Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
File: DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft (raw, json)
Hash identifier: S0InTwlacRxi4ZoL6Bor3H88FSo4sx8TEwm2VII4Zk8=
Subject key identifier: EB:F3:8D:4F:6C:20:13:34:BA:D5:C4:B1:28:7F:42:5F:6C:71:05:DF
Authority key identifier: 0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
Certificate issuer: /CN=0d7a912569b787d92e5355fffaed581fe50a29c0
Certificate serial: 019F9323B54CF4AEB2C5087B4E9A0CCE9B57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
Manifest number: 0FD2
Signing time: Fri 24 Jul 2026 08:00:18 +0000
Manifest this update: Fri 24 Jul 2026 08:00:18 +0000
Manifest next update: Sat 25 Jul 2026 08:00:18 +0000
Files and hashes: 1: BCXtQModd3nAhdeMkRMBuZx_cZc.roa (hash: jtOOBxUO8skySjopVxcruyx6WiDS/7xnyuAQI3lDFqk=)
2: DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl (hash: zc69cKzJIECJToKfuQ5plRB+qySVjPNnHar2ZiZcdko=)
3: L9a6XlmixBDgTngX3OesnHMjCvQ.roa (hash: yfr3OyuPpoSecdibTgJg+ch8pCeShfs+7iwZpZSIKv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:b5:4c:f4:ae:b2:c5:08:7b:4e:9a:0c:ce:9b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7a912569b787d92e5355fffaed581fe50a29c0
Validity
Not Before: Jul 24 08:00:18 2026 GMT
Not After : Jul 25 08:00:18 2026 GMT
Subject: CN=ebf38d4f6c201334bad5c4b1287f425f6c7105df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5a:cb:69:9f:b1:dd:88:cd:e5:63:f2:aa:80:
b4:9d:4e:f0:3c:ee:a0:87:51:73:55:1d:9e:a8:93:
16:c6:01:df:77:a8:5d:c1:88:36:30:a9:99:4f:25:
35:53:d4:52:a7:06:da:b1:99:32:1c:31:cf:33:86:
ec:e8:07:96:fa:cd:84:ac:0b:87:f9:52:52:70:8d:
c3:99:90:31:14:9a:a4:8d:29:82:3e:a8:88:e2:65:
ec:0c:59:83:d8:12:dd:d8:bc:af:b6:83:9b:e7:84:
0a:a7:f8:dc:dc:cd:f6:e7:ae:63:ec:eb:bb:a8:cf:
dd:3a:a0:f3:3c:bf:d8:76:17:65:b6:da:9d:9a:67:
83:2d:c0:58:77:9b:a8:e2:42:74:d2:c4:d7:09:26:
b9:c8:c6:50:81:5f:57:2e:db:5e:96:f3:73:2d:5a:
6d:07:e9:f8:25:87:ef:73:e4:55:57:cc:24:cb:d2:
18:3f:48:09:a9:45:3c:18:8c:13:d7:21:58:4a:59:
a6:8e:13:b4:5c:e8:ec:c5:e2:f6:1f:a3:e3:e9:70:
3a:69:cb:a8:23:6b:63:69:11:a3:72:6b:09:2b:08:
51:02:2f:6f:77:54:6d:fc:bc:16:91:3e:e6:f4:c4:
df:b7:e5:5a:9a:fa:26:d2:da:96:ac:17:61:0e:c8:
dc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F3:8D:4F:6C:20:13:34:BA:D5:C4:B1:28:7F:42:5F:6C:71:05:DF
X509v3 Authority Key Identifier:
keyid:0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:dc:72:29:04:77:09:8d:57:35:33:81:f9:03:00:dd:4c:39:
25:f0:59:d7:54:28:59:6c:4d:a7:1c:bb:b2:e9:1f:b9:bf:a8:
4b:61:dc:eb:2b:45:33:96:36:bd:62:cb:c1:f7:55:e0:df:f8:
29:42:c6:93:05:cf:10:bd:3e:02:5b:17:99:cb:73:bc:37:ee:
63:ea:d3:d1:83:d2:dd:5c:d9:ba:99:52:a1:12:56:a5:01:9d:
f1:f5:d8:19:a7:d4:53:50:2f:b2:e3:fd:37:46:5c:a0:03:a2:
64:19:58:9a:90:e1:17:5e:a3:20:a3:69:a1:77:1b:b6:db:1e:
55:56:2d:30:da:f8:2c:33:0f:82:ae:2c:3e:cb:51:46:af:db:
e5:e1:51:0a:43:71:9b:f3:d9:9c:bc:d9:ad:43:d5:c2:f4:95:
3d:3a:3c:9b:f0:8e:d3:5a:6c:e7:f7:9e:b2:2e:23:18:0d:2c:
5b:6b:23:f4:8f:e0:c3:63:82:d0:2a:9c:8f:c0:81:61:4f:97:
48:81:92:6d:50:7b:e4:ec:76:c7:3d:4b:33:bb:d0:c3:0e:7f:
9c:19:90:69:ed:a0:e4:1b:68:09:7c:c2:7f:bf:07:0a:44:58:
3d:e2:36:c4:2d:f7:47:8c:dc:cb:5d:74:d5:2e:51:7f:c3:66:
35:9c:a3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:50:49 2026 by rpki-client