Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
File: DG8YKAS1blCKo3LAPM63PvjCxos.mft (raw, json)
Hash identifier: 3hu65JJUweFXpq4L1cKUdMGd4AVpUnHUmVQedyIN/WM=
Subject key identifier: 31:E3:AF:B7:F5:01:3E:47:31:0C:AD:48:5E:28:91:5A:99:2E:D4:37
Authority key identifier: 0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B
Certificate issuer: /CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b
Certificate serial: 019F905A6B1E9EB164A87E2FC46169D4DB69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
Manifest number: 19CE
Signing time: Thu 23 Jul 2026 19:01:12 +0000
Manifest this update: Thu 23 Jul 2026 19:01:12 +0000
Manifest next update: Fri 24 Jul 2026 19:01:12 +0000
Files and hashes: 1: DG8YKAS1blCKo3LAPM63PvjCxos.crl (hash: JFcRiAsRTPngCthElGwnHbaPYgdjfJEOFn4hShhdjQo=)
2: anGfaLD7Sw-uBHUL7ZCjm1E0Zuo.roa (hash: odjCBhO2fg7tVXSaHs+W/QeZyJocuWu2JrcGva0i788=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:6b:1e:9e:b1:64:a8:7e:2f:c4:61:69:d4:db:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b
Validity
Not Before: Jul 23 19:01:12 2026 GMT
Not After : Jul 24 19:01:12 2026 GMT
Subject: CN=31e3afb7f5013e47310cad485e28915a992ed437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:0e:a8:8b:f0:19:dc:04:d8:b6:19:43:20:ed:
32:64:6b:0e:4c:76:dc:1d:ef:4c:d1:df:6c:cd:b2:
6c:29:4f:2e:f9:cf:b6:dc:55:a5:74:2b:a4:b8:54:
16:0d:a8:ec:a0:02:57:70:51:4b:03:3c:ff:bc:02:
88:90:6a:ae:11:44:71:bb:60:4f:5b:8a:7f:83:6e:
0b:75:28:4f:cc:7b:00:e9:3a:4f:0f:45:04:e0:39:
e2:aa:b7:9e:61:9f:9c:75:c6:94:36:3a:12:7d:7a:
93:c5:23:3f:db:48:dc:12:2b:68:45:25:ac:59:f4:
59:df:09:f8:49:31:5d:fc:fd:7c:27:7b:6a:39:ea:
1b:fd:8a:ad:7d:48:a6:8b:96:62:8d:40:89:ee:ca:
99:7f:95:f8:54:f9:67:4c:a2:c2:80:3b:9a:53:33:
5e:52:e2:a8:8c:0e:92:81:02:55:70:a4:d9:7c:40:
be:fb:39:b5:b4:06:5d:17:3c:09:49:4f:da:2a:d6:
e5:79:6b:1c:bc:e8:dc:da:7c:6f:82:3b:42:54:c4:
61:0d:60:bd:68:97:5d:88:8a:b8:f0:ef:7d:49:88:
37:df:91:4c:87:f9:c6:79:93:fa:96:f1:7c:17:92:
0c:ee:89:08:db:42:40:dd:1a:54:db:68:20:dd:96:
65:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E3:AF:B7:F5:01:3E:47:31:0C:AD:48:5E:28:91:5A:99:2E:D4:37
X509v3 Authority Key Identifier:
keyid:0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:b0:7f:3f:45:42:a4:39:98:9b:26:f3:eb:1d:39:e4:9e:15:
28:8a:b9:c5:d8:5f:8d:2b:c9:4e:9c:90:23:37:69:b8:d3:c2:
80:4d:e0:ad:34:12:7f:8b:0a:7e:bc:af:26:85:23:86:1d:3e:
2d:f6:bd:3e:6e:61:8f:95:2b:5b:46:91:4c:c6:3c:13:16:db:
a8:ee:d2:e9:2d:f5:2b:7b:17:6b:dd:d4:d8:05:94:78:25:14:
c0:30:ea:5c:ed:1b:54:38:bb:d0:48:3c:fd:fc:e6:64:ac:52:
6a:17:73:b1:63:f3:16:fa:27:c1:60:44:21:85:d0:21:7c:45:
67:67:36:bf:1f:3b:d2:87:d8:14:84:e1:3e:e7:26:79:16:ed:
0c:e4:e0:8d:66:43:00:12:91:80:9c:d9:73:d9:d6:dd:e6:cd:
da:3f:47:66:5b:36:5b:5a:a4:18:ff:ec:92:ad:cf:28:ae:61:
76:3c:8a:e3:98:aa:58:e5:55:46:68:04:7c:35:4c:64:e3:c4:
ea:b0:50:08:fe:97:cf:a2:2f:72:e4:cb:7f:b1:80:98:b7:f9:
eb:ed:b4:e8:89:ec:fc:08:66:68:22:2d:7d:7f:ec:1a:7b:e2:
c0:f4:2b:dd:72:09:cf:c1:49:a3:dc:5c:65:11:39:ba:84:58:
b3:62:a5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:17:50 2026 by rpki-client