Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/DpMafPLalMzUoq_OI_OS1AYdVvk.mft
File: DpMafPLalMzUoq_OI_OS1AYdVvk.mft (raw, json)
Hash identifier: NxPkLRKU1Dk/vnB8kZKsIFelWaZX+XLcBdCnPzNVEFE=
Subject key identifier: A0:1E:D4:D0:F4:B2:B6:A2:7C:24:68:68:C1:2C:3A:00:0B:9C:67:2B
Authority key identifier: 0E:93:1A:7C:F2:DA:94:CC:D4:A2:AF:CE:23:F3:92:D4:06:1D:56:F9
Certificate issuer: /CN=0e931a7cf2da94ccd4a2afce23f392d4061d56f9
Certificate serial: 019F93FF8A742C44FE2A080080F72C1F08FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DpMafPLalMzUoq_OI_OS1AYdVvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/DpMafPLalMzUoq_OI_OS1AYdVvk.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 12:00:25 +0000
Manifest this update: Fri 24 Jul 2026 12:00:25 +0000
Manifest next update: Sat 25 Jul 2026 12:00:25 +0000
Files and hashes: 1: 5bnhJYFPOsYDLyzjgUMjNOoQVxk.roa (hash: 4/9Kwtc7pVMZkf2C3AcfJB/4wzcdsheoGFzOOPKCvXs=)
2: DpMafPLalMzUoq_OI_OS1AYdVvk.crl (hash: yeXi5QfIX+oVVZF3VjWXtMDTb2QPp0TqJxXS+RoOwQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/DpMafPLalMzUoq_OI_OS1AYdVvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/DpMafPLalMzUoq_OI_OS1AYdVvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DpMafPLalMzUoq_OI_OS1AYdVvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:8a:74:2c:44:fe:2a:08:00:80:f7:2c:1f:08:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e931a7cf2da94ccd4a2afce23f392d4061d56f9
Validity
Not Before: Jul 24 12:00:25 2026 GMT
Not After : Jul 25 12:00:25 2026 GMT
Subject: CN=a01ed4d0f4b2b6a27c246868c12c3a000b9c672b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:17:c3:0e:b6:7d:df:e4:58:c9:fb:85:10:08:
08:12:4e:b2:60:ce:66:5b:28:6f:6f:65:0a:22:48:
cf:ab:ef:5d:38:b1:b4:d6:5c:a0:26:3f:89:1b:4f:
40:43:21:1b:3a:98:61:76:c0:f6:f4:6d:80:97:45:
a8:e1:ab:4c:7e:f4:99:92:d9:28:9e:09:3e:06:c0:
f2:0b:ab:83:76:a9:3b:88:3d:9a:0a:0a:0f:47:40:
51:1f:b2:4c:62:0a:ee:87:5a:f9:6e:f7:04:9a:01:
d4:53:5c:ca:ec:14:fa:bd:91:c6:88:ff:c2:da:d0:
f4:2c:de:bf:2b:f8:d8:a2:49:6a:af:ce:1f:5f:2a:
2b:80:c1:cb:72:1e:1a:39:a6:6e:31:61:d4:fe:3b:
30:d0:8b:22:64:e7:07:3c:2b:a1:47:3f:15:76:61:
8f:9c:c4:2a:dd:45:c2:7d:ad:f6:36:8a:46:4b:a7:
00:63:4f:c9:e8:10:b2:f4:c2:a0:c6:16:6c:31:02:
62:f6:1a:4c:30:16:95:f9:e6:ed:26:eb:17:48:7d:
10:05:45:51:8a:f1:2a:97:ea:ce:25:60:e7:27:a5:
46:51:24:40:d5:bd:57:ca:cc:a2:9f:4c:ee:f0:09:
f1:9b:26:f8:8b:e1:7a:cc:6a:6b:fb:98:5c:5c:7c:
06:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:1E:D4:D0:F4:B2:B6:A2:7C:24:68:68:C1:2C:3A:00:0B:9C:67:2B
X509v3 Authority Key Identifier:
keyid:0E:93:1A:7C:F2:DA:94:CC:D4:A2:AF:CE:23:F3:92:D4:06:1D:56:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpMafPLalMzUoq_OI_OS1AYdVvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/DpMafPLalMzUoq_OI_OS1AYdVvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/DpMafPLalMzUoq_OI_OS1AYdVvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:76:48:2b:7c:91:b5:81:c3:72:f2:58:36:27:e9:ae:e8:85:
b7:1b:33:00:8c:89:51:db:dc:12:28:5b:68:d8:7b:92:76:28:
9e:0b:43:2a:11:9e:e3:99:67:ce:2f:15:0e:96:53:b3:9a:71:
c4:65:3a:d3:11:91:4c:ca:5f:66:fb:1b:96:ff:12:13:df:d1:
ec:2f:4b:88:aa:c7:6f:9c:6a:23:9d:85:c6:60:7d:48:1a:ea:
72:37:1c:ae:6d:4e:53:47:f1:af:4a:74:b3:73:f0:1f:0b:d3:
6b:00:1f:59:7e:04:af:11:b9:2a:18:1c:01:d9:43:24:a8:1d:
0b:38:f4:96:46:63:66:78:80:3e:0c:7f:a1:08:9f:5f:d0:6d:
94:99:ec:5e:55:49:ba:94:bb:48:a4:4b:b8:c7:29:70:60:17:
1d:2d:18:3e:61:55:b5:9a:9c:c1:e9:23:4e:b7:da:d6:7d:a3:
e1:80:dd:b0:26:d2:e9:1c:3a:1e:1a:1e:3e:8c:ad:f5:0c:33:
ff:35:de:ae:7b:6a:9e:be:d6:c5:27:c2:05:9f:dc:9a:52:f3:
dc:cb:1e:15:73:b6:03:62:45:c7:0d:0b:2a:c3:96:9e:d8:e5:
67:93:75:34:10:91:dc:61:d4:a0:4d:07:ee:9a:6c:8e:8d:28:
e0:d9:cd:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:47:15 2026 by rpki-client