Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
File: dRSDZVs1orhHGF9onI_RYB3McYc.mft (raw, json)
Hash identifier: 2ZifVCgak3OO/CbMpGb6fw38mpmLNxayFp9RFip3ky0=
Subject key identifier: 91:EE:29:81:0B:5A:7E:29:3E:B4:D2:48:DD:74:B8:CF:8A:38:D7:3C
Authority key identifier: 75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87
Certificate issuer: /CN=751483655b35a2b847185f689c8fd1601dcc7187
Certificate serial: 019F8F100C0B4FDD9652887FCC1B1866CEE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 13:00:21 +0000
Manifest this update: Thu 23 Jul 2026 13:00:21 +0000
Manifest next update: Fri 24 Jul 2026 13:00:21 +0000
Files and hashes: 1: as_rlXqJ-9X5yyFioptlwk_3ywE.asa (hash: WOqxDpfG0009xOfBOkYF5jMYghhxHEkdiXrFFzH+iVs=)
2: dRSDZVs1orhHGF9onI_RYB3McYc.crl (hash: sr1KswNPtar1x8dOJMKCkvqkgVzN3xNCN1xgYF4XOFI=)
3: mCi8IXM78zEe8k6a11x1wQYJJHk.roa (hash: XXRc/LdihJuiCQ6i4r0S3QErFt5j7/TSAtBg4nnm1BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:0c:0b:4f:dd:96:52:88:7f:cc:1b:18:66:ce:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=751483655b35a2b847185f689c8fd1601dcc7187
Validity
Not Before: Jul 23 13:00:21 2026 GMT
Not After : Jul 24 13:00:21 2026 GMT
Subject: CN=91ee29810b5a7e293eb4d248dd74b8cf8a38d73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ce:8d:25:50:da:f3:60:bf:14:7b:9a:af:53:
ab:4c:0e:03:57:23:cb:dc:fd:56:22:a7:95:a4:96:
0c:15:6f:3e:c9:2a:90:07:c2:c4:1e:6e:a7:0f:28:
4a:69:dc:1a:73:aa:45:df:3e:30:68:d1:37:81:ce:
3c:b1:ca:cc:db:48:ad:ba:c5:b6:52:a6:bc:30:a7:
1d:1a:08:5f:b4:10:2c:f5:28:03:f1:82:16:73:b6:
6b:1f:03:22:44:78:52:75:80:25:d8:fc:56:40:d1:
a3:8a:03:fc:df:87:a7:84:8a:31:34:fb:58:cd:ec:
23:b0:d8:44:73:6b:32:9b:ce:6e:6e:c9:a7:49:17:
69:80:28:f6:44:0a:a9:0e:dd:e5:fb:c9:d8:1f:3f:
e5:5b:ef:13:5f:f6:64:1a:0d:6e:93:55:72:6d:db:
14:02:07:17:04:76:9f:90:fc:16:09:7d:0b:51:68:
57:6d:2e:9f:4b:a6:41:30:c6:46:30:02:58:62:e9:
11:70:3e:c4:7e:aa:2e:f9:b0:04:d0:d1:9d:9f:68:
9d:91:cd:03:a9:b4:6f:95:f0:53:e9:3c:cb:06:3e:
b0:98:7c:3a:4d:16:7a:54:b4:c4:ef:f1:f0:51:c8:
1f:47:d4:6c:33:56:e1:1e:ac:00:70:11:9b:00:8b:
4a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:EE:29:81:0B:5A:7E:29:3E:B4:D2:48:DD:74:B8:CF:8A:38:D7:3C
X509v3 Authority Key Identifier:
keyid:75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d9:1a:43:16:a1:1c:ff:1e:ce:54:10:bd:47:94:a2:a3:d1:
0f:53:76:0c:0a:a3:98:45:17:13:d2:b9:5b:69:b0:3d:1b:e2:
0e:51:a1:a7:25:af:bf:55:15:1f:29:ad:7c:a5:c5:37:f6:8f:
f6:be:70:14:b6:e7:0c:43:82:00:3e:07:59:78:8d:37:a4:04:
a8:94:f2:32:84:a6:76:c3:8b:cc:ae:07:d7:d3:4d:93:9c:30:
09:93:ca:b9:74:e1:c8:c3:68:ac:dd:28:ed:39:f2:01:33:97:
ac:e6:31:2e:23:17:30:16:67:9c:d8:06:f8:e2:95:4a:51:76:
2a:ba:3c:91:6b:8a:b3:3e:f5:16:1b:d3:2e:0a:45:d2:5e:a5:
d3:97:ad:b1:8f:1b:74:7e:3d:0a:1d:c5:cc:82:c2:42:cf:01:
fd:81:69:7f:b8:d1:94:51:87:82:3c:ec:7c:79:dd:68:dd:ae:
02:8f:ba:fd:9e:4b:02:a6:04:f9:cf:80:2c:b8:0b:f9:a3:ec:
89:ab:93:34:e3:63:44:2b:a1:13:63:5a:44:88:7a:b9:86:37:
ad:3e:7f:b4:f9:7d:72:94:c2:f7:dc:21:46:97:07:dc:20:ee:
19:8c:af:95:1b:72:2f:06:04:da:27:eb:4a:ad:77:19:01:73:
2a:d4:8b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:08:23 2026 by rpki-client