Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
File: dX-f3qNQp2a7mMYE07nCeRZzIgk.mft (raw, json)
Hash identifier: 1LPraY8Mrm9oL4MuYNa//W32gydKyeeZoEbfrtr8yo4=
Subject key identifier: D4:73:4C:E5:96:D1:3D:AF:C4:DE:5E:A1:3A:C5:2B:E4:62:43:BB:ED
Authority key identifier: 75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09
Certificate issuer: /CN=757f9fdea350a766bb98c604d3b9c27916732209
Certificate serial: 019F94A464AAD7AD16ABA8AFC2636FE532DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 15:00:29 +0000
Manifest this update: Fri 24 Jul 2026 15:00:29 +0000
Manifest next update: Sat 25 Jul 2026 15:00:29 +0000
Files and hashes: 1: dX-f3qNQp2a7mMYE07nCeRZzIgk.crl (hash: pVTjx2smuP82S21fn9n+uyj++Zov3F5vvOHOJ9n5h3g=)
2: wBzUUS1esVzgp7-S8WP1zjKAIpw.roa (hash: UgXBz+OKL1MAmpi06fp5fY0KFQ1LRcUZSGp9CfyxDlU=)
3: wjNWOCuY2E1_FvlqggQMJz_Utqw.roa (hash: BberhHSGLHh2AX9W6raGWWWl/q21AJDPsEIrCo+NFbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:64:aa:d7:ad:16:ab:a8:af:c2:63:6f:e5:32:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=757f9fdea350a766bb98c604d3b9c27916732209
Validity
Not Before: Jul 24 15:00:29 2026 GMT
Not After : Jul 25 15:00:29 2026 GMT
Subject: CN=d4734ce596d13dafc4de5ea13ac52be46243bbed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d6:8b:a5:8c:ce:7e:5c:d2:d6:29:53:25:44:
0b:72:68:b0:3e:4b:1d:e0:d8:e0:3b:84:b1:c0:9f:
7a:74:a1:8d:0a:fd:84:83:b2:b9:21:cf:5b:9c:ad:
f7:57:8b:a3:b1:a2:b1:b7:54:16:ac:3e:50:3e:20:
3a:84:e1:09:f5:50:da:cb:02:95:3f:1b:82:65:b7:
37:3b:42:b2:0e:64:ad:30:aa:69:5f:59:0e:a6:42:
86:da:d8:b4:2d:98:57:0b:db:4e:b6:e1:61:ff:c4:
8c:bf:6a:fa:3b:27:47:b2:aa:33:2c:91:c7:de:80:
84:94:e1:25:03:fd:0d:56:ef:98:a6:3b:b5:a5:fd:
cb:2c:ce:c7:e5:2d:34:cd:bd:de:90:f3:52:64:df:
ec:82:ee:90:5e:0c:ac:6e:12:00:ea:7c:09:4f:c2:
53:3a:a6:a9:74:77:75:f2:ab:57:6d:2f:c4:ca:73:
17:27:14:53:83:dc:52:2c:9b:3f:b9:1d:97:84:86:
6e:0f:ff:c4:21:f4:9b:9b:b7:65:68:68:cb:5c:35:
99:a6:7a:65:e8:f4:a5:fd:5e:cf:e0:02:7f:3d:71:
6a:25:d9:be:8f:3e:4c:a6:f4:ac:78:ac:7d:7a:39:
6d:85:4e:23:16:c5:93:c2:c6:b8:18:0a:06:b8:d7:
47:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:73:4C:E5:96:D1:3D:AF:C4:DE:5E:A1:3A:C5:2B:E4:62:43:BB:ED
X509v3 Authority Key Identifier:
keyid:75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:66:ae:fa:bb:0c:4f:cc:3c:43:4b:b9:9a:a7:7c:bb:d0:c2:
12:7f:b1:49:19:2f:3d:a2:95:cf:f4:8b:12:b8:c3:93:c6:6f:
db:08:20:2b:a1:d0:ee:13:f5:80:6f:38:f9:17:fe:ad:44:28:
27:07:a1:97:2d:fe:5e:db:42:43:cf:7e:0d:56:34:df:10:6c:
4f:a4:55:7d:86:58:e1:be:ec:8b:11:22:e0:9a:b3:fc:cb:92:
59:d4:1a:d1:d9:46:d1:28:b2:72:e7:4b:36:ee:c8:e9:91:fa:
94:00:ed:44:18:11:32:df:f6:73:98:75:94:39:d8:27:87:e9:
0e:b9:0e:9c:2d:3a:44:f9:47:92:ca:e8:13:03:86:1d:dd:18:
c4:f1:e8:b1:01:19:b1:1f:ef:93:71:f9:f0:c8:e8:42:2d:ad:
03:6e:6a:5c:5e:53:e1:6b:37:a4:c0:6b:6a:ab:8c:d0:3f:1a:
7d:d3:dd:06:b3:5a:92:3c:fe:0c:88:5c:db:6d:db:22:a7:9f:
4d:9d:31:cf:f7:81:ac:52:26:ef:ad:27:e0:2a:c7:e1:38:29:
65:27:e6:a2:73:ed:f2:27:83:f8:25:b6:2e:1c:7e:c8:47:04:
65:51:ae:63:93:71:b9:be:6d:95:36:a9:e9:29:eb:9e:70:bb:
ca:55:64:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:50:29 2026 by rpki-client