Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft
File: dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft (raw, json)
Hash identifier: UXjTogh6PftPrqL/K5BoBDgoPTBoBfo81TDTbfB0U6s=
Subject key identifier: 71:62:42:52:B5:8D:FB:E4:77:D4:44:01:CD:83:61:4A:85:68:74:BF
Authority key identifier: 74:9D:8A:43:28:93:0B:93:8F:A8:60:18:B1:E4:47:EE:4D:8D:A8:F9
Certificate issuer: /CN=749d8a4328930b938fa86018b1e447ee4d8da8f9
Certificate serial: 019F927F01A8E4C8E8A301C86B45A93163E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJ2KQyiTC5OPqGAYseRH7k2NqPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft
Manifest number: 0343
Signing time: Fri 24 Jul 2026 05:00:24 +0000
Manifest this update: Fri 24 Jul 2026 05:00:24 +0000
Manifest next update: Sat 25 Jul 2026 05:00:24 +0000
Files and hashes: 1: 1-mmnoNOS11tga2Q29yD5BQAuFLE.roa (hash: GOq5nJwjD0VCVYVCda8zJe1uGhLFpPTQrRyVuZj7aM8=)
2: dJ2KQyiTC5OPqGAYseRH7k2NqPk.crl (hash: PHLhxJhiJWnUAeKzkY7qoDBZX2do+P12Ny78fomdHL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJ2KQyiTC5OPqGAYseRH7k2NqPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:01:a8:e4:c8:e8:a3:01:c8:6b:45:a9:31:63:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749d8a4328930b938fa86018b1e447ee4d8da8f9
Validity
Not Before: Jul 24 05:00:24 2026 GMT
Not After : Jul 25 05:00:24 2026 GMT
Subject: CN=71624252b58dfbe477d44401cd83614a856874bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2c:b2:d9:99:81:b6:41:08:b1:72:67:5b:36:
b9:8d:36:5a:2e:6a:41:b6:cd:54:7c:6e:cf:0c:c8:
c2:5b:e4:1f:ce:0b:e4:31:d9:f2:ac:a9:d3:70:45:
06:19:97:2c:18:d4:51:fc:f0:7b:6e:b2:a6:21:5e:
c4:a5:19:9e:55:05:44:52:ab:7e:d6:2f:22:14:d1:
4b:d2:8a:91:7d:62:04:58:64:af:c0:68:af:e0:f6:
4d:ad:db:13:b8:4e:8f:0a:38:b5:a8:a7:fa:49:f8:
ee:f0:df:c0:54:37:73:04:db:9a:d7:22:a2:0a:9f:
43:1d:e1:05:48:9c:d3:2d:61:49:34:31:8c:53:57:
f5:b2:dc:77:9b:45:0b:15:b3:0a:f6:26:ee:fa:16:
88:cd:9a:29:93:87:c1:1a:6d:4a:09:8d:87:d7:58:
02:e5:39:81:06:05:2e:ab:1b:80:7f:85:69:8b:48:
e9:bb:10:0e:09:aa:3e:63:a4:bf:78:ec:0b:68:56:
89:18:47:ef:42:99:2e:3d:0c:e6:63:90:cd:9c:a6:
6a:24:6f:9a:c9:98:51:5c:ad:66:80:20:e5:57:85:
4d:e3:5e:22:db:82:80:c3:06:25:08:ce:5b:9c:dc:
8f:73:d5:e7:bc:88:dc:e3:98:8b:89:b7:b8:7f:be:
c7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:62:42:52:B5:8D:FB:E4:77:D4:44:01:CD:83:61:4A:85:68:74:BF
X509v3 Authority Key Identifier:
keyid:74:9D:8A:43:28:93:0B:93:8F:A8:60:18:B1:E4:47:EE:4D:8D:A8:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJ2KQyiTC5OPqGAYseRH7k2NqPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:b0:b4:61:73:11:fc:44:2f:ab:1b:6d:ad:16:26:c2:73:66:
75:47:22:93:1a:c2:c7:32:27:bc:20:ab:f7:e2:63:44:cd:df:
a0:88:66:31:ea:b2:b7:7a:7c:ce:f7:06:16:7f:40:36:b0:ed:
c2:a0:37:91:d3:65:8c:f2:51:fd:8e:ec:df:4b:95:db:4b:20:
84:55:9d:72:f4:ee:bc:54:ac:42:61:16:cc:0c:52:43:2c:e0:
b5:b4:dd:86:12:d0:9b:64:8b:b3:d2:7d:c8:04:6b:f8:28:6c:
49:1b:34:16:09:1c:ff:de:e3:71:60:6e:45:6b:be:02:b4:9d:
7d:30:ba:3d:5c:26:63:a3:3f:9a:a6:e2:fa:49:26:1d:c8:34:
f7:b4:0a:49:0e:88:3d:fd:f4:6e:ea:54:9e:07:f2:8b:c0:bc:
b3:78:fd:90:d3:4a:7c:3e:3e:4f:d8:95:6f:4f:95:6f:79:59:
b2:53:7f:08:76:6c:8d:c4:d4:ea:69:22:19:01:07:ba:31:50:
e3:9b:d9:75:fb:b0:92:9a:78:37:4e:2a:68:cb:4b:83:89:e3:
41:fd:2f:29:18:e4:e4:62:bc:d2:14:b9:81:5a:3f:83:48:d6:
09:43:fc:14:c2:19:08:f9:55:af:4a:46:0b:fa:39:91:fb:51:
fb:a9:d2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:38:38 2026 by rpki-client