
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
File: C_K7rLR03WED6JEXpjZ0VpZN8xk.mft (raw, json)
Hash identifier: XcUci+L2KEfKEULoimKJqWV5vUYM1UWLen8cti4PH1Q=
Subject key identifier: DC:CA:82:4F:8A:FD:B0:C4:46:C0:AA:46:F6:DF:CB:62:29:11:A1:42
Authority key identifier: 0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19
Certificate issuer: /CN=0bf2bbacb474dd6103e89117a6367456964df319
Certificate serial: 019F90C7EFA13E653F915AD817FA91CEFFEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
Manifest number: 19C5
Signing time: Thu 23 Jul 2026 21:00:49 +0000
Manifest this update: Thu 23 Jul 2026 21:00:49 +0000
Manifest next update: Fri 24 Jul 2026 21:00:49 +0000
Files and hashes: 1: C_K7rLR03WED6JEXpjZ0VpZN8xk.crl (hash: fLVWWAa4qtzKIrS5b+7hsxwTMag3HYSArU14CUBhSBA=)
2: NVXaED00Tks0cffjpQE1Y8p8He4.roa (hash: dC5/5uYQHiqKfAa0wK/7KjwQ7hQBtAToi6muCDxU9EI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:ef:a1:3e:65:3f:91:5a:d8:17:fa:91:ce:ff:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf2bbacb474dd6103e89117a6367456964df319
Validity
Not Before: Jul 23 21:00:49 2026 GMT
Not After : Jul 24 21:00:49 2026 GMT
Subject: CN=dcca824f8afdb0c446c0aa46f6dfcb622911a142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9a:a8:8d:8c:b7:8c:a8:63:c1:96:e8:52:31:
3e:8b:19:9f:b9:b7:c6:1a:7a:38:eb:61:ec:a7:d1:
e1:99:2e:5f:dc:18:7a:4e:56:98:61:1f:b7:5d:f4:
61:41:d0:b0:8f:31:42:7b:84:f8:4e:73:d9:42:96:
68:5e:7b:67:02:75:93:f6:3e:9f:dc:18:72:29:78:
60:51:23:98:51:27:bc:93:a1:8e:a2:ca:c5:07:3f:
15:7f:80:c0:08:8c:04:78:f5:23:68:c5:18:be:65:
21:da:a5:7b:d6:6b:63:7b:ea:b8:3e:86:51:4d:f7:
46:ef:fe:03:09:a9:dd:b4:15:2b:b7:7e:10:11:b0:
27:84:2e:a2:42:e4:50:e2:d9:b9:c5:4e:6e:04:d7:
f9:9b:d9:45:c9:76:6f:c5:96:8c:6d:df:0d:5b:31:
7a:44:0f:89:10:d2:58:01:21:5b:ec:9a:46:0d:e7:
8b:8c:e4:92:30:1f:73:78:bc:6d:ea:bf:13:d5:aa:
d9:96:04:fc:5a:30:11:bb:1a:93:35:35:a3:87:02:
19:2a:f7:87:fc:23:1f:a8:9e:67:c8:4c:7e:6f:d1:
11:de:cb:69:db:40:6a:96:70:3b:a9:47:62:03:f9:
af:e8:f2:09:16:e0:ce:89:ec:75:79:dd:35:3d:31:
ce:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CA:82:4F:8A:FD:B0:C4:46:C0:AA:46:F6:DF:CB:62:29:11:A1:42
X509v3 Authority Key Identifier:
keyid:0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b9:41:d9:2d:f3:5b:63:15:61:24:f7:7c:86:c4:52:9a:9a:
a7:c4:84:b2:57:64:c3:20:7f:ff:40:62:e2:88:b1:05:3f:f4:
fc:76:aa:0a:23:9c:e5:cf:97:72:87:a6:86:1c:68:3c:8a:4a:
02:d0:d0:eb:ef:50:5c:f7:8a:bd:65:af:42:d1:84:a6:3f:dd:
d0:6d:8f:c3:d1:c7:7e:f4:2b:96:c4:40:78:f6:0c:09:bc:79:
e7:44:de:9c:fe:6f:0b:1c:e0:e3:fa:18:1b:38:c2:39:cd:bd:
b7:6d:5d:7e:c4:46:9e:90:1f:b7:9a:88:ab:7c:83:f3:27:08:
04:92:33:29:ee:93:39:2f:46:bb:1b:43:d6:c8:a4:80:b0:16:
55:14:e9:1a:f6:2b:81:5d:c7:69:c1:e3:b0:a4:f7:84:35:6a:
86:0e:94:38:ad:01:81:1e:63:ad:f9:02:06:3f:9b:1d:0e:e2:
18:7f:3c:92:3b:e8:95:4b:14:ea:84:52:98:fd:18:0e:c8:f3:
bb:00:8b:df:fe:c9:9f:a4:ba:0a:6c:11:de:29:c9:72:58:c8:
14:3c:03:26:f7:ac:b9:e4:be:6f:3b:c2:f6:27:a6:25:7a:67:
97:41:29:69:47:55:13:75:5c:30:90:43:d5:50:b8:4a:16:d3:
9f:18:a6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:20:09 2026 by rpki-client