Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
File: DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft (raw, json)
Hash identifier: XXTMFFbAbPEnxnGQgw4abtpy0ZWa3ucxzIz7NnPTzl8=
Subject key identifier: A0:56:A4:3C:F6:7F:36:74:BF:91:FC:33:C8:E9:08:EA:C3:8E:29:80
Authority key identifier: 0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC
Certificate issuer: /CN=0d702c53cb803b14644e67587e5d6fd612b64bcc
Certificate serial: 019F93C9622428D09B6FBB3B435F13E9AD17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 11:01:16 +0000
Manifest this update: Fri 24 Jul 2026 11:01:16 +0000
Manifest next update: Sat 25 Jul 2026 11:01:16 +0000
Files and hashes: 1: DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl (hash: ff76uClgzjc0u1yW7U0R6/GdMTuzSnF6PF+Wv2Kc9Uw=)
2: X2dW8Ddau0oR-gekYObrhkFfF_g.roa (hash: CXklzZ2YRKZLcPWGGWuQjQMp/BVjdo/rLeJlfyEGzHE=)
3: vEA8ukjZ43YZlzw8CBVOqmyggo8.roa (hash: tuYAox2HkNBn4tSAkZLkz/3INYGpptZYZBvxGb9Ksys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:62:24:28:d0:9b:6f:bb:3b:43:5f:13:e9:ad:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d702c53cb803b14644e67587e5d6fd612b64bcc
Validity
Not Before: Jul 24 11:01:16 2026 GMT
Not After : Jul 25 11:01:16 2026 GMT
Subject: CN=a056a43cf67f3674bf91fc33c8e908eac38e2980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7e:ca:85:c0:1b:f7:21:91:0b:fc:d8:ae:c3:
5d:2a:40:03:ff:90:71:c6:dc:46:6b:fa:2a:23:83:
37:79:96:ef:c1:1c:b8:5d:ae:a8:3d:ff:cb:42:5c:
49:96:30:b0:b7:26:fc:ec:84:69:83:c1:f5:13:dc:
f3:76:c3:37:00:e6:28:98:a5:4e:81:24:1b:33:bf:
29:13:b9:ed:8a:15:47:ce:e9:f7:be:aa:6a:08:54:
1a:d1:a9:0e:5f:91:b2:b9:71:b7:77:75:5b:a3:ca:
52:ce:62:89:8f:ca:10:4d:dd:a1:9e:bb:01:29:4b:
d2:60:68:cd:fd:d8:f2:1b:e9:62:af:1a:fa:3e:9a:
3d:ec:53:d5:f8:63:3c:36:f4:06:fc:00:5b:23:a8:
25:f9:68:3e:d0:14:13:06:0d:fe:66:14:d4:91:e3:
f8:f6:e7:4c:b2:3e:18:b2:62:4f:ba:0c:ce:30:6a:
d3:b5:87:6c:a4:60:67:f1:48:1f:89:bc:70:7b:6b:
f5:a3:c1:eb:a3:39:a5:8d:6f:06:dc:5f:e8:d4:af:
9c:b8:72:12:e6:4b:7a:73:56:b5:d9:ca:15:5f:ad:
06:56:97:35:0b:1f:72:6e:e0:7e:1b:01:45:33:c5:
e7:b6:93:01:2f:43:07:0c:fd:5f:c6:df:24:92:97:
cf:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:56:A4:3C:F6:7F:36:74:BF:91:FC:33:C8:E9:08:EA:C3:8E:29:80
X509v3 Authority Key Identifier:
keyid:0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:dd:26:4c:e5:53:6c:64:5e:1c:cd:72:2a:84:f9:f4:48:57:
84:05:c8:31:8a:91:c9:4c:ec:2b:22:74:fd:f2:72:51:95:43:
63:03:5e:8c:8b:44:aa:30:35:71:d1:c8:34:d2:dd:45:40:7f:
f8:ac:da:de:b0:93:f3:37:e6:2e:d1:3c:2c:8e:6a:57:0d:82:
c3:dc:20:97:76:e4:4c:46:18:46:94:0a:33:d8:d6:65:cd:2f:
13:3e:0d:1e:d8:65:ad:82:7f:92:64:a1:2d:b3:81:32:34:fa:
43:77:fe:3d:95:fe:73:cf:a2:99:74:25:e9:24:31:26:b6:f8:
16:f7:26:05:2e:32:da:85:17:34:8e:37:74:bd:07:39:01:5d:
62:2f:85:ed:ec:f1:17:47:ea:5d:63:fe:87:26:10:b8:61:43:
29:d4:df:b4:92:e1:23:06:44:de:65:95:10:2a:b2:2c:f7:23:
8f:a6:7c:56:5c:f0:a7:51:44:28:96:ba:20:c5:0a:b8:1d:a3:
ac:50:c9:b7:a1:35:72:f1:47:d0:3b:39:d9:3f:63:fa:5e:fc:
51:bd:79:78:1f:aa:ee:00:8e:03:67:d1:69:88:09:f7:48:71:
0a:7c:7c:30:3a:9c:08:f2:7b:30:f7:61:37:02:3a:28:ab:bb:
99:10:12:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TyWIkKNCbb7s7Q18T6a0XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNzAyYzUzY2I4MDNiMTQ2NDRlNjc1ODdlNWQ2ZmQ2MTJi
NjRiY2MwHhcNMjYwNzI0MTEwMTE2WhcNMjYwNzI1MTEwMTE2WjAzMTEwLwYDVQQD
EyhhMDU2YTQzY2Y2N2YzNjc0YmY5MWZjMzNjOGU5MDhlYWMzOGUyOTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX7KhcAb9yGRC/zYrsNdKkAD/5Bx
xtxGa/oqI4M3eZbvwRy4Xa6oPf/LQlxJljCwtyb87IRpg8H1E9zzdsM3AOYomKVO
gSQbM78pE7ntihVHzun3vqpqCFQa0akOX5GyuXG3d3Vbo8pSzmKJj8oQTd2hnrsB
KUvSYGjN/djyG+lirxr6Ppo97FPV+GM8NvQG/ABbI6gl+Wg+0BQTBg3+ZhTUkeP4
9udMsj4YsmJPugzOMGrTtYdspGBn8Ugfibxwe2v1o8HrozmljW8G3F/o1K+cuHIS
5kt6c1a12coVX60GVpc1Cx9ybuB+GwFFM8XntpMBL0MHDP1fxt8kkpfP2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBWpDz2fzZ0v5H8M8jpCOrDjimAMB8GA1UdIwQY
MBaAFA1wLFPLgDsUZE5nWH5db9YStkvMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhBc1U4dUFPeFJrVG1kWWZsMXYxaEsyUzh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9kM2QxMDUtZjk3Mi00YzdjLWJmZWEt
M2YyNTM5MmRlN2Y5LzEvRFhBc1U4dUFPeFJrVG1kWWZsMXYxaEsyUzh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9kM2QxMDUtZjk3Mi00YzdjLWJmZWEtM2YyNTM5MmRlN2Y5
LzEvRFhBc1U4dUFPeFJrVG1kWWZsMXYxaEsyUzh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGd0mTOVT
bGReHM1yKoT59EhXhAXIMYqRyUzsKyJ0/fJyUZVDYwNejItEqjA1cdHINNLdRUB/
+Kza3rCT8zfmLtE8LI5qVw2Cw9wgl3bkTEYYRpQKM9jWZc0vEz4NHthlrYJ/kmSh
LbOBMjT6Q3f+PZX+c8+imXQl6SQxJrb4FvcmBS4y2oUXNI43dL0HOQFdYi+F7ezx
F0fqXWP+hyYQuGFDKdTftJLhIwZE3mWVECqyLPcjj6Z8Vlzwp1FEKJa6IMUKuB2j
rFDJt6E1cvFH0Ds52T9j+l78Ub15eB+q7gCOA2fRaYgJ90hxCnx8MDqcCPJ7MPdh
NwI6KKu7mRASsA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:56:42 2026 by rpki-client