Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
File: Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft (raw, json)
Hash identifier: HGTeeel9IGfPYnrN35agocuvxNivDMQgnaIay2OTb08=
Subject key identifier: BD:7D:46:05:A0:BE:2B:2D:5E:9E:81:55:14:7D:48:5B:9F:19:4D:1B
Authority key identifier: 0D:CD:A5:D0:60:BA:93:66:BB:43:25:82:8B:57:03:3B:EF:18:E3:C0
Certificate issuer: /CN=0dcda5d060ba9366bb4325828b57033bef18e3c0
Certificate serial: 019FA9E34F643910CD3BB19C1683A034AB0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 18:01:14 +0000
Manifest this update: Tue 28 Jul 2026 18:01:14 +0000
Manifest next update: Wed 29 Jul 2026 18:01:14 +0000
Files and hashes: 1: Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl (hash: McTN7wYRPnFZ3UurG2qvLYMVBFbDj4dk8NRW3l3cyMA=)
2: xOh8rPz0fCu_Rdtl4qREsx0riTQ.roa (hash: 51BbJDIoI2b7sQWeISHrMYtf3JjGMl3uwds3WWJ64wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:4f:64:39:10:cd:3b:b1:9c:16:83:a0:34:ab:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dcda5d060ba9366bb4325828b57033bef18e3c0
Validity
Not Before: Jul 28 18:01:14 2026 GMT
Not After : Jul 29 18:01:14 2026 GMT
Subject: CN=bd7d4605a0be2b2d5e9e8155147d485b9f194d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6e:86:78:11:47:8c:d9:c0:35:8d:4e:cc:8b:
83:cc:a5:80:bf:76:c0:ca:93:9c:67:08:3c:2c:64:
a9:64:76:ab:e6:ef:01:65:44:3c:57:e3:3c:5e:a8:
73:68:87:c1:8e:da:97:0f:b4:59:cb:90:12:7f:8a:
d8:bd:01:36:eb:2f:13:2a:f1:54:0b:8f:19:10:7e:
51:1e:7f:ee:e6:bd:67:be:e8:5c:1a:85:02:e0:cd:
78:65:5b:e2:25:e4:d1:61:8d:35:2c:b4:6b:e4:47:
55:c2:df:9b:4a:bc:6b:c1:e1:99:14:82:bd:b6:0b:
e2:c9:23:6b:af:b9:97:18:82:4d:1c:58:fd:7e:c8:
b3:c1:89:37:eb:f2:87:db:6c:00:5c:c6:69:c0:ad:
30:05:e1:01:88:0e:9b:d1:e0:e3:c2:4c:10:bb:a1:
03:8c:38:b7:34:61:5c:84:56:47:cd:bc:a1:f3:46:
1e:9b:eb:a1:ae:a7:2a:f8:b5:65:41:78:c0:9b:ea:
ba:d5:00:4c:47:21:0f:ba:6a:07:29:8d:3c:9e:a9:
5b:b6:ba:de:ef:fa:28:f7:7d:3b:15:ef:4f:8e:08:
d1:d1:f2:4e:a5:56:6b:ba:b9:34:41:87:82:75:66:
f1:16:79:1b:b8:02:3f:17:11:b0:d4:44:2c:1d:9a:
6e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7D:46:05:A0:BE:2B:2D:5E:9E:81:55:14:7D:48:5B:9F:19:4D:1B
X509v3 Authority Key Identifier:
keyid:0D:CD:A5:D0:60:BA:93:66:BB:43:25:82:8B:57:03:3B:EF:18:E3:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:de:57:fe:df:1d:fe:e0:03:53:f1:55:fa:bb:8e:c0:fe:4b:
80:9e:b2:0b:ed:08:4e:47:9e:5f:84:c1:9a:79:ad:36:12:e6:
1d:c3:c8:09:9b:74:bc:3b:39:7b:b8:4b:b7:cb:11:23:d5:33:
bc:9c:bc:7e:1d:67:16:73:d6:63:ad:00:92:a1:70:d6:62:ae:
43:5d:50:01:38:4c:10:9d:ca:a3:c3:b9:c8:60:76:c3:10:24:
51:0a:a0:78:79:c3:58:9b:68:ea:9d:3c:94:35:80:fd:f2:85:
2c:a6:87:86:de:8a:f0:f1:9a:81:5a:9b:47:7e:59:3b:19:5b:
63:0c:8f:72:7e:62:90:37:30:c6:9b:3a:61:d1:69:9d:c5:2e:
ff:3b:8e:92:3a:ac:0c:67:36:a9:77:72:ce:eb:b2:3f:7c:a5:
91:a4:d6:79:93:dc:89:77:df:5e:5d:f0:20:69:6b:9d:29:e0:
7d:bd:cb:b5:78:cb:b0:5a:ec:aa:fb:f7:db:a4:bf:18:cc:f2:
e6:2d:dc:17:21:87:fc:cb:14:fb:0c:89:11:f5:f5:32:c9:b2:
87:eb:60:e3:e2:a7:e7:16:d0:a8:4a:15:84:6f:9e:c8:6a:b8:
c0:02:88:4a:75:24:61:5d:0c:94:5d:ab:23:e6:87:8a:50:65:
8f:d6:9a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:23:36 2026 by rpki-client