Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
File: DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft (raw, json)
Hash identifier: ogen4LdwIujElGvEejPxuZx+Vuv57cGdtsQsw51HoRI=
Subject key identifier: 43:3B:95:85:DB:D9:8A:D1:CD:97:AF:C4:EE:36:59:0E:44:D4:25:B9
Authority key identifier: 0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
Certificate issuer: /CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Certificate serial: 019F94DC40671EB3CBD4CCFB64449DF28430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
Manifest number: 19CC
Signing time: Fri 24 Jul 2026 16:01:30 +0000
Manifest this update: Fri 24 Jul 2026 16:01:30 +0000
Manifest next update: Sat 25 Jul 2026 16:01:30 +0000
Files and hashes: 1: DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl (hash: ZrnAwz84PmX9NSrc17s63D4QDu1SZwSxO2P8eM0s6Rc=)
2: xRmmdqH1-j--sEXPtnNY3Z-R5Zo.roa (hash: 3OUa7VjiPRdUyQdSMo547+vkOocCdI86key02w1U7/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:dc:40:67:1e:b3:cb:d4:cc:fb:64:44:9d:f2:84:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Validity
Not Before: Jul 24 16:01:30 2026 GMT
Not After : Jul 25 16:01:30 2026 GMT
Subject: CN=433b9585dbd98ad1cd97afc4ee36590e44d425b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:50:32:a2:d2:ff:ce:ed:e8:4c:9c:6f:13:98:
f8:e2:78:95:54:23:c8:18:df:1b:38:67:9b:b0:20:
b6:70:dd:3b:64:69:31:63:fe:13:b9:50:53:f2:b5:
10:ef:2a:4a:ea:24:50:88:ae:2a:90:b2:1f:22:d5:
0a:00:3b:9f:40:dd:0c:b5:61:ba:c8:db:12:fc:88:
f0:94:1d:cb:2c:52:f2:cd:d8:02:c7:40:e6:00:35:
de:44:2d:f0:b9:b6:f1:17:60:a2:b2:8d:58:92:53:
4f:8e:7b:cd:c6:81:80:50:c9:73:7c:f3:3e:ac:dc:
94:a5:3e:52:ce:b9:f1:5a:c7:1f:3e:cd:f1:ec:6a:
2c:1c:30:66:88:9c:a2:9d:d9:30:e3:02:22:27:a2:
9c:e1:af:a5:29:57:c9:f7:6c:50:09:6a:60:72:ac:
23:f6:7d:08:5e:34:5a:d0:d4:b8:c9:ee:32:be:d5:
12:4e:69:3e:34:29:cf:2d:9e:71:42:bc:7f:3c:0d:
37:5e:76:0a:24:1c:a5:3c:51:a0:e0:30:99:86:26:
15:2e:cb:5c:a3:65:c9:30:a1:57:0f:0e:3c:24:b9:
b5:2f:59:bb:22:34:df:fd:71:54:be:5b:92:c0:bd:
7e:2f:b8:d4:c4:8d:a3:9e:8d:0d:11:89:d5:66:96:
21:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:3B:95:85:DB:D9:8A:D1:CD:97:AF:C4:EE:36:59:0E:44:D4:25:B9
X509v3 Authority Key Identifier:
keyid:0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:84:c3:81:f3:93:78:fb:02:eb:82:9d:e1:38:2c:7a:fe:a3:
34:8c:a6:9b:d5:e8:69:5d:ea:07:e8:6c:a4:21:45:6b:92:a0:
5c:f7:9a:1a:5f:99:69:cc:c0:4c:5f:6e:67:aa:d9:f9:f4:0a:
01:4c:9c:1c:ec:25:cf:ed:c7:db:47:66:b3:9d:d0:c8:0c:8a:
53:d5:17:81:34:f7:18:23:88:01:30:d6:ba:d9:2f:03:9e:03:
0a:1b:22:7c:dd:c7:96:78:47:c8:f6:7c:74:c5:ce:d0:41:a3:
c0:57:7e:01:d1:48:71:a4:ef:2a:d4:fb:ca:ac:af:9d:c4:6c:
c6:96:e6:76:1b:c9:00:48:b8:be:0b:3f:7a:cd:6b:ad:dd:a3:
8f:fe:bf:fe:1d:e6:ed:c2:48:17:c2:f5:4b:4e:22:67:71:ac:
71:75:26:c9:14:73:ea:e6:c2:c6:a3:e8:41:e6:91:99:3d:2c:
0d:aa:a4:e8:12:50:d3:0d:72:99:dd:aa:97:17:ea:34:07:df:
21:43:0d:a9:bb:85:fc:95:a7:51:3d:ac:4f:c4:86:6b:9c:ad:
e3:8f:b0:00:f6:64:79:5f:b8:61:ff:2c:6b:ef:2e:b0:47:29:
44:1c:c2:49:54:59:61:46:b5:40:59:0b:10:3a:89:a1:af:5b:
63:0f:43:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:02:22 2026 by rpki-client