Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
File: DC18I46J3NUvb7IpbfpHWMYcl74.mft (raw, json)
Hash identifier: KMinUqYCSZEa7NZk24dgW29TFCzLeA7Sff427Sws5Ic=
Subject key identifier: CF:D1:5E:43:C2:0E:A5:F8:75:33:5E:2D:A2:C2:B1:59:15:A1:7A:FF
Authority key identifier: 0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE
Certificate issuer: /CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be
Certificate serial: 019F905A3E85B7F4E8AD9909CCFAD30A2606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
Manifest number: 19C4
Signing time: Thu 23 Jul 2026 19:01:01 +0000
Manifest this update: Thu 23 Jul 2026 19:01:01 +0000
Manifest next update: Fri 24 Jul 2026 19:01:01 +0000
Files and hashes: 1: DC18I46J3NUvb7IpbfpHWMYcl74.crl (hash: v7cO1gzKTc+TD2K233smJWjruNc+UoYgs1tVTiRcAh4=)
2: bml28OP4KoXNao7A2GMBGmYqamQ.roa (hash: 0pR6vIDA6MRs37zqStEVFf7/l/MWTnFFDP3/gQtqi2o=)
3: ycbQTRWdjL9Qvr33IrnbqXH0Bqs.roa (hash: nglQg5MmKlEjssrWx8wngl2AAIBCB6KoQKV4TEUoUr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:3e:85:b7:f4:e8:ad:99:09:cc:fa:d3:0a:26:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be
Validity
Not Before: Jul 23 19:01:01 2026 GMT
Not After : Jul 24 19:01:01 2026 GMT
Subject: CN=cfd15e43c20ea5f875335e2da2c2b15915a17aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:21:7e:fc:c7:0b:9e:17:d6:0b:3e:e7:aa:8f:
d4:e0:53:93:dd:76:b1:1f:04:dc:9b:09:19:07:17:
0a:a1:9c:72:5b:32:51:68:da:f8:8e:99:7f:af:d3:
14:e8:49:84:8f:c8:80:65:27:f1:e0:31:b0:12:ca:
9e:91:9c:3d:29:74:0b:98:aa:a3:4e:3b:5e:de:40:
75:26:ac:1e:2a:0d:72:71:66:16:3c:3e:f4:b9:79:
a1:2a:db:a7:7e:27:fd:58:73:fb:8b:af:79:12:85:
38:1b:7d:c1:e6:07:61:d7:5f:f2:45:f6:54:78:f6:
a2:2a:27:77:a6:d2:03:97:fe:34:cf:cb:02:71:9e:
ec:39:1a:c9:dc:05:c4:a5:34:8b:28:60:40:32:bd:
9d:e0:85:ae:ac:17:34:42:8b:fd:34:a7:9f:9f:8e:
1b:22:bb:36:e3:c3:a1:97:27:c3:00:86:de:59:ba:
8d:d4:27:36:d5:6a:a5:3f:ce:3f:5c:e1:82:2f:27:
3a:13:7a:93:2c:c4:64:fb:19:b6:ec:76:64:7f:af:
c0:f0:97:38:b0:60:f0:70:72:68:ef:2c:81:27:7d:
e7:c9:62:3a:0e:9b:c7:26:05:cf:e1:a3:d0:08:ee:
f7:ab:a5:d9:48:44:ae:78:76:e2:88:5f:70:7a:86:
e9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D1:5E:43:C2:0E:A5:F8:75:33:5E:2D:A2:C2:B1:59:15:A1:7A:FF
X509v3 Authority Key Identifier:
keyid:0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:6f:e8:f0:79:af:32:ae:b8:40:cb:bd:53:b0:58:ed:30:37:
f8:4c:3e:ee:6d:88:f1:fb:ee:31:79:32:76:28:bc:3c:24:72:
4d:68:6c:30:9c:e7:34:e4:0b:4e:1d:76:69:6d:98:28:96:8d:
ac:69:cc:25:35:69:50:6f:99:b2:3c:a1:8b:1f:67:0a:dc:da:
87:98:21:93:8b:4e:c4:0f:12:fd:1e:e0:96:2e:36:2a:96:fc:
01:68:54:2c:fd:93:1e:bd:ad:0b:98:6f:fa:d6:47:2a:7a:4d:
7c:94:27:65:a7:35:6b:ee:f5:5e:21:fe:01:21:e2:af:c3:36:
9e:55:67:9d:e4:c7:90:e9:8c:32:7d:a3:30:3a:59:78:34:21:
2d:6b:8a:66:87:83:cf:45:2d:20:89:64:1c:fa:6e:a3:c4:ae:
cb:37:6c:ac:c4:b5:1c:26:9b:db:6e:8f:8f:9a:00:35:76:0c:
97:0f:6f:dd:b0:89:f6:7c:66:ad:71:41:5d:bc:0c:5c:8c:d5:
65:5b:ed:e7:60:2e:ec:76:40:f5:53:70:06:40:5e:f4:31:b2:
f4:54:02:db:7c:c8:52:49:89:f3:2f:d0:37:e1:84:4b:03:e1:
93:32:0e:8a:96:97:56:2d:79:85:9a:9d:ac:94:58:80:c6:de:
24:ce:ec:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:12:26 2026 by rpki-client