Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
File: DaPL8eDoVupMU7WrroZZTsmTOYI.mft (raw, json)
Hash identifier: We/oBDs/PbgPreqjYuJ/gDNYuGTjYqk1e5JXSQCecjY=
Subject key identifier: F6:38:8B:BF:D1:95:10:C7:02:0F:14:5D:E8:E0:46:41:C7:09:6E:3F
Authority key identifier: 0D:A3:CB:F1:E0:E8:56:EA:4C:53:B5:AB:AE:86:59:4E:C9:93:39:82
Certificate issuer: /CN=0da3cbf1e0e856ea4c53b5abae86594ec9933982
Certificate serial: 019F92B62334004E04AD6C85BF26BFA0DCF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
Manifest number: 10F8
Signing time: Fri 24 Jul 2026 06:00:37 +0000
Manifest this update: Fri 24 Jul 2026 06:00:37 +0000
Manifest next update: Sat 25 Jul 2026 06:00:37 +0000
Files and hashes: 1: 5sITtlNKM7t60210AUBp_MNFelY.roa (hash: WCuNMPZvNV2cZDWHYzBYLEsyLHu/NPxJGgRX6UeNesQ=)
2: DaPL8eDoVupMU7WrroZZTsmTOYI.crl (hash: scYrRLTVPJf6WjLWIUn3fFEKrRl8EgP2HQQTM/heWeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:23:34:00:4e:04:ad:6c:85:bf:26:bf:a0:dc:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0da3cbf1e0e856ea4c53b5abae86594ec9933982
Validity
Not Before: Jul 24 06:00:37 2026 GMT
Not After : Jul 25 06:00:37 2026 GMT
Subject: CN=f6388bbfd19510c7020f145de8e04641c7096e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:be:1d:5c:89:6e:35:74:b1:e8:b1:1a:00:aa:
98:bb:92:c5:89:b2:03:e9:aa:c7:d4:8d:3f:fb:d1:
8e:c7:30:58:86:48:d6:07:d2:ab:95:81:26:d4:a9:
56:67:5a:3a:59:0f:4f:74:49:7c:33:d5:e1:dc:38:
7e:18:72:8a:61:09:f6:69:3a:f4:1f:e3:a5:41:7e:
b0:d7:52:e9:7b:b1:ee:c5:01:21:30:f7:d4:bb:fa:
4b:22:d1:a7:32:5d:eb:b3:ff:66:f7:8a:cf:d2:0f:
9c:62:99:d3:0a:15:9d:2a:df:56:8e:39:67:3f:a7:
c1:a7:33:bf:20:7d:ef:e6:d0:93:77:a3:48:70:60:
af:8b:45:40:23:21:04:16:5b:55:6f:a4:d6:96:4e:
3b:c2:42:0a:03:ea:f4:45:94:c4:9d:11:01:65:bc:
14:cd:27:d8:0d:bb:34:0a:d1:db:a7:78:52:e0:09:
58:3f:be:5a:4d:4f:50:4c:80:14:2b:04:d4:93:6f:
84:56:e7:a3:18:8d:58:6d:03:5c:40:e4:80:fd:ac:
3e:8f:82:13:9a:3f:68:c2:53:10:49:e4:14:a8:49:
82:63:b8:f8:48:0c:75:3d:b4:4d:f9:23:93:b8:4c:
0e:9f:2b:df:34:24:3a:86:ea:74:3a:52:7b:fb:e2:
9b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:38:8B:BF:D1:95:10:C7:02:0F:14:5D:E8:E0:46:41:C7:09:6E:3F
X509v3 Authority Key Identifier:
keyid:0D:A3:CB:F1:E0:E8:56:EA:4C:53:B5:AB:AE:86:59:4E:C9:93:39:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a9:8f:b9:4f:61:2e:9f:f2:82:b8:be:7e:18:37:41:44:0f:
65:35:66:90:b5:ce:7e:b6:52:41:ac:f7:85:88:a6:c0:57:7b:
e6:d8:8a:f1:b5:75:c3:52:aa:cd:1a:d4:35:42:df:e0:c9:9d:
60:18:8d:81:bd:20:05:38:3c:25:6c:8d:56:77:b8:df:36:79:
c6:73:4c:c6:e9:b0:cd:4c:b8:fa:67:cd:9c:7b:44:2c:b2:75:
c9:87:0a:ee:4e:ca:a7:b3:39:1c:13:98:5e:6d:31:f8:41:a4:
73:b5:f0:b6:74:8c:a1:8c:8a:20:22:67:18:37:49:03:40:5a:
e1:5c:7a:01:30:70:e8:a9:cd:3b:95:49:a1:82:67:a6:09:35:
0a:bd:0c:4d:f2:ec:e6:81:b1:8f:4d:bf:b9:e0:f0:31:53:78:
21:82:d6:04:6e:91:1f:da:1a:f0:ae:1a:80:af:dc:17:19:32:
c4:7b:9b:d7:c8:6a:65:88:e8:3f:10:bb:bc:a2:33:f8:e5:64:
14:bb:32:48:9a:a6:6a:c3:1d:4b:20:ae:d0:a8:c1:20:21:05:
b4:52:bb:6f:1f:96:fd:b8:e0:ba:0d:bf:91:77:d0:f3:f5:6f:
7a:86:55:7a:af:67:79:40:c8:f1:59:54:9d:2a:bb:26:ce:bb:
77:53:56:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:19:45 2026 by rpki-client