Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
File: dxBykg2MmitA6zoEXx8qbjNKRJY.mft (raw, json)
Hash identifier: mm6DwveN5rAYXEJiqXLFsmInWiRhv3H8cKWfHOAErmY=
Subject key identifier: 03:F0:7B:AA:72:AE:D2:17:67:43:02:21:7F:05:B0:FF:21:E4:78:2D
Authority key identifier: 77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
Certificate issuer: /CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Certificate serial: 019F94DBA7886CA5C0F193FFD4B8023C263D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 16:00:50 +0000
Manifest this update: Fri 24 Jul 2026 16:00:50 +0000
Manifest next update: Sat 25 Jul 2026 16:00:50 +0000
Files and hashes: 1: dxBykg2MmitA6zoEXx8qbjNKRJY.crl (hash: yO9O/bnd8cjYb71fNmsajjv1XVDU0YNTedD1l/xdLrM=)
2: qMa40C2bwbsuAhlKHVj7zBev3Sk.roa (hash: Q1yI4h86YGsQR3DwWZlfSBoYmM0cIR/AXm0wW8+aF5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:db:a7:88:6c:a5:c0:f1:93:ff:d4:b8:02:3c:26:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Validity
Not Before: Jul 24 16:00:50 2026 GMT
Not After : Jul 25 16:00:50 2026 GMT
Subject: CN=03f07baa72aed217674302217f05b0ff21e4782d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:17:2c:5e:aa:9a:21:cb:a2:2d:f1:f5:c9:4f:
25:a0:ea:53:fc:36:7c:8d:2b:36:5b:1d:fb:10:5f:
26:7f:75:19:a2:89:b1:c3:c9:18:a1:4c:5e:5d:9f:
82:02:62:15:7c:77:f2:fd:58:68:c6:c0:5f:19:b4:
0c:76:92:9c:e9:0f:5a:cc:28:b5:bf:f2:c9:bd:2c:
58:6f:7f:71:55:94:c4:2f:05:56:7e:a2:a0:d4:70:
70:d8:0c:fe:b9:41:75:fd:79:bf:f3:67:44:41:f0:
5a:0f:6a:fc:04:13:bc:57:43:7f:0f:d7:d4:bc:9d:
4c:96:ed:95:b8:e3:b4:56:25:76:b9:30:f6:44:27:
2c:19:ab:c7:0d:11:b5:45:f7:b7:69:db:e1:f2:99:
45:aa:e7:37:5e:ed:7a:08:05:07:76:ee:f6:25:d3:
c9:95:4c:a8:4b:4b:9b:6f:db:16:d0:84:f0:55:74:
2e:5c:62:06:28:37:2d:ba:bf:d7:aa:e3:cc:7a:34:
44:e3:1a:e4:93:bc:40:6d:fa:11:c5:bb:87:dd:57:
e2:94:91:24:5d:5b:e0:c2:bc:b6:51:5d:67:7a:9b:
f1:d3:37:ec:72:70:69:d4:f3:d1:31:0c:1c:e8:ba:
e6:e6:bd:39:8c:e9:ba:42:47:4d:5b:2a:19:af:ed:
0b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F0:7B:AA:72:AE:D2:17:67:43:02:21:7F:05:B0:FF:21:E4:78:2D
X509v3 Authority Key Identifier:
keyid:77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:4c:a1:6c:7b:15:ed:4b:cf:cd:a0:27:7c:d7:19:8e:ef:92:
c0:84:76:ba:ca:ec:07:85:fe:cd:bd:82:a5:37:7d:94:ee:41:
f3:bd:cb:a8:16:07:08:9e:a9:1d:25:6a:f8:73:64:84:2c:dc:
a6:61:54:81:f2:19:58:cd:7a:02:c1:e9:2c:79:87:5f:2c:48:
49:4b:57:e5:1a:bc:b3:3e:a8:53:a1:40:9a:cb:91:9f:d8:50:
5a:fa:bf:be:32:23:1a:86:a3:46:53:4b:85:2a:d5:99:6b:6e:
b3:08:96:72:3a:0d:34:28:eb:d3:eb:2d:6f:13:dc:70:48:75:
b3:4d:7f:a6:b4:76:e9:1d:43:01:6f:3e:07:bd:fc:57:2b:61:
5b:0b:eb:f0:f5:bb:52:ca:f0:d5:91:1c:4d:50:c8:2a:a4:ce:
d6:cf:a9:14:ab:30:f1:23:de:cb:3c:b9:6d:c0:1c:65:28:3a:
31:3e:80:41:46:1a:b6:5c:8d:5c:10:2a:8e:af:38:89:ae:2e:
f8:43:fb:37:1f:c6:f4:a3:ef:86:27:e1:5f:3a:51:6b:79:d3:
57:9e:d4:2a:18:48:51:c8:72:5f:7f:a6:48:ca:02:77:99:bd:
bc:cb:5a:4d:f7:55:83:fb:e4:72:e7:fb:ce:81:8d:0c:07:e4:
7a:a8:52:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:16:11 2026 by rpki-client