Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
File: dYDRZWm7JKMo4ntH99dRZZcl3vs.mft (raw, json)
Hash identifier: Kemh2ysU299P/l8mjFGC5weWrq02K+ilBEdlQNPnLtg=
Subject key identifier: A5:3D:99:75:BE:C0:0F:E2:88:06:09:A6:41:00:2D:21:CD:4F:BC:F8
Authority key identifier: 75:80:D1:65:69:BB:24:A3:28:E2:7B:47:F7:D7:51:65:97:25:DE:FB
Certificate issuer: /CN=7580d16569bb24a328e27b47f7d751659725defb
Certificate serial: 019F91DA857587669170F4E4AA1DFD695476
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 02:00:45 +0000
Manifest this update: Fri 24 Jul 2026 02:00:45 +0000
Manifest next update: Sat 25 Jul 2026 02:00:45 +0000
Files and hashes: 1: ECrRKyyp-LiX1od5u6h9jQbQyd8.roa (hash: G+0jVdYZJlndG8ZNfCVw49ceooT9pB50RNi/efo30+s=)
2: dYDRZWm7JKMo4ntH99dRZZcl3vs.crl (hash: J5TpRza9GwR2YR1+oz2G3LwWjWevSFe9UCF7UplwrPk=)
3: y86tnmPuqWIsHAopUuOyTE-DfXY.roa (hash: ddB2+/l7hkyocSFaIWWx4fEn6FSZzUu/NIcm47CrJmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:85:75:87:66:91:70:f4:e4:aa:1d:fd:69:54:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7580d16569bb24a328e27b47f7d751659725defb
Validity
Not Before: Jul 24 02:00:45 2026 GMT
Not After : Jul 25 02:00:45 2026 GMT
Subject: CN=a53d9975bec00fe2880609a641002d21cd4fbcf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:80:1c:0c:e6:a1:df:bd:53:ed:62:e0:bc:50:
13:da:d5:03:b7:a2:d6:14:86:95:87:0e:c8:8e:4d:
f9:96:6e:c4:1f:29:5a:bf:52:a3:e9:80:47:fc:5e:
c1:b4:ec:99:d8:87:c3:c4:6a:c9:db:a0:73:13:72:
bf:30:d9:61:e8:02:97:9d:f7:95:dc:2d:a6:b5:aa:
1e:1d:53:36:69:d6:6d:f1:ad:6b:6c:a4:27:67:b5:
18:2c:ab:ee:35:0f:25:ff:2d:e1:e8:60:e0:87:91:
b0:44:dd:33:a1:c6:f0:bf:77:f9:3e:1d:fc:d3:b9:
94:d9:e6:ac:40:50:46:61:36:a2:1e:cf:df:91:27:
10:13:ca:6b:e1:e5:06:ff:d4:aa:58:c9:0a:6b:ee:
1b:e1:e8:9b:3c:14:fa:98:81:00:0c:94:fd:ff:77:
da:7a:80:27:18:b4:7a:04:ca:de:87:08:3d:d0:f9:
e6:74:96:95:af:5b:6d:f7:41:7a:fe:25:c1:d6:11:
49:1d:a3:da:4c:98:4b:35:77:89:cc:87:89:a5:4f:
68:d8:24:72:88:ee:5d:36:ec:d6:3e:5e:de:20:8d:
5a:a0:2c:09:9c:97:12:cd:20:e0:18:13:e9:29:bf:
b9:0a:99:ce:51:41:95:f1:bb:38:7e:4f:19:e2:b1:
f3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:3D:99:75:BE:C0:0F:E2:88:06:09:A6:41:00:2D:21:CD:4F:BC:F8
X509v3 Authority Key Identifier:
keyid:75:80:D1:65:69:BB:24:A3:28:E2:7B:47:F7:D7:51:65:97:25:DE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a7:9a:59:4a:0a:2f:34:06:92:54:d9:43:c0:37:1f:50:3c:
1a:21:11:c3:a0:af:f1:f7:1e:ee:af:63:9c:59:fb:da:e0:d9:
35:68:29:f2:de:a1:6e:c3:b9:dc:c6:f5:6c:02:e7:c5:93:9b:
27:d5:68:9f:bd:ba:c3:6f:6c:ed:6c:00:82:a6:12:8d:c8:55:
43:05:f4:f9:9f:21:27:71:53:8b:98:37:72:2c:19:c2:a3:33:
0c:20:c2:70:92:40:38:56:9a:c2:a2:a3:34:f0:2d:d5:16:47:
79:56:59:ff:94:61:eb:0a:0e:3c:cb:9b:a9:39:28:b7:1c:7c:
2b:23:62:fa:36:9a:62:a5:dc:d8:b5:0a:25:94:d6:d8:92:4d:
d7:eb:bc:da:ae:39:2e:0d:15:58:62:0c:1a:39:61:85:78:c0:
bf:26:1e:42:ff:60:b3:36:a4:36:6a:0f:97:6d:15:1b:03:0b:
d4:d7:53:50:45:38:a4:13:83:55:f0:d0:5b:00:de:00:e2:c0:
c2:8b:6e:51:94:11:cd:92:1f:fb:7f:5b:e6:30:27:0f:70:b0:
d7:ef:02:89:37:c4:b1:4c:bd:83:97:d4:87:63:8c:b9:d6:8b:
86:8c:03:8c:a5:0b:02:0a:91:5a:23:f1:cd:56:35:5a:1c:28:
be:67:26:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:28:58 2026 by rpki-client