Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
File: dkL9PzNs5u6Z5h-pdwSabGqSPko.mft (raw, json)
Hash identifier: /XKDBsulLY8yw3IYH+3kt6+sOkHyUNH2FooqMWTC5hY=
Subject key identifier: 89:2C:85:74:C5:58:96:1B:AA:7C:EF:EA:31:EF:2B:D4:94:EE:7A:27
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 019F9436FFF7BCD27B6F939BE3E7C5CB0D3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
Manifest number: 1A4C
Signing time: Fri 24 Jul 2026 13:01:00 +0000
Manifest this update: Fri 24 Jul 2026 13:01:00 +0000
Manifest next update: Sat 25 Jul 2026 13:01:00 +0000
Files and hashes: 1: aTug7YNO613h0EdhaVanobAofs4.roa (hash: JO+eAjDs3aZGB9gkmGCHWKFzmsIX3/pwIhE/HLe+REE=)
2: dkL9PzNs5u6Z5h-pdwSabGqSPko.crl (hash: hQmMHop4bnbkaFGaE/JDQOhef+T/g9TaCAylwF/KpzY=)
3: tZk_CaKCryAvJRReN7aPc9CJl5Q.roa (hash: GDF5SYSr5M1uY12BBc2vpgU4RwEGW3L9n697ONqnZ8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:ff:f7:bc:d2:7b:6f:93:9b:e3:e7:c5:cb:0d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jul 24 13:01:00 2026 GMT
Not After : Jul 25 13:01:00 2026 GMT
Subject: CN=892c8574c558961baa7cefea31ef2bd494ee7a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8e:e7:eb:d1:ec:61:3e:1a:6b:0a:2d:b8:3a:
18:d7:2c:4f:e3:ca:58:9e:2f:f0:ac:00:35:4b:31:
4b:2a:89:79:97:bc:c7:3d:27:5b:6d:24:42:b4:76:
6b:fc:cf:5e:97:0d:76:1e:10:33:d3:d5:e3:0f:d0:
eb:2e:fb:ef:cf:1f:ea:48:7d:03:31:60:7b:76:40:
a8:ff:e0:6d:c1:1e:bc:c2:67:b9:30:48:bc:4e:57:
41:92:1a:64:c6:75:6d:b5:3a:68:0a:1c:c4:df:b0:
df:eb:83:05:95:7b:62:0e:08:44:b2:d7:3a:0f:2d:
ff:dc:eb:cf:59:6a:51:28:ff:16:22:0c:89:ca:48:
28:8c:e3:29:23:aa:70:91:ad:6d:e8:ed:8b:c5:44:
1a:9b:2f:4b:30:c5:b3:99:7b:fd:66:c7:b7:ef:b1:
54:fe:4c:ae:04:22:fe:f0:0f:17:ab:62:dd:0d:e6:
72:83:e1:b9:c0:b2:42:6c:30:c2:40:25:4f:bb:39:
4a:7d:7e:d1:d8:81:2f:41:c8:00:f2:48:64:57:25:
4c:35:e6:85:83:70:14:65:ea:b3:0a:75:8d:23:a3:
8d:76:82:57:12:21:d9:1d:8e:6b:a9:ac:2a:f9:de:
54:90:d1:b8:6d:25:fa:79:43:a4:d8:d5:52:90:1c:
c9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:2C:85:74:C5:58:96:1B:AA:7C:EF:EA:31:EF:2B:D4:94:EE:7A:27
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:57:ea:93:80:14:1c:37:40:af:e3:80:6b:f9:0b:a2:31:93:
df:8f:ad:5b:5d:e7:79:7a:af:87:41:cb:34:6c:e6:a0:35:11:
3c:d5:92:60:a1:52:4a:db:d6:bf:d8:e6:25:2b:af:3b:7e:49:
e7:20:c3:7f:7a:1e:6d:82:33:bc:af:f9:c5:59:1d:17:0a:ab:
56:3a:8f:4e:a5:02:36:45:95:8d:b6:25:13:b9:c5:34:bf:c5:
59:cc:44:16:95:8d:d7:86:c4:72:55:7d:c6:2f:9f:32:2d:f7:
51:21:d0:c3:6b:6b:f2:6c:96:39:7b:1c:27:61:61:af:48:ab:
f7:11:9a:b0:fb:a3:36:90:6a:06:25:fe:48:af:ed:8f:8e:dd:
26:ea:52:dc:7c:1a:09:9d:6f:94:59:ed:d8:b0:53:44:46:4c:
65:b2:1b:1e:7b:30:9f:de:0b:cb:a1:9e:ed:e1:36:a7:ba:26:
7f:90:41:66:e3:08:c1:24:9a:a6:11:53:a9:b1:f1:e9:ed:9a:
43:63:fb:3a:59:83:b2:64:b2:42:f4:49:ff:e8:13:df:30:62:
a7:a4:ac:7c:7f:0d:df:7a:4a:b2:32:3f:a4:e4:7d:75:bf:3c:
0a:b8:bd:0c:34:13:c6:a7:b9:3c:dd:77:62:ef:c2:30:53:a3:
65:5b:e2:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UNv/3vNJ7b5Ob4+fFyw0/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NDJmZDNmMzM2Y2U2ZWU5OWU2MWZhOTc3MDQ5YTZjNmE5
MjNlNGEwHhcNMjYwNzI0MTMwMTAwWhcNMjYwNzI1MTMwMTAwWjAzMTEwLwYDVQQD
Eyg4OTJjODU3NGM1NTg5NjFiYWE3Y2VmZWEzMWVmMmJkNDk0ZWU3YTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtI7n69HsYT4aawotuDoY1yxP48pY
ni/wrAA1SzFLKol5l7zHPSdbbSRCtHZr/M9elw12HhAz09XjD9DrLvvvzx/qSH0D
MWB7dkCo/+BtwR68wme5MEi8TldBkhpkxnVttTpoChzE37Df64MFlXtiDghEstc6
Dy3/3OvPWWpRKP8WIgyJykgojOMpI6pwka1t6O2LxUQamy9LMMWzmXv9Zse377FU
/kyuBCL+8A8Xq2LdDeZyg+G5wLJCbDDCQCVPuzlKfX7R2IEvQcgA8khkVyVMNeaF
g3AUZeqzCnWNI6ONdoJXEiHZHY5rqawq+d5UkNG4bSX6eUOk2NVSkBzJoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkshXTFWJYbqnzv6jHvK9SU7nonMB8GA1UdIwQY
MBaAFHZC/T8zbObumeYfqXcEmmxqkj5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAt
NjJjNDNhYzdjMDJmLzEvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAtNjJjNDNhYzdjMDJm
LzEvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiVfqk4AU
HDdAr+OAa/kLojGT34+tW13neXqvh0HLNGzmoDURPNWSYKFSStvWv9jmJSuvO35J
5yDDf3oebYIzvK/5xVkdFwqrVjqPTqUCNkWVjbYlE7nFNL/FWcxEFpWN14bEclV9
xi+fMi33USHQw2tr8myWOXscJ2Fhr0ir9xGasPujNpBqBiX+SK/tj47dJupS3Hwa
CZ1vlFnt2LBTREZMZbIbHnswn94Ly6Ge7eE2p7omf5BBZuMIwSSaphFTqbHx6e2a
Q2P7OlmDsmSyQvRJ/+gT3zBip6SsfH8N33pKsjI/pOR9db88Cri9DDQTxqe5PN13
Yu/CMFOjZVvixQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:32:08 2026 by rpki-client