41:c7:ec:46:35:49:40:68:a8:f0:b7:3d:
ff:76:d9:5d:a9:41:2d:12:f6:2c:2c:48:79:c1:31:2b:5b:2d:
0b:44:a7:cf:26:8a:79:cd:4d:41:76:0c:bc:bd:c6:85:63:7c:
68:e2:a9:be:27:91:31:a0:bf:ae:30:ea:d7:07:4f:42:8d:7a:
1c:3f:25:e9:19:f4:73:53:c6:12:29:35:62:b9:af:9c:0b:42:
a6:c8:4c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:08:39 2026 by rpki-client