
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
File: Dg9Icq0cH0_LITtrLts4ii2cmiM.mft (raw, json)
Hash identifier: iJraLiMUWTFAePO7WLF+TU0JGvJ+FjonxHzX0V8YUxc=
Subject key identifier: 59:F8:C1:6D:76:B1:9F:9B:06:2D:FA:A5:27:F5:DF:EB:1A:D7:EC:46
Authority key identifier: 0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
Certificate issuer: /CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Certificate serial: 019F946D51862B787DC27BAEAD832473DEC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
Manifest number: 19D8
Signing time: Fri 24 Jul 2026 14:00:20 +0000
Manifest this update: Fri 24 Jul 2026 14:00:20 +0000
Manifest next update: Sat 25 Jul 2026 14:00:20 +0000
Files and hashes: 1: 6-VbzQgi8XA2TJAq8RgMaysx0X8.roa (hash: nwaIi9ebrKp/Q5R4ShMm9TiJvoby9UkF3818QuosS1w=)
2: ByAZZvD6ZO4dFVGZCOox_IHwdzo.roa (hash: wGFO7OyD3Pn5gOzCEOeYwv/8FCnWxDnlJBKiFmfnr/k=)
3: Dg9Icq0cH0_LITtrLts4ii2cmiM.crl (hash: HieiJSjNjnlGjujXns6MYEdpsOBj3aZpCR1Pe+y29IE=)
4: KM6PkAFxCJgnCXLELW5hiOAKjus.roa (hash: DuJVolLG90aax0OKvLaTyX/VTpILvcyZxRZVQhnBPeY=)
5: YoJZ9epoonqwiI5Cz_IYJxFC0KQ.roa (hash: rcBdfpWe95Pbv9jR1rFIiVQgv2ItDDK2rcgQtFQdM3o=)
6: kZOcgE-yQiEGZ59-58kZODUnVtk.roa (hash: NpX21ZAdgdJK8Ql3JOW4Xo/GtwmqnfCpzM6EirlUM7w=)
7: odPvkDMmAxjrc3ZPhrKtHv1Pl_Q.roa (hash: WbetbahmmvNLGyGKWf2niABo2rq9cUlLwj18Yb3Jj3M=)
8: ps2vvRE8em2BhpWugO8HL3Oy4sw.roa (hash: UVRw/RrZWURZppeHPUhCU3KyC7ib1pGilFd5giOzN0U=)
9: sT5NvgSrjzuwTioYpNTeZgud1ao.roa (hash: eCoPPFfnRnkLIs6eZVD/zHitzMoyIccre5mcG4E3t34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:51:86:2b:78:7d:c2:7b:ae:ad:83:24:73:de:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Validity
Not Before: Jul 24 14:00:20 2026 GMT
Not After : Jul 25 14:00:20 2026 GMT
Subject: CN=59f8c16d76b19f9b062dfaa527f5dfeb1ad7ec46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e2:dc:a7:15:1e:8e:3c:fa:46:50:1d:b9:2a:
c3:58:85:86:62:f6:56:3c:31:e3:e3:69:c0:a5:5a:
0c:c9:76:97:b2:28:6d:21:6f:78:15:bd:19:74:b5:
72:49:46:79:d0:71:0e:ca:af:c2:d6:72:83:b0:a9:
60:e8:7e:3d:c0:ae:da:76:78:58:5f:f5:58:17:57:
fd:26:d9:1a:d8:08:68:92:54:15:2b:33:c6:9b:ef:
cf:fd:62:cc:12:e4:06:d9:54:53:62:a8:73:b1:ca:
3d:d7:c3:f5:14:09:01:3b:3c:0f:1c:b5:32:d0:63:
8f:79:a1:61:6c:ab:fe:a1:b4:63:09:ac:b8:8f:13:
6c:ae:9f:f5:e8:95:be:a1:90:dd:37:37:ae:2d:bf:
77:2a:f3:7e:24:67:aa:ec:4c:a9:79:10:e7:2e:d3:
74:ec:03:3c:b7:b3:c6:34:ab:06:0c:4f:55:fd:50:
bb:ce:e3:a3:b5:72:e3:7a:b0:9f:98:7f:ef:c3:7f:
02:7b:1d:de:b5:77:65:ef:d7:a4:71:a6:80:a1:c4:
34:12:21:da:ea:0e:1c:fc:a3:71:eb:4f:17:2c:96:
b7:80:48:be:88:56:22:1a:5e:2d:b0:e5:01:35:37:
2e:b9:83:83:c9:f4:62:a4:94:68:f6:98:51:61:81:
a7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F8:C1:6D:76:B1:9F:9B:06:2D:FA:A5:27:F5:DF:EB:1A:D7:EC:46
X509v3 Authority Key Identifier:
keyid:0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f5:6c:b3:a4:65:b2:49:a2:53:74:9c:59:30:0b:48:a2:46:
73:1b:d1:cb:1b:85:5f:df:ca:88:3f:e6:2c:9d:50:08:02:95:
9a:1a:12:d5:5d:f5:93:20:e1:8a:b6:48:31:c9:bc:36:cf:86:
9c:3b:ed:3c:88:9f:66:d4:6c:1a:6b:88:6d:c2:2b:83:e0:47:
1b:02:3c:ab:88:20:70:18:8a:e1:80:e4:fa:ac:08:5f:17:6f:
a1:f2:c4:35:2e:b3:88:da:93:db:04:6c:41:e7:4b:23:13:39:
ec:91:88:97:d0:36:ed:86:6d:2a:0c:53:56:2f:b5:7e:bd:03:
bc:27:13:aa:22:e9:74:7f:38:41:ab:42:15:95:f1:8c:a2:55:
7b:9a:86:e5:cb:6a:ef:94:dc:78:9e:93:4d:60:67:49:df:be:
29:75:12:0d:53:85:0f:10:d3:10:dc:3d:56:a7:47:26:2f:89:
36:1f:86:e5:24:c9:88:94:f3:48:93:c4:76:ba:17:91:7e:93:
f7:44:58:b2:b8:0d:8d:cb:4a:76:d7:9d:93:d4:ee:2b:9b:e6:
43:4c:d9:14:ed:b1:16:4a:7b:97:72:b0:8b:0c:a3:b2:ac:ca:
23:ca:94:2b:09:01:6f:d6:63:e3:c7:14:52:f2:0e:3d:88:d1:
57:98:de:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:54:30 2026 by rpki-client