Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
File: Di1CDmYchlcQif8LUZZahuDXvHU.mft (raw, json)
Hash identifier: iSz7B2cTopuofGeovy/wiJpoWzQdHX+/++gR16n4Ios=
Subject key identifier: C9:21:63:CC:AD:6F:23:BC:17:28:E4:49:9E:FE:0F:BA:6A:DF:7D:F7
Authority key identifier: 0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
Certificate issuer: /CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Certificate serial: 019F92116D934EB96DB0B723995CABCD4A59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 03:00:43 +0000
Manifest this update: Fri 24 Jul 2026 03:00:43 +0000
Manifest next update: Sat 25 Jul 2026 03:00:43 +0000
Files and hashes: 1: Di1CDmYchlcQif8LUZZahuDXvHU.crl (hash: vIDPzVaequUt1yNpFrYiu431xg5w//v7hmG9IjoKg6c=)
2: qB9Z-zHdmjEFSIG2vfJGfIMdpA0.roa (hash: MxW4mBfsVBC2g/oHLcgSIPQNdBtdZMBf3Vv3p/+UNxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:6d:93:4e:b9:6d:b0:b7:23:99:5c:ab:cd:4a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Validity
Not Before: Jul 24 03:00:43 2026 GMT
Not After : Jul 25 03:00:43 2026 GMT
Subject: CN=c92163ccad6f23bc1728e4499efe0fba6adf7df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bb:3c:df:9e:2e:6a:6b:6b:6f:f3:3b:91:ee:
7c:31:08:fc:00:b8:c0:3d:19:7f:34:52:49:c1:36:
90:d8:1b:07:8a:bd:f6:5e:fd:12:90:2e:7a:c4:bf:
ac:2a:88:cd:1d:cf:b5:46:02:e1:cd:3b:d8:17:17:
d6:d5:13:41:fc:0e:f5:bb:f5:5a:c3:17:44:59:b2:
91:db:2b:36:f7:17:53:1d:e2:10:4c:b7:0a:c5:ca:
2d:62:ed:ee:85:bb:2e:9e:31:0d:ee:9d:e2:8c:92:
26:01:7f:59:26:fa:8d:17:90:51:ff:c3:ba:d5:e5:
91:64:d7:d9:63:bc:17:4f:67:69:d1:b5:4c:4d:d2:
c0:da:58:d6:65:dd:3d:ee:c8:a3:7a:9e:72:43:20:
e2:c2:ba:c8:bf:6a:82:07:cc:a3:c4:13:60:ef:fc:
23:eb:f2:7b:48:97:e3:4d:96:d9:e5:d5:4c:66:00:
67:96:7e:5a:44:32:a7:e2:a5:1e:74:79:c8:8a:d4:
8a:4d:69:c9:73:0e:34:4a:34:d5:83:1a:e4:09:a3:
bd:5c:20:0a:c0:87:52:57:42:9a:e0:f6:ee:33:37:
97:f2:ad:ca:27:27:6f:b2:48:1b:94:9c:65:e6:7e:
c6:35:57:54:12:6e:21:1a:db:3b:e5:cf:91:53:a7:
a6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:21:63:CC:AD:6F:23:BC:17:28:E4:49:9E:FE:0F:BA:6A:DF:7D:F7
X509v3 Authority Key Identifier:
keyid:0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:45:ab:ab:47:38:ec:3d:39:11:38:cc:84:da:12:37:21:92:
fe:5b:e0:e8:67:85:66:47:49:fa:d6:e1:45:e1:4c:a3:f4:1b:
49:c6:98:31:38:aa:c2:2f:80:9a:38:07:80:7f:1b:68:fa:93:
14:d8:39:16:3d:f3:71:06:1c:b2:a3:2a:6e:d0:17:19:65:b6:
53:b1:42:d6:b5:d3:92:31:bd:50:2d:85:e8:33:0d:06:31:1f:
7f:8f:0a:c4:30:2d:ca:d2:d5:d8:1e:3e:87:e2:8a:a0:81:b6:
0b:96:2e:15:40:dd:af:7b:6d:a7:18:1a:5e:7b:65:2f:7e:d4:
ba:1d:35:7f:8c:82:2a:be:0c:74:69:3a:f8:9c:5e:67:92:e3:
5d:03:24:81:73:6e:22:ae:33:6b:8e:92:a5:e3:cb:30:29:42:
c2:49:b6:af:91:33:08:ca:e3:51:c4:00:b7:bb:3f:77:c7:3b:
1d:f0:71:2a:a1:d7:20:5c:38:41:18:5c:10:4d:c0:21:33:57:
83:98:b9:05:61:03:36:e0:03:45:73:b5:ba:77:77:b5:0c:41:
5c:9d:8b:c2:bd:bc:cf:b2:b1:10:f6:56:4c:c1:8e:b0:33:f1:
88:51:46:2e:a3:71:67:aa:42:be:c5:da:c6:13:19:cc:aa:ec:
8f:24:fe:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:33:30 2026 by rpki-client