Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
File: d92irQmMangU-yWLRpsNhM4kxKc.mft (raw, json)
Hash identifier: yDDnLtBiIr7c/rFyKRniY0p+hYr2SjK3pTo0yYf+H3s=
Subject key identifier: D8:3E:21:AC:40:17:C4:ED:F1:B7:B9:E3:D1:38:89:28:A5:E7:BE:43
Authority key identifier: 77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7
Certificate issuer: /CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7
Certificate serial: 019FABD0EB24BF683A1759163037D92988FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 03:00:23 +0000
Manifest this update: Wed 29 Jul 2026 03:00:23 +0000
Manifest next update: Thu 30 Jul 2026 03:00:23 +0000
Files and hashes: 1: d92irQmMangU-yWLRpsNhM4kxKc.crl (hash: at9jBnIZSwRRFwmzluhQKHme7HEtWPa7ryFouKRTiXU=)
2: r7X848yOsMLAWCps4RFGUNqeVps.roa (hash: xew4extflEyzwcFzFw7/R0LSDzXNfuSjZMgYv5CBRTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 03:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d0:eb:24:bf:68:3a:17:59:16:30:37:d9:29:88:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7
Validity
Not Before: Jul 29 03:00:23 2026 GMT
Not After : Jul 30 03:00:23 2026 GMT
Subject: CN=d83e21ac4017c4edf1b7b9e3d1388928a5e7be43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fa:a7:dd:83:36:ba:35:c6:72:bb:19:15:81:
26:93:ec:0d:3b:b0:96:54:8b:04:cf:49:90:2c:6c:
06:55:4f:9f:3c:63:4e:8b:13:81:30:e8:7a:69:e7:
c6:2e:fd:d1:d2:fc:be:a8:dd:0b:6f:16:e3:8f:dc:
20:07:51:64:e8:db:a5:3e:16:e3:65:3d:c2:2b:0a:
c7:74:fd:da:66:43:61:83:9e:9e:a9:30:da:78:45:
62:d6:b7:a5:ae:59:bf:5d:99:4f:d5:59:e6:ab:72:
0d:b0:83:0a:45:83:30:a5:eb:38:11:f0:72:f5:bb:
65:21:6d:74:67:95:c2:78:f5:38:71:2e:e1:1e:d0:
eb:de:b5:5f:ae:b1:2e:a8:56:61:e1:aa:ca:01:8d:
89:ce:a3:56:62:ad:73:a2:5b:b1:b3:21:40:5e:c8:
9a:0f:66:1c:8b:24:28:71:9a:d7:b1:76:fd:5f:bd:
85:04:e7:1a:2e:c7:b3:52:d5:68:2d:5b:ea:24:42:
b8:70:56:19:03:5e:81:0d:13:3f:34:35:ce:6d:95:
0e:d5:c9:df:09:8b:e3:cb:0b:fa:41:53:a7:3a:65:
d6:25:df:3e:89:f7:cf:39:61:f6:57:c4:3b:a0:75:
e5:9a:35:03:d0:f4:34:1c:7d:af:bf:41:90:25:39:
c1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3E:21:AC:40:17:C4:ED:F1:B7:B9:E3:D1:38:89:28:A5:E7:BE:43
X509v3 Authority Key Identifier:
keyid:77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:e1:49:7e:2a:22:02:55:ac:ed:17:bd:cf:a2:64:f4:62:8d:
68:74:d6:5a:fd:e8:48:1c:3e:19:d2:04:95:67:32:e2:38:5d:
a0:9a:1c:f0:65:c2:90:26:85:69:65:c3:25:48:a7:45:9a:02:
a6:25:25:5d:df:15:fb:3a:57:b5:f6:68:16:e0:5a:ab:b5:0f:
23:dd:48:be:13:52:02:1d:c5:25:bb:a0:b5:71:e9:d3:91:3e:
83:b5:63:76:0e:73:44:50:2d:a3:1e:17:fd:95:87:a6:d3:ee:
d7:d1:e3:9f:1c:6f:8c:a2:62:5c:7e:58:e9:8b:b0:8e:57:99:
8e:31:62:42:14:97:d2:0c:28:2a:07:73:10:3e:48:3c:49:ab:
ea:5b:d8:07:91:9f:81:7d:66:5f:51:7a:a6:e6:ec:d7:ce:61:
6b:cf:ec:fb:49:6a:39:a2:f7:a7:50:2a:87:51:9e:f8:0a:58:
cf:27:b4:11:b2:d3:a0:2d:a0:48:37:42:a2:34:f8:e3:82:43:
6b:ef:57:62:3a:73:c8:52:cc:a7:27:9d:84:79:4f:3d:02:2e:
63:ad:7f:a6:1d:05:05:44:8f:46:aa:e2:a7:81:94:34:74:39:
03:7b:0c:9a:4d:58:10:e5:2e:d2:a6:bf:f5:82:ac:2a:bf:1f:
f2:b6:c6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:30:38 2026 by rpki-client