Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
File: dz4yeLqiScFN5gXclkssJ1Xf7Po.mft (raw, json)
Hash identifier: dgYJ9ZRlNkdvwV/3XW4OQAr1zg9wunWT4FUwkMPzEag=
Subject key identifier: 71:C2:DD:03:68:CF:D1:2B:0E:8F:63:3E:AF:12:97:B6:31:B3:07:EB
Authority key identifier: 77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
Certificate issuer: /CN=773e3278baa249c14de605dc964b2c2755dfecfa
Certificate serial: 019F91DADD44A3EA7406D9C52D1F17AC0F7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 02:01:07 +0000
Manifest this update: Fri 24 Jul 2026 02:01:07 +0000
Manifest next update: Sat 25 Jul 2026 02:01:07 +0000
Files and hashes: 1: Y_fqc1nYjxTRaHLL2ccHIWZVkc0.roa (hash: OwxH8E+Mnn4pbwr5I/vFQZ5F7TZIKEUW26OHA8q7WcM=)
2: dtT-U90eIRyxx5lsS__59NnNKf4.roa (hash: 5Ql6EQRlS1tFtGixp+Tf3oCCuYt86aZDSF1fLpUGr2A=)
3: dz4yeLqiScFN5gXclkssJ1Xf7Po.crl (hash: I5+6EKbPWQH27huDrPee9F3a81lBcwJSreoa9Hzz2MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:dd:44:a3:ea:74:06:d9:c5:2d:1f:17:ac:0f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773e3278baa249c14de605dc964b2c2755dfecfa
Validity
Not Before: Jul 24 02:01:07 2026 GMT
Not After : Jul 25 02:01:07 2026 GMT
Subject: CN=71c2dd0368cfd12b0e8f633eaf1297b631b307eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:52:b7:f0:45:87:88:9c:97:dd:0b:a0:e9:1a:
f7:ba:68:e5:ac:99:4a:e7:e1:84:32:34:bc:4a:1e:
00:85:be:a6:67:34:f2:75:bd:63:cc:66:c4:31:09:
15:eb:12:85:df:3b:a5:63:73:8e:79:b4:6c:0c:fd:
03:f9:d7:65:a3:74:91:81:90:a4:d7:6b:1b:b6:81:
08:7b:3a:6d:4a:ee:5a:21:f2:bd:14:cb:03:1e:2f:
57:e0:d1:36:b3:95:9e:25:b4:b2:92:05:b0:85:1a:
3a:a9:cc:06:bc:1e:cf:78:56:cc:a1:ba:f6:94:05:
3f:f2:73:c9:25:54:36:1e:9e:c0:02:69:a8:33:18:
98:39:90:5d:c2:cf:33:e6:e7:64:2d:93:3c:30:93:
02:ae:9b:f8:4b:b8:7a:b3:81:05:ec:4a:c0:e3:20:
05:6e:bf:6e:50:52:a1:ef:26:51:47:df:ba:4a:55:
b4:fc:3c:13:f0:80:d3:af:e1:16:94:2a:38:1b:af:
7b:29:cb:94:dd:e7:44:6f:2d:bf:ea:bd:c1:69:62:
5f:c7:9f:c3:13:7f:ca:8b:23:b6:58:6e:31:37:d6:
b2:88:18:13:8c:24:52:ea:7e:e8:6e:58:df:3d:3c:
94:ac:53:d1:3d:88:ff:20:0c:5d:ca:e9:15:1d:46:
d7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C2:DD:03:68:CF:D1:2B:0E:8F:63:3E:AF:12:97:B6:31:B3:07:EB
X509v3 Authority Key Identifier:
keyid:77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ad:9b:f4:6a:5b:d0:58:d1:4a:39:c5:22:75:51:07:9d:f1:
89:55:50:df:48:c6:31:92:c7:70:51:6f:59:1a:92:3b:30:73:
ab:bc:2a:ca:c2:e9:84:84:a5:6b:7f:15:c0:60:71:10:9f:86:
c5:22:10:5e:55:24:15:f7:fd:45:63:0b:6a:29:a2:25:22:56:
b1:df:f0:75:58:d3:d2:e1:35:73:54:47:68:c2:7d:24:c9:05:
63:ed:d8:6f:75:68:f6:58:47:c0:5d:91:e7:1c:19:01:94:6e:
0e:6e:d3:06:f7:73:a4:81:c7:88:68:76:46:53:41:b0:9b:dd:
72:e0:9c:80:be:11:6f:52:32:90:ab:8d:00:e0:c4:4e:f0:c7:
a1:ac:73:f0:2f:cc:8b:4c:ef:c2:04:3f:38:f1:fe:f6:89:cf:
bb:2f:e7:41:14:1b:f8:8b:e7:c4:cc:15:fc:1b:b2:01:b1:69:
98:ce:78:59:ee:36:67:e4:5e:fc:61:13:33:97:b5:c1:bf:1c:
74:2b:0d:f8:9c:2a:c5:29:39:9a:2b:95:a0:25:23:f2:59:96:
a3:aa:c6:ba:64:4a:99:24:79:ac:bd:e7:b5:4f:a4:00:5e:1e:
f1:92:f4:15:93:2c:2b:f2:a8:28:3a:63:8b:a5:af:6d:29:d4:
a3:3c:ab:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:59:36 2026 by rpki-client