Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
File: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft (raw, json)
Hash identifier: WBx5vo2qvuD/ufMhK7ALf4sHb/OPzwAeTEzZpx6uzdk=
Subject key identifier: DF:C4:CC:7B:7F:51:1F:C6:CF:9F:21:D0:3A:CE:70:2C:CB:18:09:79
Authority key identifier: 0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
Certificate issuer: /CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
Certificate serial: 019F93FFD88A5C19FF92AD62C481112F683D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 12:00:45 +0000
Manifest this update: Fri 24 Jul 2026 12:00:45 +0000
Manifest next update: Sat 25 Jul 2026 12:00:45 +0000
Files and hashes: 1: 0f-a9_GN4BlFPHzpxP1ErjNcYpw.roa (hash: liGbjhGL+F+gsqi1YSPCU6zeplSqGVUh3nmEpRRgfOY=)
2: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl (hash: pXPTxELC1XbZDzIP54PVyPKE6CF+pvBGNlSaPHl6E/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:d8:8a:5c:19:ff:92:ad:62:c4:81:11:2f:68:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
Validity
Not Before: Jul 24 12:00:45 2026 GMT
Not After : Jul 25 12:00:45 2026 GMT
Subject: CN=dfc4cc7b7f511fc6cf9f21d03ace702ccb180979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:58:d8:17:ea:00:3b:2f:76:fd:63:a4:80:bd:
ab:43:d6:23:c4:e8:15:ed:26:bf:79:c0:f9:32:1e:
72:8d:c3:c3:4f:b8:5c:f8:67:dc:b2:d3:bf:f1:4c:
54:aa:ba:1a:9e:95:bc:b9:4d:e0:d9:9e:9d:17:0f:
31:2a:8e:04:9c:60:7c:ce:c6:9b:fd:9d:1d:d3:7d:
2e:74:4c:72:6e:9a:91:74:48:29:10:41:41:0e:4f:
b4:94:14:a9:89:c2:14:e7:da:77:0a:2f:ea:68:da:
8f:8a:b5:4e:ce:91:78:98:d2:f2:c1:f6:b2:03:46:
e9:a8:89:88:87:3d:51:60:55:03:14:b3:40:ec:2d:
3c:bf:91:9d:71:6c:57:b7:3c:b0:a8:d2:2e:c7:d3:
72:6e:64:08:9d:45:33:bb:13:86:40:be:91:a1:2a:
94:9e:14:8f:6c:34:a7:4a:9a:28:39:e0:f1:7a:69:
bd:07:75:70:c1:c2:19:12:35:52:f2:6c:46:eb:34:
9b:77:b0:bd:a5:3c:eb:4e:fd:f5:f8:e7:d9:06:3d:
60:50:f5:2b:1f:f4:c8:de:5c:59:1c:8e:00:92:95:
e3:d5:7e:a3:22:d6:4a:ba:ab:4a:02:92:49:cf:68:
58:af:17:6e:3d:2d:8b:48:6d:54:a4:57:fe:33:4a:
63:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C4:CC:7B:7F:51:1F:C6:CF:9F:21:D0:3A:CE:70:2C:CB:18:09:79
X509v3 Authority Key Identifier:
keyid:0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f2:63:71:03:3a:9f:83:6f:86:ca:e0:65:f9:28:e6:05:69:
e7:9e:d9:3b:bf:6b:e8:2b:bc:da:e7:18:37:dd:f5:5d:83:a8:
bd:70:a6:32:01:39:8c:3a:10:53:d4:36:ff:d9:88:57:3a:86:
ac:b7:b0:ed:3e:db:c9:ac:b8:5c:44:66:73:f0:6c:66:ce:e9:
f7:dd:7d:d5:30:e2:3f:f0:a6:ce:37:9e:25:5f:c3:5e:45:fc:
00:bb:a9:9d:54:f6:9d:6a:bf:d8:97:cc:e1:36:63:f7:23:e2:
5c:7b:34:1b:0b:b6:98:17:75:f9:cb:1f:de:3c:fa:fe:01:66:
2a:b2:eb:12:b0:82:21:ec:56:5f:00:18:7c:ab:24:58:53:45:
e5:68:68:63:0b:50:d6:9c:37:06:93:da:46:30:52:e5:67:66:
bd:d2:03:29:05:cc:46:bb:c5:5e:6d:18:8e:0c:fc:70:27:09:
c4:a2:0b:05:6d:22:ee:c1:11:8c:3f:0f:79:ee:25:e7:cf:10:
8a:d1:58:e9:63:8d:e9:54:f5:58:c3:a5:97:d3:71:68:1d:73:
1e:f5:4d:44:8a:dc:b1:85:4e:52:35:d2:f1:15:5f:38:2b:0e:
ac:53:96:83:f5:35:24:09:ed:69:c8:a7:98:a9:ed:93:61:dd:
43:a6:07:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:10:33 2026 by rpki-client