Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/DVNi1c7cImPJBzUDwu6RT5PzHvI.mft
File: DVNi1c7cImPJBzUDwu6RT5PzHvI.mft (raw, json)
Hash identifier: g2zflWPbhQTFNcF82RBgSia43yFAk/cqT6jJ6GqoOZg=
Subject key identifier: 8F:FB:32:A4:A2:B1:D1:81:3F:A6:A3:86:1D:4C:AA:F9:08:0B:23:94
Authority key identifier: 0D:53:62:D5:CE:DC:22:63:C9:07:35:03:C2:EE:91:4F:93:F3:1E:F2
Certificate issuer: /CN=0d5362d5cedc2263c9073503c2ee914f93f31ef2
Certificate serial: 019F8F7DE4DB19D10A458A64883591491E0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DVNi1c7cImPJBzUDwu6RT5PzHvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/DVNi1c7cImPJBzUDwu6RT5PzHvI.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:00:20 +0000
Manifest this update: Thu 23 Jul 2026 15:00:20 +0000
Manifest next update: Fri 24 Jul 2026 15:00:20 +0000
Files and hashes: 1: 3vLigIAmr0enEPBVbFd-Efg6QLM.roa (hash: z47OAtBU59ox9Fv71R6UjtJxoV/Msptr2wMI8Rk4Vlc=)
2: DVNi1c7cImPJBzUDwu6RT5PzHvI.crl (hash: GmdMgq1x9YcQYra7EKdws/xJ1/3mX+X9RIHBrA4Et8A=)
3: w82F-_2KUo6780OReWbrcXFgOCI.roa (hash: 2sFKVV9OfbJAOCqpzaEbs0k2EluCBWR6KS26tdOE0SQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/DVNi1c7cImPJBzUDwu6RT5PzHvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/DVNi1c7cImPJBzUDwu6RT5PzHvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DVNi1c7cImPJBzUDwu6RT5PzHvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7d:e4:db:19:d1:0a:45:8a:64:88:35:91:49:1e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d5362d5cedc2263c9073503c2ee914f93f31ef2
Validity
Not Before: Jul 23 15:00:20 2026 GMT
Not After : Jul 24 15:00:20 2026 GMT
Subject: CN=8ffb32a4a2b1d1813fa6a3861d4caaf9080b2394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c7:f9:ac:4d:b9:9a:ae:c3:43:d6:d3:13:15:
aa:f8:68:43:94:c1:2b:b7:31:d6:6f:99:7d:a6:d7:
26:3a:81:40:87:da:25:a0:77:be:7b:9b:c3:f7:26:
e5:00:89:36:41:24:e8:e4:a2:33:5b:61:db:e5:62:
b8:e2:53:f9:40:6d:bb:86:19:5a:31:4d:e4:bd:8a:
97:68:8a:93:4f:7e:13:1b:c5:e0:64:95:d1:ff:e7:
cc:98:a9:7f:43:dd:ad:93:51:4f:1a:2a:de:93:b2:
d5:1f:8a:c0:18:67:a3:68:d8:b5:00:f8:f7:24:8d:
f8:70:7d:a3:e6:dd:a1:be:70:f0:c3:16:10:73:88:
9e:a4:d5:ce:81:54:0f:c8:d6:ea:b8:92:9e:33:b6:
a4:3a:77:3c:3d:b9:a2:8b:f2:d9:0f:26:68:fe:88:
cd:cb:38:71:ed:d4:8f:52:6a:a3:44:3b:73:d6:c4:
54:e6:3a:3a:7f:31:07:14:61:ca:2b:b8:c7:8f:da:
eb:c8:74:69:0d:7a:02:a5:b0:8c:83:22:95:bf:ef:
2d:49:fe:b0:a8:0c:4f:10:04:8a:9a:0a:1c:68:a8:
d9:96:12:71:3a:1b:f5:c6:4c:8e:13:b1:ed:be:84:
85:e1:34:8c:e7:0a:dd:49:35:c6:26:62:97:d1:b0:
57:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FB:32:A4:A2:B1:D1:81:3F:A6:A3:86:1D:4C:AA:F9:08:0B:23:94
X509v3 Authority Key Identifier:
keyid:0D:53:62:D5:CE:DC:22:63:C9:07:35:03:C2:EE:91:4F:93:F3:1E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DVNi1c7cImPJBzUDwu6RT5PzHvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/DVNi1c7cImPJBzUDwu6RT5PzHvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/DVNi1c7cImPJBzUDwu6RT5PzHvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:83:68:d1:73:d7:64:7e:5e:12:bd:50:8f:50:50:94:67:e9:
51:8b:59:18:33:32:62:26:6c:67:c6:7f:41:9f:45:64:5f:55:
39:2c:2a:e7:29:01:d5:92:f8:f5:29:1c:d6:b1:03:b5:0a:b0:
a8:09:d2:9d:80:d0:6a:0b:20:e5:23:33:0e:63:13:20:4f:8c:
a8:44:67:f1:2b:15:29:d6:ce:fa:fc:f2:f3:99:a4:6a:a7:f0:
7c:87:62:1f:1a:57:09:9f:17:ed:85:a0:f9:45:73:63:ee:c1:
84:e7:64:42:12:30:eb:ae:9b:be:9a:83:a5:2a:81:64:92:c5:
ea:b5:0a:ca:34:63:eb:7d:43:50:75:67:f3:e7:8b:1f:b1:dd:
65:e1:1f:45:ef:57:f0:ac:be:bf:30:a3:19:7b:d2:87:df:6c:
7b:dc:25:e8:2d:20:fd:26:62:d7:a0:26:a0:ec:05:3f:57:e1:
65:b0:f9:37:da:cc:08:61:5b:bc:18:06:53:3a:85:a9:4a:35:
71:78:87:0d:b7:8d:59:4a:04:41:6a:8f:0d:68:97:55:b0:8e:
0d:dd:3d:7c:c3:cf:a7:ae:03:ad:5a:19:9a:b8:ef:e3:3c:9b:
15:3b:8b:66:9e:ce:7e:68:f7:73:c5:e3:88:8a:73:f1:3c:db:
f2:32:fd:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:02:30 2026 by rpki-client