Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
File: DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft (raw, json)
Hash identifier: rjDl0JZEjmcvbhAPdSJj8GW64ER0sgawb9+FvWT6o84=
Subject key identifier: E3:44:C7:40:06:54:84:38:7D:CE:88:22:E5:BC:D8:BB:6D:79:DE:F3
Authority key identifier: 0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
Certificate issuer: /CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Certificate serial: 019F92ED6C69CBED18062FAB7CE0D673465B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 07:01:00 +0000
Manifest this update: Fri 24 Jul 2026 07:01:00 +0000
Manifest next update: Sat 25 Jul 2026 07:01:00 +0000
Files and hashes: 1: DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl (hash: HleY6XD1dwumG27Dut08qc5wLUx7K1fCLH2lUrAQ4c8=)
2: xRmmdqH1-j--sEXPtnNY3Z-R5Zo.roa (hash: 3OUa7VjiPRdUyQdSMo547+vkOocCdI86key02w1U7/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:6c:69:cb:ed:18:06:2f:ab:7c:e0:d6:73:46:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Validity
Not Before: Jul 24 07:01:00 2026 GMT
Not After : Jul 25 07:01:00 2026 GMT
Subject: CN=e344c740065484387dce8822e5bcd8bb6d79def3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:df:59:4d:5e:44:7d:12:b8:ab:31:46:f7:1b:
59:be:51:ee:dc:f8:1b:5d:ea:9d:c8:78:17:e0:b2:
b3:91:b1:61:b1:09:08:04:e1:e7:50:8f:75:49:8c:
db:2c:7e:4f:48:bc:75:31:9a:95:6d:09:00:86:bb:
1a:0d:be:63:16:b9:78:6e:5f:28:96:1c:0e:3a:c2:
6d:ac:9e:05:e5:82:56:4e:83:0c:ee:62:0c:d8:2c:
ce:29:e1:e6:96:2d:78:57:ad:3c:7b:f7:eb:91:bf:
c5:f1:19:53:6a:07:f7:72:07:ee:60:5b:8f:3a:6f:
a4:87:71:0f:fd:bf:24:86:8a:af:fa:40:a3:d4:02:
c4:4a:34:df:d1:9e:71:6f:0d:c9:0f:47:95:5a:54:
77:04:fa:f8:38:93:5f:de:db:3c:75:62:60:77:4f:
da:97:2f:19:8b:cd:6a:9e:ff:df:b8:6b:91:51:a6:
c8:24:78:48:6e:68:5f:f5:7e:a5:4f:20:2c:5f:f1:
a0:16:d1:2c:72:a2:9b:38:1f:63:b7:e1:e1:d7:a4:
5d:d3:46:7a:fe:f4:82:5d:bd:ef:8b:31:50:43:91:
e3:01:96:10:51:df:e8:fd:88:ba:72:d4:86:7e:05:
7d:19:50:e7:68:a5:25:07:64:0f:f7:66:47:a2:90:
dc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:44:C7:40:06:54:84:38:7D:CE:88:22:E5:BC:D8:BB:6D:79:DE:F3
X509v3 Authority Key Identifier:
keyid:0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:95:73:3d:9f:e7:90:3b:9c:1c:93:66:98:5c:97:21:d3:bc:
1e:0a:8c:2a:76:b4:01:55:af:11:e0:f0:de:30:21:31:af:b4:
09:7f:53:8e:fd:a1:89:a1:2d:e7:fd:e0:d8:19:d2:6d:cf:6a:
dd:7d:16:5f:93:c1:1e:20:1e:4b:2d:90:4a:6f:23:ec:83:ef:
f4:2a:3f:83:79:7f:d4:ce:39:aa:df:07:12:8a:d5:e2:4d:c1:
cc:dd:2d:13:e3:82:76:76:e9:00:07:f1:b3:9c:6a:cd:2c:f0:
d2:49:39:c3:6d:c4:34:68:8c:4f:72:bb:c9:1c:44:6f:ff:f0:
62:86:b0:5e:a6:11:7f:02:a5:a2:7c:3e:b8:4a:84:4a:fb:15:
f0:df:4c:3a:f8:c1:88:eb:2c:69:f2:37:47:b6:48:44:2c:31:
c0:24:50:59:ff:16:ae:1e:38:bc:14:00:04:66:52:5b:03:98:
04:32:d6:3c:8b:fa:85:ba:7b:82:73:f4:1b:ed:05:c8:4b:66:
e8:a7:46:64:ed:84:4e:11:d2:a1:b3:71:91:36:64:0e:4a:6e:
f1:5d:09:ee:8a:c2:78:e8:ad:2a:8c:9d:8d:f8:99:0a:ca:91:
42:7f:28:4b:65:81:25:f8:0f:10:c1:9c:e9:b2:10:ac:aa:66:
78:20:1a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:43:12 2026 by rpki-client