Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
File: dErqU-9g-KipNF5YKYKppZvBN2c.mft (raw, json)
Hash identifier: DqAAppdIw8rJeTbYk9XHeUNY5VSkmdihXWMzUaY3e2U=
Subject key identifier: 9F:CF:27:D9:02:5C:0E:7E:09:88:A6:B5:91:FA:CD:A9:E7:15:2A:20
Authority key identifier: 74:4A:EA:53:EF:60:F8:A8:A9:34:5E:58:29:82:A9:A5:9B:C1:37:67
Certificate issuer: /CN=744aea53ef60f8a8a9345e582982a9a59bc13767
Certificate serial: 019F8EA23E1B47B1349ECC44880C3DD0C7DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
Manifest number: 19C6
Signing time: Thu 23 Jul 2026 11:00:25 +0000
Manifest this update: Thu 23 Jul 2026 11:00:25 +0000
Manifest next update: Fri 24 Jul 2026 11:00:25 +0000
Files and hashes: 1: OTWhYyuLQkjCKbz9jUHCD19EFpo.roa (hash: vWGmjIJCSNv5fdFMpQ8zZyjmVzro4Z5X4Sdye++7cOU=)
2: dErqU-9g-KipNF5YKYKppZvBN2c.crl (hash: r+PinH7HiZqtJ7TpWtJLI7QhmYlJiO6SxDYSWA8akLo=)
3: podK66tMt3lZvNdvpbXgIxZ0Kgo.asa (hash: 7bkRGWpwII4FGKdhAF8hQRW0M96LDy/oByw+whJAwFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:3e:1b:47:b1:34:9e:cc:44:88:0c:3d:d0:c7:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744aea53ef60f8a8a9345e582982a9a59bc13767
Validity
Not Before: Jul 23 11:00:25 2026 GMT
Not After : Jul 24 11:00:25 2026 GMT
Subject: CN=9fcf27d9025c0e7e0988a6b591facda9e7152a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8a:5b:5c:ee:50:6f:d5:a7:0b:6b:a2:ec:57:
bd:72:11:92:bb:5f:43:dc:e5:27:47:54:64:95:85:
13:a4:d1:da:dd:24:06:df:90:55:80:96:26:e3:3d:
f0:77:bf:7b:9b:49:df:70:69:a4:83:55:d4:c5:65:
cc:8f:ea:3a:21:88:f8:df:8a:a5:28:f8:85:1a:ce:
33:c8:f0:85:73:d1:fd:75:82:81:48:3f:53:fd:ed:
4f:c9:fa:96:b2:33:43:29:1d:f2:b4:6e:f5:dc:c2:
85:46:e9:54:1b:22:dc:bf:f9:18:15:67:45:ec:ef:
38:4d:77:fb:b1:35:80:15:1f:f6:81:d4:ac:16:e3:
cd:98:9d:f1:62:11:5a:b1:9e:42:91:02:73:87:42:
c2:a4:fc:12:d4:66:34:b4:b5:10:46:59:9a:1d:67:
29:b3:97:17:26:9c:27:a1:f2:86:a3:2f:cf:28:bf:
55:cf:51:fe:57:3a:df:b1:b3:95:49:45:58:90:a9:
88:3b:46:27:ba:ba:d9:23:05:6c:1c:9c:1a:68:1d:
0b:79:be:72:f7:5f:19:48:dc:d6:ba:b1:8d:d3:2e:
7a:49:b5:a4:c5:4d:63:2a:2f:69:8c:6c:39:2d:22:
d4:44:f9:b7:8a:ce:7e:bd:b6:78:dd:ea:75:80:bb:
20:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CF:27:D9:02:5C:0E:7E:09:88:A6:B5:91:FA:CD:A9:E7:15:2A:20
X509v3 Authority Key Identifier:
keyid:74:4A:EA:53:EF:60:F8:A8:A9:34:5E:58:29:82:A9:A5:9B:C1:37:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:35:a1:da:cd:8f:5e:b5:8e:25:c4:77:b0:61:37:8e:9b:a4:
d5:a9:d5:66:8d:4d:ec:3a:d8:3b:d1:65:db:70:f2:ba:32:fb:
59:09:b3:1b:13:cf:b7:20:f4:d4:37:85:b1:04:02:a4:70:13:
1b:91:d0:0b:e8:83:f2:23:1d:1d:58:ff:65:1e:14:82:14:8f:
02:bf:26:1d:35:41:e9:ca:cf:e4:bb:0d:7d:7b:13:4d:3c:38:
49:40:a8:5b:c1:bd:47:fb:a9:1b:1e:d1:af:15:28:b2:54:14:
ce:84:9d:95:3d:86:f3:e9:09:ef:2d:a3:1d:21:a4:0e:31:6b:
69:df:0c:48:9b:25:97:c8:66:e5:52:75:03:0e:7e:ed:fe:63:
f3:31:5e:2f:ec:85:40:d3:d1:d7:bd:8d:6a:17:4c:75:d9:d5:
40:49:9f:a9:ed:9b:c7:47:db:6e:fd:e0:fc:91:7a:d3:09:60:
8b:22:e6:46:3c:fe:f9:be:3f:c6:52:3e:67:80:14:67:83:62:
a0:2a:87:89:51:42:20:f1:9d:60:c9:51:fb:f9:47:c2:b9:00:
75:6d:31:91:8f:a7:94:de:b6:40:f9:b0:2f:39:08:9f:6b:4b:
74:ea:b2:f8:f7:1d:05:40:10:da:ce:b1:8e:77:43:52:d6:db:
f7:bb:12:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ooj4bR7E0nsxEiAw90MfaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NGFlYTUzZWY2MGY4YThhOTM0NWU1ODI5ODJhOWE1OWJj
MTM3NjcwHhcNMjYwNzIzMTEwMDI1WhcNMjYwNzI0MTEwMDI1WjAzMTEwLwYDVQQD
Eyg5ZmNmMjdkOTAyNWMwZTdlMDk4OGE2YjU5MWZhY2RhOWU3MTUyYTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4pbXO5Qb9WnC2ui7Fe9chGSu19D
3OUnR1RklYUTpNHa3SQG35BVgJYm4z3wd797m0nfcGmkg1XUxWXMj+o6IYj434ql
KPiFGs4zyPCFc9H9dYKBSD9T/e1PyfqWsjNDKR3ytG713MKFRulUGyLcv/kYFWdF
7O84TXf7sTWAFR/2gdSsFuPNmJ3xYhFasZ5CkQJzh0LCpPwS1GY0tLUQRlmaHWcp
s5cXJpwnofKGoy/PKL9Vz1H+VzrfsbOVSUVYkKmIO0YnurrZIwVsHJwaaB0Leb5y
918ZSNzWurGN0y56SbWkxU1jKi9pjGw5LSLURPm3is5+vbZ43ep1gLsg0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/PJ9kCXA5+CYimtZH6zannFSogMB8GA1UdIwQY
MBaAFHRK6lPvYPioqTReWCmCqaWbwTdnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEVycVUtOWctS2lwTkY1WUtZS3BwWnZCTjJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy82ZDM4Y2MtYzBmNi00MDE4LWI5Mjkt
OWI2NGMyNTE1NmI5LzEvZEVycVUtOWctS2lwTkY1WUtZS3BwWnZCTjJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy82ZDM4Y2MtYzBmNi00MDE4LWI5MjktOWI2NGMyNTE1NmI5
LzEvZEVycVUtOWctS2lwTkY1WUtZS3BwWnZCTjJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsjWh2s2P
XrWOJcR3sGE3jpuk1anVZo1N7DrYO9Fl23DyujL7WQmzGxPPtyD01DeFsQQCpHAT
G5HQC+iD8iMdHVj/ZR4UghSPAr8mHTVB6crP5LsNfXsTTTw4SUCoW8G9R/upGx7R
rxUoslQUzoSdlT2G8+kJ7y2jHSGkDjFrad8MSJsll8hm5VJ1Aw5+7f5j8zFeL+yF
QNPR172NahdMddnVQEmfqe2bx0fbbv3g/JF60wlgiyLmRjz++b4/xlI+Z4AUZ4Ni
oCqHiVFCIPGdYMlR+/lHwrkAdW0xkY+nlN62QPmwLzkIn2tLdOqy+PcdBUAQ2s6x
jndDUtbb97sSjg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:10:33 2026 by rpki-client