Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
File: dkL9PzNs5u6Z5h-pdwSabGqSPko.mft (raw, json)
Hash identifier: OygA6zztnuJmHzNTHBVgwyI3MziqgQNZ7i1QA7EzTAo=
Subject key identifier: 1B:9E:66:F5:0B:CB:46:F7:3A:4D:01:2E:24:41:4A:DD:F8:0B:C4:E3
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 019F9624EAF179E48A5306D5D6C1869FD907
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
Manifest number: 1A4D
Signing time: Fri 24 Jul 2026 22:00:29 +0000
Manifest this update: Fri 24 Jul 2026 22:00:29 +0000
Manifest next update: Sat 25 Jul 2026 22:00:29 +0000
Files and hashes: 1: aTug7YNO613h0EdhaVanobAofs4.roa (hash: JO+eAjDs3aZGB9gkmGCHWKFzmsIX3/pwIhE/HLe+REE=)
2: dkL9PzNs5u6Z5h-pdwSabGqSPko.crl (hash: SMCJd+k+WG+FP+G+eSZB7rp0Fp0qPAG6dSmLlQRP14c=)
3: tZk_CaKCryAvJRReN7aPc9CJl5Q.roa (hash: GDF5SYSr5M1uY12BBc2vpgU4RwEGW3L9n697ONqnZ8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:24:ea:f1:79:e4:8a:53:06:d5:d6:c1:86:9f:d9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jul 24 22:00:29 2026 GMT
Not After : Jul 25 22:00:29 2026 GMT
Subject: CN=1b9e66f50bcb46f73a4d012e24414addf80bc4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ae:f9:b4:d0:04:c1:73:f9:c7:2e:31:a3:87:
06:92:1d:7f:90:28:40:80:b2:87:56:68:b7:91:e7:
af:14:70:9b:6c:c1:23:4e:48:d7:71:3d:88:df:8d:
ec:9b:a4:17:46:11:8d:98:24:6c:7b:ce:17:dd:dd:
1d:45:f2:57:71:05:7a:0c:af:43:09:9f:fb:56:95:
47:4b:1b:73:2b:f5:4a:f9:fd:3a:bf:9d:f6:4c:d4:
4f:cf:e8:6b:4e:88:1a:72:d5:ea:f7:30:1a:ca:26:
ce:b6:2d:5c:a9:f3:82:58:dd:7c:f1:a0:45:24:ab:
4b:35:7c:b2:9c:4e:ec:c2:67:be:2a:80:db:ef:cd:
06:69:5e:aa:ad:c9:bf:fc:f7:d5:3d:6b:aa:ac:83:
48:97:09:d7:3e:c3:15:17:26:05:8b:49:df:e8:dd:
b1:c8:80:d5:1f:1a:0b:f1:8e:ce:eb:31:a4:87:38:
16:78:16:55:ea:c2:22:40:a1:ab:78:66:fc:7f:1f:
ca:6e:d0:f5:24:d3:ff:4b:64:d2:9f:b4:11:04:7b:
a1:ee:aa:b6:17:a4:48:90:c0:0b:e0:40:5c:e5:f8:
ae:2f:18:57:8f:19:af:1a:60:14:49:b0:5f:be:dc:
c0:20:21:5a:e3:06:1f:43:d4:57:aa:96:99:53:bd:
6f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9E:66:F5:0B:CB:46:F7:3A:4D:01:2E:24:41:4A:DD:F8:0B:C4:E3
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:3c:25:5b:ae:72:46:9c:62:78:09:5d:4d:49:f2:52:7b:c5:
b3:4b:6c:14:f6:57:73:af:f1:d4:56:72:a5:1f:e3:17:2d:d9:
c1:2f:b7:ca:c8:64:1b:e4:e9:b2:80:72:b2:7b:c7:db:32:3c:
df:0c:40:03:ff:df:dd:96:c8:8a:e0:21:06:b6:e3:c8:76:5d:
7d:eb:e5:29:79:a9:58:03:1c:73:3f:42:80:35:06:56:85:f6:
ac:89:fd:dd:20:23:d3:31:10:67:42:71:89:be:41:5e:b6:7b:
2f:00:57:55:64:6a:50:3a:78:80:dd:19:72:ac:ef:28:f8:b7:
b1:77:cf:4d:a0:05:76:8b:4e:e5:15:87:05:d4:08:78:1c:55:
55:f7:2e:c9:bd:d0:e9:3e:37:fb:cd:e3:a7:f7:39:1f:1a:15:
a7:ab:9a:a4:85:bf:ef:61:e5:98:8c:a9:72:57:bc:2d:37:da:
e3:bb:8f:ec:d0:22:2f:47:6d:48:5d:f0:f9:05:cd:f4:45:35:
53:42:2d:d8:dc:95:5a:2d:e4:cd:a1:4a:18:09:af:f4:b5:d7:
be:d9:44:ed:b5:05:8f:3f:15:48:57:90:13:81:2d:a8:d3:5a:
e5:7b:15:5c:04:c9:e2:2e:43:8c:c4:ae:07:48:49:64:d1:7b:
57:f7:d6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:24:54 2026 by rpki-client