Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
File: dAId0eJ80ed44tu9YKoYSxY7zv4.mft (raw, json)
Hash identifier: 6oE0F7K44vDMcuIwHUcAuwoLX1lQnFJYOBuoaGkex6k=
Subject key identifier: 54:C9:38:A9:9F:E2:5E:1D:88:5B:5C:D5:49:3B:43:AF:17:C5:9E:69
Authority key identifier: 74:02:1D:D1:E2:7C:D1:E7:78:E2:DB:BD:60:AA:18:4B:16:3B:CE:FE
Certificate issuer: /CN=74021dd1e27cd1e778e2dbbd60aa184b163bcefe
Certificate serial: 019FA89A0F50945468A20E26C088B87275BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
Manifest number: 0529
Signing time: Tue 28 Jul 2026 12:01:36 +0000
Manifest this update: Tue 28 Jul 2026 12:01:36 +0000
Manifest next update: Wed 29 Jul 2026 12:01:36 +0000
Files and hashes: 1: dAId0eJ80ed44tu9YKoYSxY7zv4.crl (hash: 1DnOL2OB+rrTm0hGVtdSSEmzaSGX3VlCWDvLyaQYPps=)
2: eh-_1IK7oCD8nbLcwB1h-jsivvQ.roa (hash: 1hB/vcchKccjfMUEW19JzNX5vcI2nAxqryUItaWwuI8=)
3: pdvwezXifSPbHn7Zg5GsoIZ-9_g.asa (hash: L3xvDc7N16Bw2yzHqAnTIftFzbiPXKuwqnDanSSbEog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:0f:50:94:54:68:a2:0e:26:c0:88:b8:72:75:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74021dd1e27cd1e778e2dbbd60aa184b163bcefe
Validity
Not Before: Jul 28 12:01:36 2026 GMT
Not After : Jul 29 12:01:36 2026 GMT
Subject: CN=54c938a99fe25e1d885b5cd5493b43af17c59e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:88:f1:05:71:f7:54:61:35:05:b2:fd:dc:cf:
b4:4d:43:ea:aa:87:44:c7:15:21:0d:f7:1a:7f:1f:
a9:3a:1c:c3:a4:30:a1:27:a6:5a:28:3e:2a:39:77:
f2:9e:35:34:ff:07:8e:15:f0:4c:60:08:2f:cc:a8:
f8:b6:a7:ff:95:17:81:d7:5d:fd:d2:91:cd:fe:33:
f3:74:86:f5:dc:13:ac:4b:40:74:10:ce:85:6a:47:
c4:75:3e:66:e2:22:e5:25:51:c9:8d:92:01:79:ba:
7e:31:73:3c:6c:bf:b3:43:65:9a:72:3b:79:90:2c:
f3:ee:8f:4f:30:88:17:61:78:0e:f3:19:b7:fb:da:
5e:e1:0c:4e:e5:e5:39:67:69:0e:8e:77:2f:6b:bf:
d8:f2:7f:f6:ed:b4:b6:fc:e0:59:74:df:04:f3:95:
81:12:0d:09:3c:d0:1f:37:a7:58:d9:06:9a:73:67:
b6:4a:5f:40:55:fb:d4:4c:a3:6e:9d:df:8b:94:4c:
7e:8e:f4:1d:e7:a4:d5:eb:e6:f0:a0:11:e9:2a:f9:
06:27:2f:7b:19:d1:a8:80:41:bb:6e:5b:69:d8:b0:
97:01:22:80:b0:02:c9:d2:48:a7:da:89:d2:d4:8b:
c1:be:24:32:d1:97:c1:95:bc:df:cf:42:77:f9:b0:
54:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C9:38:A9:9F:E2:5E:1D:88:5B:5C:D5:49:3B:43:AF:17:C5:9E:69
X509v3 Authority Key Identifier:
keyid:74:02:1D:D1:E2:7C:D1:E7:78:E2:DB:BD:60:AA:18:4B:16:3B:CE:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:df:5f:e0:da:83:db:1a:99:d2:85:ca:ab:88:7c:78:1f:6e:
7d:83:9f:34:8b:2a:0b:a6:60:66:5f:bc:2e:d2:3b:50:0c:b3:
4a:e8:d0:27:8b:86:c3:2d:ae:d7:37:ba:82:13:a3:93:91:a9:
45:c3:5a:0c:2f:05:6b:70:59:6e:58:c6:93:c7:73:29:2b:93:
c7:b3:bc:2e:f2:d0:f8:92:f6:a6:20:bf:b2:f6:11:b1:1b:45:
4d:62:be:73:fc:3d:c6:ab:99:20:52:bf:8a:43:8f:c1:09:25:
a5:ab:2e:7f:90:4f:9a:9a:ab:b3:90:a9:82:4b:15:32:54:4f:
41:57:74:fe:5f:c4:c3:19:5f:e0:a6:ab:5c:cb:18:31:e0:04:
95:d6:ce:c8:66:20:ac:39:93:26:71:4e:f0:9c:a7:ba:1f:aa:
99:38:0a:45:67:88:f6:09:cf:2f:f7:06:45:b5:4f:cd:18:43:
2e:ee:9c:3c:76:eb:71:1a:e5:a9:8c:2b:57:e1:1f:fd:f1:5f:
7b:9a:ec:8a:9a:11:a7:02:64:8c:f8:2c:29:e2:70:f5:d6:19:
bf:99:93:d3:9d:bb:34:b9:2b:5b:e7:58:1a:51:6b:47:d5:31:
1a:a3:24:9d:a4:f7:88:98:ee:48:91:0e:41:93:33:c9:e1:9a:
f5:df:87:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:39:31 2026 by rpki-client