Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.mft
File: Dxd9Rq5RS92RniRMevdK337bqNU.mft (raw, json)
Hash identifier: wNC7yD6Rni9LAzOQ4RWs8egi9eawTiYRVgbV87WGOVA=
Subject key identifier: 96:0E:7F:57:A7:51:98:D3:24:50:31:E7:7B:CB:14:58:33:D3:5E:29
Authority key identifier: 0F:17:7D:46:AE:51:4B:DD:91:9E:24:4C:7A:F7:4A:DF:7E:DB:A8:D5
Certificate issuer: /CN=0f177d46ae514bdd919e244c7af74adf7edba8d5
Certificate serial: 019F90FEB7EAA7AD4C0233E2112DEA49E1A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxd9Rq5RS92RniRMevdK337bqNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.mft
Manifest number: 01DE
Signing time: Thu 23 Jul 2026 22:00:40 +0000
Manifest this update: Thu 23 Jul 2026 22:00:40 +0000
Manifest next update: Fri 24 Jul 2026 22:00:40 +0000
Files and hashes: 1: 25aFLsrtr-3cg85dYuCtUtJ12DI.roa (hash: Q6BbhiSVhBcdb9sUM5J8K87QWD5MUDWEKTLkdgJwJhY=)
2: Dxd9Rq5RS92RniRMevdK337bqNU.crl (hash: 7HCZDyPb/H2tbrvptdnoEXAZjOzpAbsQc0xnDkEL7pI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dxd9Rq5RS92RniRMevdK337bqNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:b7:ea:a7:ad:4c:02:33:e2:11:2d:ea:49:e1:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f177d46ae514bdd919e244c7af74adf7edba8d5
Validity
Not Before: Jul 23 22:00:40 2026 GMT
Not After : Jul 24 22:00:40 2026 GMT
Subject: CN=960e7f57a75198d3245031e77bcb145833d35e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f6:19:49:4d:f0:71:70:9e:62:45:b2:a9:c4:
03:c5:da:61:46:12:ba:50:34:c3:8b:21:eb:62:6d:
2d:ea:0f:5d:42:50:da:52:04:a6:6c:2b:5a:09:81:
93:32:a9:a2:58:b5:a4:3a:97:e4:86:0e:fc:08:2a:
51:bd:ea:be:51:4f:f5:81:54:af:6a:dc:ea:77:4f:
12:91:f1:ac:dd:64:e5:0c:b5:76:d9:b5:b1:90:a2:
2e:cd:48:33:e8:df:b2:2e:99:ee:a1:04:ee:8e:40:
59:a3:5d:ac:9d:a3:e4:ad:82:e3:cb:35:81:78:f6:
d3:de:f9:e6:b7:7a:d8:fd:ec:39:67:a0:a4:32:cd:
12:a9:e2:41:98:df:4f:16:18:43:31:13:b8:43:1a:
f1:e1:e5:83:e8:1e:6e:89:e3:f0:9f:b6:a6:37:12:
51:8e:f5:32:0e:21:bc:93:bf:8e:1f:88:60:28:28:
ff:88:0b:c1:2a:90:0d:8d:ea:69:98:7f:c7:e8:ba:
eb:4b:4c:ec:48:32:f9:4f:bb:2d:34:b2:43:8c:77:
07:3d:ba:90:f1:6c:69:23:06:00:67:96:fa:a5:80:
4e:0a:5f:46:e2:12:e1:cf:0e:bd:a7:ad:8a:aa:c5:
b0:de:67:0a:3e:08:f5:a2:38:ab:70:13:69:d0:b5:
e0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:0E:7F:57:A7:51:98:D3:24:50:31:E7:7B:CB:14:58:33:D3:5E:29
X509v3 Authority Key Identifier:
keyid:0F:17:7D:46:AE:51:4B:DD:91:9E:24:4C:7A:F7:4A:DF:7E:DB:A8:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxd9Rq5RS92RniRMevdK337bqNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:87:2f:fe:23:ad:e3:22:7b:08:2d:ae:78:ca:19:8f:42:50:
a7:e4:ec:46:b4:4d:40:2b:fe:60:72:7e:a7:6e:32:b8:4a:98:
94:8c:4d:3a:94:fd:8a:b9:49:c3:f9:34:dc:13:2d:a0:bd:76:
d6:10:12:47:d5:b7:dc:18:07:d9:3d:1e:de:73:dc:4a:e9:30:
65:62:64:ff:46:19:78:cc:9b:cb:14:26:3e:49:5e:e8:82:8d:
bf:e4:db:11:be:cd:57:d1:a2:c1:85:fc:af:e7:15:2e:16:05:
84:23:3e:5f:ea:14:73:83:29:3b:b1:57:20:6c:ab:92:8f:0a:
9e:75:81:0d:7f:4f:24:e8:17:49:b8:6d:a4:7f:45:30:e7:cc:
d5:14:03:e0:20:79:bc:9b:28:77:46:7a:10:87:b7:25:e7:ee:
c6:90:38:44:80:60:2c:b7:69:56:c7:b4:43:2f:f0:5a:0b:68:
b8:7f:95:af:c5:8a:7a:1b:ac:f2:67:97:02:fe:c8:bd:76:e2:
8f:e8:ad:a7:4a:57:9b:6b:b6:b1:dd:07:2e:fa:d8:85:5b:49:
c8:37:39:c2:32:38:a4:fd:27:fe:60:82:07:5e:db:6a:ce:8a:
b2:93:01:5c:7c:07:4a:e6:b3:01:5a:32:80:21:86:da:17:05:
06:64:1a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:45:17 2026 by rpki-client