Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
File: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft (raw, json)
Hash identifier: byuETWaEXK0eeG2qf5NupEpozEVi7rW/iZ5zapiOWs4=
Subject key identifier: 7A:9C:D6:1A:AB:68:1B:82:E1:CD:12:57:1D:A3:0A:F3:29:8F:7F:2C
Authority key identifier: 0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A
Certificate issuer: /CN=0c5e870d31ca7019951370cb221f18f1f09fa58a
Certificate serial: 019F90FE8EDF7ACF9516D83B922BCA2616C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
Manifest number: 19CA
Signing time: Thu 23 Jul 2026 22:00:29 +0000
Manifest this update: Thu 23 Jul 2026 22:00:29 +0000
Manifest next update: Fri 24 Jul 2026 22:00:29 +0000
Files and hashes: 1: 1TwtEwBMlCxF8zqgEDzuBJ_MkQk.roa (hash: TD25ePA+FEqAqKpKYIGbiC60SkZANZcldOpqjTjdHRs=)
2: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl (hash: FkqNI7cZGPgzWYdEMdFZrE6a9z+YoSAi8Aq7R+MS9O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:8e:df:7a:cf:95:16:d8:3b:92:2b:ca:26:16:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5e870d31ca7019951370cb221f18f1f09fa58a
Validity
Not Before: Jul 23 22:00:29 2026 GMT
Not After : Jul 24 22:00:29 2026 GMT
Subject: CN=7a9cd61aab681b82e1cd12571da30af3298f7f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c0:aa:4e:f2:a0:98:c4:08:b9:ed:3c:8e:b5:
a0:95:6a:ed:a7:c1:c1:b1:de:b1:36:10:bd:90:e6:
30:57:49:ea:a4:42:54:b4:d5:7b:ef:1b:cc:0a:64:
5d:b4:7d:f2:d5:2e:d7:cf:03:2b:06:13:65:28:58:
28:b0:71:f2:ad:ae:69:52:2f:7d:9f:2a:ba:88:fc:
39:61:d9:74:6e:94:6b:f2:14:41:cb:f0:ad:9d:f2:
66:80:82:71:0d:e1:27:ac:e8:2f:96:a0:25:e2:9d:
89:c3:ea:19:d3:ce:81:2d:22:c9:de:48:f9:fc:0c:
24:00:14:ef:c7:ce:ff:a4:48:77:82:e8:2c:ba:f5:
7f:dc:47:8e:4f:7c:c0:c0:28:56:a0:ff:54:2e:c5:
8a:75:3b:67:a4:ed:68:4a:fe:06:0c:c7:0a:ab:9f:
08:0a:85:52:92:bb:9f:52:c3:6b:63:bb:5a:21:4f:
39:37:07:5f:91:9a:37:ee:9e:20:24:52:e0:39:dc:
5d:38:75:ba:aa:34:29:aa:d8:54:2a:c1:a2:9f:af:
ec:cb:50:de:8c:b6:ba:8e:79:22:82:00:22:03:42:
72:2f:56:74:0a:29:bc:d9:9d:f0:a3:9d:c8:1e:47:
c5:c3:21:18:b5:c3:a6:8d:ad:6a:dd:e2:4d:90:5d:
cd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:9C:D6:1A:AB:68:1B:82:E1:CD:12:57:1D:A3:0A:F3:29:8F:7F:2C
X509v3 Authority Key Identifier:
keyid:0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e7:3e:fd:d6:9a:9f:3c:80:45:6c:2d:fe:4b:06:fb:7a:36:
ac:31:4b:d2:94:fa:82:19:c6:4b:9c:e5:99:4a:b0:0b:61:1e:
57:b8:2b:50:3e:22:70:0c:ed:2d:7f:42:0a:10:fd:f2:c2:4e:
05:a0:b2:78:5e:df:ba:8f:49:e6:8d:11:20:4a:fd:87:31:9f:
24:fb:63:7a:a3:49:ed:d0:8e:07:4d:3b:d2:01:7a:34:f8:36:
c7:c4:d0:49:d1:df:db:26:76:62:28:c3:52:e3:ce:03:d0:15:
f4:03:ea:de:f0:fc:89:b5:08:e5:5e:e3:dd:31:4b:00:f0:6e:
8e:0f:34:82:25:bf:d6:6d:ad:c6:73:7d:3a:36:43:8e:36:a1:
29:8a:2f:36:44:55:41:a6:fb:e9:00:3e:32:01:25:76:c4:6e:
f2:80:e7:8a:3d:f1:57:47:e2:3f:e2:d8:98:fe:a6:14:28:05:
53:0b:52:65:4d:42:1e:51:e3:cc:70:df:1e:db:26:19:26:bf:
92:bb:c9:64:4d:91:c9:d9:e8:fe:6b:3e:78:cd:45:72:01:aa:
ce:14:88:d5:c0:d2:60:6b:18:92:96:a5:8d:38:b0:cf:af:2e:
b6:28:d3:74:a8:07:17:a9:e0:fb:03:ae:a5:6b:d6:1f:bf:be:
a5:b9:6f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:45:36 2026 by rpki-client