Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
File: DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft (raw, json)
Hash identifier: 1QJZedrPpxuISN0WLhNBAOYVZRZARsrurBhRYbZCyBQ=
Subject key identifier: 5F:15:5B:78:EF:F2:0B:85:26:1E:E6:2F:A9:12:EB:7E:22:80:4A:6A
Authority key identifier: 0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
Certificate issuer: /CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Certificate serial: 019F939187EF3581C553D34749CC9BF0744C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
Manifest number: 18B9
Signing time: Fri 24 Jul 2026 10:00:15 +0000
Manifest this update: Fri 24 Jul 2026 10:00:15 +0000
Manifest next update: Sat 25 Jul 2026 10:00:15 +0000
Files and hashes: 1: 2lfnmN1-dLZH09vmQWL0x_KLc8Y.roa (hash: JmmqwM4dV5ZCDyqAq/Au9vdb5ogccNfE+4IrV1SqD54=)
2: DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl (hash: aHj+7eZM+qgGdVfVPhtbSc4MnDGJHolbUaRYfjfq4fs=)
3: cpBLfVVbG2Bg4TA77UzT5VjhgRE.roa (hash: N0d6jFAymHdRViLXYwxHMPIvLpjH51TdzFY5Ek5D56g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:87:ef:35:81:c5:53:d3:47:49:cc:9b:f0:74:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Validity
Not Before: Jul 24 10:00:15 2026 GMT
Not After : Jul 25 10:00:15 2026 GMT
Subject: CN=5f155b78eff20b85261ee62fa912eb7e22804a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ad:6f:17:14:96:1e:17:da:22:01:b8:4f:e5:
3e:2e:8c:f5:18:05:4f:cd:14:77:f4:e9:26:63:94:
19:61:1d:b2:85:bc:8e:72:24:3f:e9:fb:8f:05:97:
7f:8d:9c:7b:69:20:f6:3d:1d:32:92:dc:64:78:e1:
cb:b9:aa:4c:d6:59:13:88:0e:56:bd:a7:ec:c4:2d:
84:19:d8:47:ac:1d:b0:51:5f:c5:7a:6c:47:cd:9a:
1e:12:dd:09:ae:42:71:06:ff:48:75:5b:3c:17:4e:
a6:2a:94:cd:e0:34:41:2f:54:66:a3:c4:cd:49:d6:
4c:0a:5b:3e:16:9d:d0:90:ca:0f:11:ab:cc:df:e1:
49:ca:cc:0e:e4:fb:5b:48:73:47:0c:a4:fc:32:77:
b8:1e:f4:d0:5b:57:7c:8c:f1:1b:80:42:20:e4:50:
84:9f:45:2f:63:2a:01:01:44:06:2b:db:5d:99:bf:
1b:ca:1b:db:68:6c:ca:60:e3:99:fd:40:9c:74:e4:
a4:dd:88:33:56:a6:17:c0:57:e8:e9:24:da:d6:b6:
b1:2e:14:e0:39:42:eb:fc:13:97:a3:cc:2b:41:1b:
39:cf:27:ea:4e:60:bc:25:70:59:d1:2b:91:e8:8e:
c4:bd:fe:09:bc:52:18:90:33:77:d9:bf:d8:80:dc:
c9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:15:5B:78:EF:F2:0B:85:26:1E:E6:2F:A9:12:EB:7E:22:80:4A:6A
X509v3 Authority Key Identifier:
keyid:0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:85:c5:a5:15:b9:d7:58:88:8b:f0:ba:3c:3b:a4:4e:b7:24:
87:9f:8c:6c:d9:91:b6:9d:ee:c0:5f:6f:1b:3c:ef:2c:dc:cd:
2f:fd:7d:1d:3f:c4:26:0b:25:de:18:ab:fc:a4:17:2d:80:95:
2c:80:85:fb:0e:df:79:00:4b:9d:d3:15:57:e3:cf:c3:7b:0b:
48:14:1d:5a:a0:eb:c0:ef:f9:f6:bf:c9:62:ed:a6:b8:10:19:
47:fd:cd:01:bd:72:08:4f:36:a9:05:f0:9e:cd:90:aa:f1:d1:
d1:1a:f6:01:ed:00:63:72:71:b5:19:df:8d:0a:94:e6:ab:ce:
3d:5d:d3:58:b8:d9:08:4d:80:20:5a:5f:ad:90:8d:b8:b8:90:
4f:48:c6:b4:cd:72:3e:dd:7d:10:f7:e2:94:46:10:54:96:0d:
bc:6e:b0:15:e3:30:5a:46:0f:34:69:19:55:82:7d:83:26:41:
39:af:d1:e1:53:f9:db:f7:c3:1b:a0:c5:9c:81:86:b6:de:a9:
1a:6f:7f:2d:d5:39:a3:61:d5:4a:07:55:27:09:a7:32:6e:18:
30:61:1e:59:8d:0e:ed:4b:da:4f:c3:0c:96:bf:d6:a1:47:b4:
ff:fa:66:11:a6:a6:67:88:47:35:ef:11:8e:aa:fe:3e:e3:70:
ac:a0:61:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:55:36 2026 by rpki-client