Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
File: dfGnY3RcJdrSj0qBFmiOgs4SAos.mft (raw, json)
Hash identifier: +lEWgKtl5LU0mwSvw/igsaVGUloEHDmvKO0rDNzcEKw=
Subject key identifier: 39:FF:5D:47:30:34:DD:91:23:C7:26:21:87:52:26:0D:64:B2:A1:B7
Authority key identifier: 75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
Certificate issuer: /CN=75f1a763745c25dad28f4a8116688e82ce12028b
Certificate serial: 019F8E6BA72F5FA571F6B8C979D3D2736C3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
Manifest number: 17ED
Signing time: Thu 23 Jul 2026 10:00:47 +0000
Manifest this update: Thu 23 Jul 2026 10:00:47 +0000
Manifest next update: Fri 24 Jul 2026 10:00:47 +0000
Files and hashes: 1: QJLzAcYEPZtusCbKyGwUQTxHEC8.roa (hash: s6kRRpAzDax5R6PcyME5uOuvdqUfyGUTl0Dg3M3bEJY=)
2: dfGnY3RcJdrSj0qBFmiOgs4SAos.crl (hash: VGk5KjW+9gm1IMiuLAyTS2MqBfWXYAYru0F/fVcBRcg=)
3: ujwOpmvI7_mtFn1fgbJBHjBrEAQ.asa (hash: 5KjvP6td+WHS3IxTZC55ymoYHpGObpqQTR6nNfLeSvo=)
4: z9mvcCRCkYuHKKd00BlCEYA9eQU.roa (hash: mRPfZgnI9elFYBzB1KqCj8Oo2adMJczMgSykoYWKKi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:6b:a7:2f:5f:a5:71:f6:b8:c9:79:d3:d2:73:6c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75f1a763745c25dad28f4a8116688e82ce12028b
Validity
Not Before: Jul 23 10:00:47 2026 GMT
Not After : Jul 24 10:00:47 2026 GMT
Subject: CN=39ff5d473034dd9123c726218752260d64b2a1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:23:35:25:7e:09:5b:cd:5f:07:a1:ea:8a:62:
ff:8e:29:42:76:90:6b:60:75:5e:1f:63:cd:e5:98:
a3:f6:ab:e4:b5:71:ac:2a:a2:7f:43:01:c6:78:89:
87:e7:db:95:3c:af:3e:17:b8:ef:98:50:bf:59:c8:
06:ea:6c:2c:2e:d7:66:4b:2c:3b:74:16:fd:bf:d8:
bf:8a:04:45:27:25:f2:b4:4e:e2:4f:a7:f0:6d:12:
bb:ae:83:7f:57:22:3a:4c:4f:7f:0c:49:0c:09:45:
00:09:ec:57:45:c8:80:28:48:5f:d0:4f:56:3a:72:
c4:25:95:5f:d6:28:fc:e5:b4:98:78:89:e7:d7:0d:
12:60:6e:40:18:19:a6:59:7d:17:43:11:07:02:9d:
35:c3:db:75:23:34:2a:c0:0e:f7:77:3d:e0:43:43:
62:13:32:a7:57:ff:20:74:c0:f8:48:38:2c:97:b3:
87:1d:10:e0:4d:80:67:dc:6b:4d:84:0b:15:d6:79:
8a:69:de:bb:56:ca:98:7e:01:4f:83:d7:5c:18:15:
16:ed:68:b7:32:b0:a1:eb:6a:3d:7c:32:5d:89:84:
a7:bd:77:ae:5f:84:de:f8:c0:9b:3b:b8:62:b7:aa:
ea:2b:5c:3a:a5:fa:68:b2:da:82:54:b3:2c:5e:6c:
9d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FF:5D:47:30:34:DD:91:23:C7:26:21:87:52:26:0D:64:B2:A1:B7
X509v3 Authority Key Identifier:
keyid:75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d3:a6:b8:8b:2a:05:5d:96:a1:3b:d2:bc:5f:80:c9:8e:ed:
b6:95:21:65:9f:c9:3c:dc:93:b7:0b:05:9f:bd:8d:9b:1a:0f:
a4:c9:d5:06:0a:29:b6:4c:e6:64:77:19:5d:5e:92:81:1a:59:
e1:1a:7a:22:42:19:45:da:7f:47:c9:95:7f:e0:33:2c:c2:1b:
d4:5a:41:e1:ad:33:e3:36:8c:a2:72:11:35:74:d2:eb:4f:ff:
39:35:d0:2b:17:cd:50:7c:69:e8:5a:4d:04:74:ce:f1:bd:7e:
6b:21:1b:62:2a:69:18:3f:b4:ad:4f:c9:32:68:6c:d5:6f:9a:
dd:67:88:7d:fd:46:81:4d:f9:88:ce:af:83:ca:4d:aa:2f:f8:
7a:48:bc:5c:14:cd:d3:25:7a:77:9c:85:07:61:89:87:b7:ae:
55:6b:5f:74:31:33:1e:cb:7a:9c:7d:c4:31:1a:83:4b:25:d8:
8d:0f:f0:3a:89:9f:0e:59:7e:bf:18:29:7d:12:73:fb:30:e2:
d6:af:07:ff:24:10:23:38:bf:f1:ea:bf:5d:2c:ae:a2:04:95:
0e:4a:a1:3e:fb:20:df:39:97:ac:a2:f5:ba:b4:3b:81:55:85:
35:6f:bc:49:a8:c2:96:18:95:fb:af:1b:67:af:90:c5:e4:3d:
67:7a:eb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:14:56 2026 by rpki-client