Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
File: DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft (raw, json)
Hash identifier: C6fMzkFGy+VcY5qY3gG3zYYM/Xetgyiy37vnqlxU/N0=
Subject key identifier: 83:65:D1:E0:A9:B0:C7:A0:23:72:B5:47:7E:E6:11:7D:4F:7C:9E:20
Authority key identifier: 0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC
Certificate issuer: /CN=0d702c53cb803b14644e67587e5d6fd612b64bcc
Certificate serial: 019F91DA5419F9BEB314C2CBBC72E05EC3DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
Manifest number: 19C6
Signing time: Fri 24 Jul 2026 02:00:32 +0000
Manifest this update: Fri 24 Jul 2026 02:00:32 +0000
Manifest next update: Sat 25 Jul 2026 02:00:32 +0000
Files and hashes: 1: DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl (hash: aG/zN7lp3zRveZyvhpr1T52ZhkvzaASlvz9Eu2w9GN0=)
2: X2dW8Ddau0oR-gekYObrhkFfF_g.roa (hash: CXklzZ2YRKZLcPWGGWuQjQMp/BVjdo/rLeJlfyEGzHE=)
3: vEA8ukjZ43YZlzw8CBVOqmyggo8.roa (hash: tuYAox2HkNBn4tSAkZLkz/3INYGpptZYZBvxGb9Ksys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:54:19:f9:be:b3:14:c2:cb:bc:72:e0:5e:c3:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d702c53cb803b14644e67587e5d6fd612b64bcc
Validity
Not Before: Jul 24 02:00:32 2026 GMT
Not After : Jul 25 02:00:32 2026 GMT
Subject: CN=8365d1e0a9b0c7a02372b5477ee6117d4f7c9e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:13:39:f2:0f:3e:a0:fa:28:88:50:5f:dc:7c:
e2:13:ad:28:05:71:40:64:67:61:1b:25:7d:d7:43:
20:ed:f1:e0:94:ac:8c:b7:b0:33:fa:75:e7:c2:9a:
99:db:95:49:e1:26:a9:5a:49:c4:23:0e:9b:6e:2b:
8a:90:69:ae:69:bf:71:56:4d:a0:a7:b0:43:f7:7a:
25:ec:20:f0:01:f2:77:3a:ae:17:5a:8f:25:9f:76:
1b:df:ae:0f:38:85:e5:85:a0:b3:7d:80:b1:c1:cf:
35:a4:b2:36:96:45:b0:cb:bb:1d:0e:31:fa:e6:d7:
ea:44:af:b4:9b:cb:7b:f5:bd:1b:bd:6f:70:52:23:
83:c7:04:67:e1:6f:29:78:12:5d:2f:fd:6b:31:b5:
46:b0:d5:a7:09:e9:2c:f5:5c:8c:66:c7:25:a3:0d:
d9:99:a7:f4:0f:a8:5d:89:bf:0a:67:89:d5:38:65:
85:8c:54:72:e7:d8:d8:21:f5:29:13:84:16:54:e0:
02:a3:82:9e:bb:77:3e:ba:03:5d:f2:fe:af:84:a3:
e6:8e:84:20:47:5c:82:7d:94:8f:b9:a7:02:4c:2c:
28:52:5e:6a:b7:d0:24:d1:3e:e3:91:20:4b:74:51:
d7:96:6e:48:7e:35:2e:54:72:6a:6e:4a:69:a7:e9:
53:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:65:D1:E0:A9:B0:C7:A0:23:72:B5:47:7E:E6:11:7D:4F:7C:9E:20
X509v3 Authority Key Identifier:
keyid:0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:2a:ef:c0:47:bb:15:5c:e0:4f:d7:d5:43:4d:ef:3c:9a:da:
1e:a4:7e:61:5a:96:bc:d4:98:c5:57:86:ac:e9:3c:8b:d2:ca:
69:2c:d6:3f:8d:08:10:1f:27:c3:d4:7d:df:0b:8e:f2:b4:fb:
4b:a4:45:43:e8:3c:c1:42:2b:cc:99:14:97:25:7d:63:53:08:
af:c2:ed:e4:89:26:88:7d:6e:01:75:c1:1d:b8:65:ec:ee:eb:
5d:84:bd:f5:c6:8f:10:84:7b:5d:83:e2:3f:46:65:9c:4f:aa:
51:a0:50:97:ab:2c:d8:1f:50:45:89:55:61:3b:38:80:30:99:
6e:c8:4b:f6:24:d6:f2:55:95:88:ae:21:06:1b:e0:53:55:40:
63:3e:9a:a1:16:44:00:cf:bd:2e:ca:0e:fe:3e:d2:ae:72:80:
e4:17:09:75:39:04:86:27:b2:36:b6:7c:b7:30:37:be:9a:e9:
7f:2b:eb:14:31:8d:cc:7c:4a:e1:1c:6e:70:f0:62:bd:68:94:
ef:fd:58:e4:0e:27:38:92:70:9f:f1:c9:5e:c2:57:ed:20:6a:
a9:a7:0a:95:cf:50:4a:41:34:bc:c0:a9:91:6b:1f:03:f0:a0:
d9:79:d6:12:5b:ba:6e:b9:d1:f8:76:cb:d0:8f:26:3d:ff:2c:
2f:21:65:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:58:04 2026 by rpki-client