Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
File: dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft (raw, json)
Hash identifier: DpnOs+kjrDlIaz4zekJESqQU5EI1hZOvvOrBg+ICWqk=
Subject key identifier: A7:6E:D7:7F:F8:44:A7:51:22:7C:26:AC:3F:CC:6D:33:16:C9:6F:47
Authority key identifier: 74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
Certificate issuer: /CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Certificate serial: 019F916C5EA768A1E7A67A6EF8DA0FC7F8F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
Manifest number: 1959
Signing time: Fri 24 Jul 2026 00:00:26 +0000
Manifest this update: Fri 24 Jul 2026 00:00:26 +0000
Manifest next update: Sat 25 Jul 2026 00:00:26 +0000
Files and hashes: 1: Fq9jYIALK48Q3aXTspZ-EOBUjAk.roa (hash: +W+cPf/LWfCqktynR8k96IJai5gjN2wCMM+/QBq3qWs=)
2: LfVminLL1XTSWFhWFnt35YabzGc.roa (hash: sYYNW+Zpe52/Yb5LHf4cYWyg31t2neiSAy7KvTU4FSg=)
3: dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl (hash: yJ8dKYMiuL6mJq65hFPaq/XFNGXT3ATjHrbwXIMUAZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:5e:a7:68:a1:e7:a6:7a:6e:f8:da:0f:c7:f8:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Validity
Not Before: Jul 24 00:00:26 2026 GMT
Not After : Jul 25 00:00:26 2026 GMT
Subject: CN=a76ed77ff844a751227c26ac3fcc6d3316c96f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4f:a7:fc:89:15:f5:df:e4:20:42:e3:f0:7f:
4d:ce:1e:a2:11:2b:eb:90:68:a8:60:7f:7f:d4:dc:
62:11:26:3d:81:7f:33:13:7d:20:b9:e0:42:b7:97:
1e:4e:f2:b1:2d:86:4d:ba:e2:f1:52:5a:52:da:dd:
49:f5:ac:b9:9a:0f:e5:48:a6:44:2b:15:19:e5:6d:
43:3a:1f:0c:63:c6:69:f4:74:c2:d3:3f:ba:fc:e7:
72:e1:54:40:78:66:c8:b6:ab:13:66:7a:22:2c:27:
b6:b4:d6:16:8c:e9:56:06:10:f5:ed:3c:93:3b:a0:
48:78:c5:66:88:00:50:78:33:3a:90:5b:30:a3:ef:
73:34:5d:27:b2:8f:e4:22:08:09:f8:d5:71:a8:35:
c2:17:be:c3:47:8f:27:8c:7c:fb:06:41:7d:63:36:
b4:ff:8c:7a:20:0b:cc:4e:9b:ce:f5:50:ec:ee:31:
c9:86:65:47:3a:86:14:80:19:fc:39:ed:af:f7:9a:
e9:b3:ac:84:ef:f5:2c:c7:c0:64:40:58:a1:88:95:
48:84:c3:b6:22:b8:a8:b7:98:d9:6f:de:d6:09:25:
2b:88:51:49:f2:a3:b3:bc:44:2a:0b:d0:37:6c:e1:
28:02:0c:d1:17:15:e7:51:ac:21:08:16:45:f8:70:
86:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6E:D7:7F:F8:44:A7:51:22:7C:26:AC:3F:CC:6D:33:16:C9:6F:47
X509v3 Authority Key Identifier:
keyid:74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:65:4c:22:2a:ba:21:ef:47:be:48:ec:dc:36:c8:28:b5:36:
ad:c5:28:79:c5:64:32:e2:8e:60:db:c6:bc:dd:32:f7:89:d8:
03:5d:be:ae:0e:43:0c:b8:c0:e0:40:a8:e2:2f:42:03:45:b5:
cc:6e:79:b8:56:26:91:66:af:07:2a:02:06:4b:ab:c7:65:2e:
73:79:c6:49:16:46:e7:fa:69:2f:71:11:d2:c9:eb:94:a0:31:
62:41:b8:fc:d5:45:4d:53:ca:0a:0f:63:7a:c9:7a:08:5c:3f:
a2:b8:94:ce:2b:78:78:aa:3f:3d:7e:bd:3f:03:d4:62:fd:eb:
0a:93:b6:06:92:e6:30:d9:ea:50:73:5b:40:84:00:33:1a:97:
bc:17:33:c9:97:eb:45:42:33:34:3f:3d:42:dc:b5:a5:56:2e:
d3:8a:c4:0f:11:1c:ae:16:7b:46:4c:1b:ab:6f:47:ff:ce:a9:
6c:17:63:b5:4e:d4:c7:83:7f:f1:96:cf:94:bd:fb:a0:27:2c:
26:bd:ba:67:26:aa:51:b9:f5:eb:ec:5f:3e:eb:5c:58:ed:84:
46:a7:f4:09:ac:a2:5a:62:90:10:85:32:8c:1e:ce:28:29:94:
2c:60:2b:cd:b8:00:4e:67:96:63:a2:f1:1b:cc:90:17:3a:4b:
9c:9f:ac:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbF6naKHnpnpu+NoPx/j0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ODJiMDE3NzE3Y2E4M2EwNWU0Y2JjM2YyNjZmMTJhNTM1
OWQ1ZTUwHhcNMjYwNzI0MDAwMDI2WhcNMjYwNzI1MDAwMDI2WjAzMTEwLwYDVQQD
EyhhNzZlZDc3ZmY4NDRhNzUxMjI3YzI2YWMzZmNjNmQzMzE2Yzk2ZjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk+n/IkV9d/kIELj8H9Nzh6iESvr
kGioYH9/1NxiESY9gX8zE30gueBCt5ceTvKxLYZNuuLxUlpS2t1J9ay5mg/lSKZE
KxUZ5W1DOh8MY8Zp9HTC0z+6/Ody4VRAeGbItqsTZnoiLCe2tNYWjOlWBhD17TyT
O6BIeMVmiABQeDM6kFswo+9zNF0nso/kIggJ+NVxqDXCF77DR48njHz7BkF9Yza0
/4x6IAvMTpvO9VDs7jHJhmVHOoYUgBn8Oe2v95rps6yE7/Usx8BkQFihiJVIhMO2
Iriot5jZb97WCSUriFFJ8qOzvEQqC9A3bOEoAgzRFxXnUawhCBZF+HCGYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdu13/4RKdRInwmrD/MbTMWyW9HMB8GA1UdIwQY
MBaAFHSCsBdxfKg6BeTLw/Jm8SpTWdXlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZElLd0YzRjhxRG9GNU12RDhtYnhLbE5aMWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9kNDgzNWItNzMyMy00NjcxLWFkNTkt
N2ZiMDU5MjBlMjI4LzEvZElLd0YzRjhxRG9GNU12RDhtYnhLbE5aMWVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9kNDgzNWItNzMyMy00NjcxLWFkNTktN2ZiMDU5MjBlMjI4
LzEvZElLd0YzRjhxRG9GNU12RDhtYnhLbE5aMWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEmVMIiq6
Ie9Hvkjs3DbIKLU2rcUoecVkMuKOYNvGvN0y94nYA12+rg5DDLjA4ECo4i9CA0W1
zG55uFYmkWavByoCBkurx2Uuc3nGSRZG5/ppL3ER0snrlKAxYkG4/NVFTVPKCg9j
esl6CFw/oriUzit4eKo/PX69PwPUYv3rCpO2BpLmMNnqUHNbQIQAMxqXvBczyZfr
RUIzND89Qty1pVYu04rEDxEcrhZ7Rkwbq29H/86pbBdjtU7Ux4N/8ZbPlL37oCcs
Jr26ZyaqUbn16+xfPutcWO2ERqf0CayiWmKQEIUyjB7OKCmULGArzbgATmeWY6Lx
G8yQFzpLnJ+sBg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:06:34 2026 by rpki-client