Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
File: DJvBsU8NllP1FOwWd3G3dVmsY8w.mft (raw, json)
Hash identifier: yRYnUUtZ0VDczXaepcjo1SNa7rFUAeWQ/zcJKgZKjds=
Subject key identifier: F1:FA:76:7E:CC:A0:2F:CC:9B:BB:19:59:3C:3C:BA:07:A5:4E:06:72
Authority key identifier: 0C:9B:C1:B1:4F:0D:96:53:F5:14:EC:16:77:71:B7:75:59:AC:63:CC
Certificate issuer: /CN=0c9bc1b14f0d9653f514ec167771b77559ac63cc
Certificate serial: 019F8FEC283C41D554832E835B9BD9F20497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 17:00:46 +0000
Manifest this update: Thu 23 Jul 2026 17:00:46 +0000
Manifest next update: Fri 24 Jul 2026 17:00:46 +0000
Files and hashes: 1: DJvBsU8NllP1FOwWd3G3dVmsY8w.crl (hash: MGXrHmx2oJ+rnW+nMYi+CIsgbHXdD//VbrdZJHPaLgU=)
2: USkUk1O_55dbtUL8NgX3D9MuJlk.roa (hash: l0RD4Yub4vls7PSxviu1JxH4TvO1gXOCiQ61YNO4X7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:28:3c:41:d5:54:83:2e:83:5b:9b:d9:f2:04:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9bc1b14f0d9653f514ec167771b77559ac63cc
Validity
Not Before: Jul 23 17:00:46 2026 GMT
Not After : Jul 24 17:00:46 2026 GMT
Subject: CN=f1fa767ecca02fcc9bbb19593c3cba07a54e0672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c1:63:8e:87:dd:7b:54:86:23:f6:80:de:f2:
89:40:3f:70:ae:6a:b4:11:dd:e5:3c:ab:ab:a4:ef:
1f:e5:9c:d9:b7:f5:ea:76:6b:70:51:16:31:ac:9c:
2b:6f:5e:fd:ac:61:ca:7e:51:0e:e2:87:44:ea:4e:
08:3c:58:64:a2:cd:2b:15:3b:cf:aa:86:d4:a3:be:
27:3d:62:22:bc:35:34:5b:5b:fe:6b:61:4d:18:c0:
4c:82:99:21:6c:3c:a6:f7:da:bc:6c:3e:77:ab:de:
03:58:c6:4f:f3:c6:a9:10:67:55:b2:ce:55:b5:e0:
57:06:69:5c:5c:8e:a0:b5:08:46:44:84:5e:88:cb:
f5:82:64:3a:2a:f2:cf:ab:08:6d:0f:f2:73:77:f9:
57:29:cd:93:ff:72:7d:e1:2f:cd:22:15:73:ec:da:
fc:af:a9:10:6e:f8:8b:35:90:5c:b1:a6:d8:35:3e:
68:39:b5:48:1d:79:54:53:43:5f:0a:c1:9a:8c:d9:
80:c1:43:a3:cf:ee:b1:17:ea:c2:8d:e6:3d:a7:f4:
80:17:e6:df:b0:2a:fa:6e:9b:fe:69:58:59:11:55:
cb:1e:f3:6c:a2:20:44:d7:01:b0:54:67:43:67:09:
c1:c6:a8:1b:42:a9:5b:a2:8b:9f:9f:5a:78:ee:50:
db:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:FA:76:7E:CC:A0:2F:CC:9B:BB:19:59:3C:3C:BA:07:A5:4E:06:72
X509v3 Authority Key Identifier:
keyid:0C:9B:C1:B1:4F:0D:96:53:F5:14:EC:16:77:71:B7:75:59:AC:63:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ec:95:13:53:54:c3:f8:81:54:92:6e:4d:68:c0:45:87:e4:
1b:ef:1a:3c:29:58:f7:16:2f:50:8b:ce:c9:16:0f:bb:68:35:
e2:57:48:bc:4d:d8:f7:1a:60:c9:98:76:41:b9:07:c8:06:94:
3b:eb:b0:3d:9f:39:27:f7:7e:0e:0b:51:74:84:57:f1:77:87:
99:eb:94:6d:b6:ba:ef:ff:49:e6:99:f6:4c:c4:d3:d1:15:7f:
db:cb:88:fb:fe:41:4d:93:fd:fa:68:7d:3b:0e:29:e5:b7:72:
f8:df:8c:e9:0a:8e:66:e2:10:a8:f6:2e:68:f3:db:f3:88:26:
71:0c:a0:f7:10:06:10:9f:af:25:7c:70:e8:c9:b7:c1:09:d5:
c9:c6:e6:68:79:7d:a2:07:3d:e0:4b:4d:6f:c9:db:d5:61:e0:
c2:b6:67:e4:b3:50:7e:b7:a5:46:a9:87:8d:f4:10:2c:5c:a6:
16:2c:fd:87:fe:0b:ea:20:ab:7b:35:2d:f6:08:55:2f:f3:41:
25:a2:96:f0:9e:57:ec:d6:be:8a:c2:ce:eb:40:4a:1f:7d:33:
fc:1f:58:99:14:77:62:e7:85:b8:96:67:56:9b:cb:ba:8d:ed:
b4:98:d2:64:2a:06:be:7f:16:46:69:2c:7a:33:5e:94:4a:99:
95:7c:54:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:56:25 2026 by rpki-client