Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
File: dPEFnCc8UO3PPc7fxYABUuyR26I.mft (raw, json)
Hash identifier: zSo/FC3ueAZIM73kzGzwNmhNAT3IJ0+K4i0UAVQdPIM=
Subject key identifier: 37:25:84:62:5C:7E:05:DA:53:19:3C:36:00:5D:C2:21:87:1B:83:53
Authority key identifier: 74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
Certificate issuer: /CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Certificate serial: 019F9211A5F3E5D76B2A3F7EEF5E32C02891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
Manifest number: 19C5
Signing time: Fri 24 Jul 2026 03:00:57 +0000
Manifest this update: Fri 24 Jul 2026 03:00:57 +0000
Manifest next update: Sat 25 Jul 2026 03:00:57 +0000
Files and hashes: 1: 4zHqkXwTdPpErUuwool8-zX-SB4.roa (hash: LHnM5v5Sz1IzlHeFp2joapwPeszU3VAj2kHXfdYdwu4=)
2: dPEFnCc8UO3PPc7fxYABUuyR26I.crl (hash: Vm4U1MXeavkFoNY3yiKm2SUpnVTy3x8K/fnCYw/XxPQ=)
3: f_myMJMSIIWO9m-PmHiygg0XXSs.roa (hash: 3LE3GccOE6KqVlj9DZ+EFPId6e66LFjW7NsGN3ZdmPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:a5:f3:e5:d7:6b:2a:3f:7e:ef:5e:32:c0:28:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Validity
Not Before: Jul 24 03:00:57 2026 GMT
Not After : Jul 25 03:00:57 2026 GMT
Subject: CN=372584625c7e05da53193c36005dc221871b8353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8b:ec:c2:40:9a:c7:7b:16:33:f9:b8:8d:e5:
41:04:bd:75:95:3f:44:7e:04:8e:27:7a:5d:98:19:
d6:78:98:d1:76:6f:b9:5d:7d:80:35:d8:f9:ec:c5:
b3:8b:ae:a9:46:4e:ee:72:59:5e:91:63:9c:b0:fe:
4a:2f:4c:5b:53:20:57:70:a8:67:a6:01:ce:08:2a:
ba:cc:5f:7e:f3:3e:ff:e7:b4:ba:c7:b0:d8:34:f3:
bc:fd:ef:16:c5:d5:77:54:c6:21:0e:21:a6:52:3c:
20:41:ca:43:0d:7f:25:a1:eb:6a:21:5d:04:46:2d:
67:c3:cd:e7:7d:ae:04:d0:df:c5:5c:98:12:f5:48:
ed:a7:33:be:af:d5:ac:8f:03:b7:02:13:d6:87:8f:
a3:4f:6b:8a:33:eb:5b:aa:38:83:a4:48:e8:a7:d3:
8a:57:7a:f2:bb:32:31:22:9e:eb:b5:40:df:9e:a1:
40:63:c9:86:f1:14:ec:26:6b:35:df:b9:19:01:cb:
a3:13:78:28:25:e7:c2:af:7a:ba:d8:88:0a:ff:63:
05:68:dc:65:38:53:56:7a:6b:34:e7:7d:a9:6e:b4:
5f:85:8b:69:e3:7d:af:0e:47:6f:4f:25:4b:47:c2:
78:75:12:01:21:28:8a:59:28:3b:65:4a:82:07:7a:
67:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:25:84:62:5C:7E:05:DA:53:19:3C:36:00:5D:C2:21:87:1B:83:53
X509v3 Authority Key Identifier:
keyid:74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:39:fd:78:0d:66:02:07:fc:ec:7e:89:bc:13:3f:65:75:8e:
68:8f:33:b2:ae:17:b6:e5:94:da:8f:22:c7:84:ea:8b:8e:62:
b4:2f:f1:cd:2e:70:49:cc:60:f2:6f:9f:d1:59:5e:62:6e:63:
73:fa:9f:e6:45:13:3c:92:d2:3f:12:0f:66:10:9b:8f:e0:23:
98:74:c0:d5:f1:f1:e0:07:66:f6:54:9b:f2:d3:86:ed:5a:53:
91:01:2d:5e:7d:27:8f:d8:99:08:85:9f:f9:c3:48:0d:c6:31:
9d:ad:56:49:c1:4e:21:3d:72:63:ab:cf:c4:dd:38:8a:23:a7:
e0:21:74:16:23:8d:e8:04:4c:e9:41:59:47:9f:b7:23:ea:dd:
bc:8f:1d:ed:75:8a:b5:90:d3:3d:d8:7c:a0:66:53:d3:6e:d3:
55:2f:31:a0:84:e7:ef:c2:ff:8e:4e:40:cd:45:b4:94:b0:31:
cf:2f:b2:84:51:34:ec:e0:b3:1a:8c:9f:51:89:c4:b0:51:fc:
34:94:ef:cf:80:1a:29:ab:b6:fd:a5:d9:e8:1f:f7:26:7f:23:
4b:74:38:99:d0:fc:1c:a3:42:c7:8f:2d:1d:39:54:5e:9d:b6:
2b:90:db:2f:12:50:08:a9:0c:2b:52:22:65:07:38:ff:c2:0f:
8b:b4:9a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:52:44 2026 by rpki-client