Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
File: RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft (raw, json)
Hash identifier: +Jie1W6Kn304D7l4btTv54eguefSBYm9V43cGjWaK0U=
Subject key identifier: F3:29:8A:10:22:CC:B3:7B:7A:89:A5:37:95:B2:9A:FC:49:F4:2B:E6
Authority key identifier: 45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D
Certificate issuer: /CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d
Certificate serial: 019F92118F26767E7D8316D48D5E5D03598E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
Manifest number: 19C6
Signing time: Fri 24 Jul 2026 03:00:51 +0000
Manifest this update: Fri 24 Jul 2026 03:00:51 +0000
Manifest next update: Sat 25 Jul 2026 03:00:51 +0000
Files and hashes: 1: RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl (hash: RqZoeBE4ActnyvvhWFCcY4CYNwx74fW/aPS7vjAKg38=)
2: _UE15j8dt-0E4MNHI1SJ6VAbDdo.roa (hash: RpMmPkih2MaIwwmI1CZ2YI65k33Pkn9LWYdRz9m4yPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:8f:26:76:7e:7d:83:16:d4:8d:5e:5d:03:59:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d
Validity
Not Before: Jul 24 03:00:51 2026 GMT
Not After : Jul 25 03:00:51 2026 GMT
Subject: CN=f3298a1022ccb37b7a89a53795b29afc49f42be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2d:44:f3:26:7a:61:c6:01:90:53:20:17:f7:
35:f8:15:f1:34:92:a8:f7:b0:08:d7:23:a7:e3:44:
6b:65:bd:18:82:b3:20:5e:0d:a4:8b:08:23:3f:66:
03:7c:25:69:28:d6:7b:31:f4:51:79:2b:54:2d:3b:
60:71:ca:d2:37:50:3d:95:67:78:b5:26:89:23:f1:
9c:35:a2:e1:f5:38:4c:fa:eb:82:c5:2e:db:de:a8:
b4:23:34:0f:eb:b1:17:22:b8:67:8a:e7:fd:5b:c2:
7a:9b:38:73:9f:7f:64:c6:ca:46:0f:1b:4b:79:99:
47:eb:54:3d:fa:a2:90:65:2e:66:38:b1:9a:c5:f4:
33:d0:ef:bc:48:a7:d8:3e:43:63:ee:f1:91:9e:28:
b4:33:f8:4d:a9:f2:48:a8:09:07:f6:15:ef:31:0b:
e0:58:72:82:0e:f4:64:76:b6:80:be:09:6f:46:06:
9c:0b:77:0e:d0:ff:4a:6d:c4:74:37:e7:ac:02:d5:
9e:25:f2:fd:d7:41:0b:6b:60:c3:b2:dc:71:42:f5:
0f:72:95:cc:70:4c:32:2f:50:36:93:6a:e4:aa:9d:
c1:34:c7:e4:94:b4:ab:df:03:84:61:49:7e:38:6f:
14:2b:7c:e4:9f:5c:03:5a:d3:92:f3:4b:5a:5e:e2:
00:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:29:8A:10:22:CC:B3:7B:7A:89:A5:37:95:B2:9A:FC:49:F4:2B:E6
X509v3 Authority Key Identifier:
keyid:45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:61:dd:c0:9a:7f:42:86:db:b6:f2:9a:f1:61:ef:46:76:82:
c3:e0:cb:ad:d2:1e:82:e8:a1:76:8f:b5:d3:65:49:c3:62:f1:
a8:ea:9a:96:08:3c:b0:52:c5:22:f3:87:c8:ae:28:03:b4:cd:
12:af:64:17:8d:55:d3:d4:e7:2c:b9:29:5e:25:9c:76:27:fd:
95:5d:80:d3:dd:2e:b8:6d:7a:8d:50:3d:31:02:8d:25:6c:26:
fd:b5:13:dc:36:b5:64:5f:2f:0e:f2:73:e4:7d:ba:f7:62:6e:
47:78:69:28:6e:92:ab:a2:a0:1f:4d:5d:c1:55:cd:c9:7e:16:
e7:62:22:be:26:7a:6a:6a:0c:e3:fa:03:0b:54:75:c9:62:12:
cb:14:a3:c6:be:b2:91:cb:7b:e0:8c:5d:bc:31:c8:24:62:b7:
1d:a4:8a:ff:b6:96:00:f6:8f:09:07:38:7c:1f:71:bd:7e:9f:
39:4e:77:01:49:79:d4:96:20:83:00:cc:e2:4e:44:08:c1:56:
c4:9f:da:00:a6:ec:95:b5:f5:d0:98:ee:29:8c:f1:db:33:97:
f6:b9:5d:17:c7:d2:f0:53:1a:c2:26:ce:e8:38:d1:f6:22:da:
cc:ee:90:1a:d4:a5:0b:08:60:2a:b2:88:c4:67:4f:53:29:1d:
df:94:9c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:17:40 2026 by rpki-client