Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
File: dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft (raw, json)
Hash identifier: Ervh+wSzUKg+loTEsF2jmqI6Sh/mpkF4zz2AauxjgfE=
Subject key identifier: 87:F1:82:0E:D4:DE:3C:BF:7B:EF:91:26:6D:34:AD:6A:20:91:18:D8
Authority key identifier: 74:0F:65:F3:02:33:5B:AA:90:ED:81:C0:53:84:D5:3F:23:32:39:1A
Certificate issuer: /CN=740f65f302335baa90ed81c05384d53f2332391a
Certificate serial: 019F8F102CB5C74057A1B43ED19CF86DEDD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
Manifest number: 0ADC
Signing time: Thu 23 Jul 2026 13:00:29 +0000
Manifest this update: Thu 23 Jul 2026 13:00:29 +0000
Manifest next update: Fri 24 Jul 2026 13:00:29 +0000
Files and hashes: 1: 60AgYXI0MVWEVUOzuDwIpQcFWrE.roa (hash: 1Lj/1bPCIRRdQ0zsLEkl5mAqw0n7NxUgu4JklwVrAAs=)
2: dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl (hash: a5tC1U5BIAvD/RvMeZLPRlm2Vt8faw77Pi584kDko/g=)
3: dhhgDn01VBGU33txgYz8NBfOFn0.asa (hash: LohB167OFmIaspaV8SsKY8hSV57AJZzngteLMm6LIZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:2c:b5:c7:40:57:a1:b4:3e:d1:9c:f8:6d:ed:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=740f65f302335baa90ed81c05384d53f2332391a
Validity
Not Before: Jul 23 13:00:29 2026 GMT
Not After : Jul 24 13:00:29 2026 GMT
Subject: CN=87f1820ed4de3cbf7bef91266d34ad6a209118d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:63:85:61:75:ec:fb:1e:d2:b9:f4:02:d5:ea:
eb:55:a7:c2:5b:55:ce:ea:d7:16:fb:e2:ed:e6:44:
a3:c1:7c:f6:36:b5:e0:dc:0c:60:88:94:2f:26:31:
ad:f9:83:9d:e0:7b:d4:9f:c8:52:0b:2a:4d:e7:ab:
a2:01:a0:be:03:96:02:a4:b6:98:36:74:cc:72:9a:
88:42:ea:13:ac:f8:67:d8:13:fc:e1:f9:92:78:d7:
04:98:d1:ca:9d:58:f6:a5:4e:01:61:ce:8c:f7:96:
a0:cd:fb:20:02:b4:f7:20:64:5d:95:f9:31:c5:6e:
8c:fa:ea:f1:b1:fe:19:22:6b:e3:1d:76:d2:d8:95:
0c:d6:b6:c3:4f:46:8d:47:c2:e4:91:c8:81:58:37:
a3:c6:df:71:a3:be:2f:fa:99:4a:c5:23:ea:e5:98:
e8:a3:9c:e6:87:d1:ca:e4:cb:ac:7a:93:94:03:9e:
a7:b9:60:a6:6c:1d:eb:4d:77:84:03:64:6a:5f:3c:
64:e5:29:cc:ee:07:70:4c:17:56:14:c0:e8:29:d1:
34:b7:75:10:b7:89:12:62:97:64:80:b4:66:9c:78:
c5:48:bb:2e:64:20:2e:fe:f3:92:93:3f:99:96:d2:
6b:17:c4:aa:d0:7d:02:42:7d:34:95:6b:65:94:87:
13:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F1:82:0E:D4:DE:3C:BF:7B:EF:91:26:6D:34:AD:6A:20:91:18:D8
X509v3 Authority Key Identifier:
keyid:74:0F:65:F3:02:33:5B:AA:90:ED:81:C0:53:84:D5:3F:23:32:39:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:22:20:f0:74:97:5e:65:82:63:4c:d5:31:b1:fc:27:95:06:
d5:94:9b:09:af:3e:ce:55:0d:1b:6a:db:9f:c0:dc:83:5f:dd:
20:8e:bb:a5:75:26:5d:e8:7b:52:33:2f:43:61:9a:82:c2:3b:
a7:f4:d4:b7:06:21:98:ac:56:d2:5c:e8:0d:81:12:c1:34:50:
4e:c8:55:c4:00:56:f9:26:39:5b:43:41:28:20:6e:f1:13:a3:
30:1a:b9:03:f5:f5:36:d2:b1:c1:a8:51:05:eb:c1:63:d3:3c:
91:3f:9a:9e:cc:fb:6c:27:fe:2f:26:e9:bb:e9:dd:12:c6:aa:
b3:b8:e9:2b:0f:57:7d:7e:d5:75:3f:b5:40:cf:e6:2b:e0:db:
1a:e0:b6:0f:d8:d0:09:76:8c:63:00:0a:38:f2:ed:a1:c1:65:
db:1d:15:18:4b:cb:06:06:fd:6a:5a:1b:94:6b:2a:24:2b:f8:
46:fa:9e:43:c6:99:e2:9e:48:6f:ec:1b:7c:af:d2:0e:90:c5:
ee:29:23:1b:1f:93:9c:d9:d2:ae:a6:ab:61:b7:69:36:a8:f7:
02:b8:34:4a:85:28:ec:0f:a6:a4:7f:d2:13:97:42:ea:13:95:
a2:23:9f:b7:26:cf:38:bc:37:1a:61:cc:04:84:fa:74:9d:4d:
b1:fb:81:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:06:34 2026 by rpki-client