Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
File: dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft (raw, json)
Hash identifier: +eh8Mm2FOG/+8rACE7rYPCeAFvxJrPw2Ysxp1wX9KeA=
Subject key identifier: 74:BA:07:C2:F8:C1:89:BF:03:BC:FC:69:19:A6:31:C0:11:9F:5A:9E
Authority key identifier: 74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
Certificate issuer: /CN=7450810f13df8d9019f157c36fbd0f6db9862992
Certificate serial: 019FA9ABEE3ABED81D415D5CF17DD1B174E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 17:00:44 +0000
Manifest this update: Tue 28 Jul 2026 17:00:44 +0000
Manifest next update: Wed 29 Jul 2026 17:00:44 +0000
Files and hashes: 1: dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl (hash: 6kqo5muxCRt76POJ9EB3Nlup5B+5qpRpqSs9Qb8NC1k=)
2: vWKPs1EksdLNehXFmCXDKSULnXk.asa (hash: yNn9JtBbsWodt41KzrmjveQKUch9zXpyA0sczkLauf4=)
3: yV3n7Of-XfxujJs_oZpOk9T5zxc.roa (hash: RWU+lLoWMG+Uf+PGBYW1EPxQGP3cMIviVCgLyu7si9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:ee:3a:be:d8:1d:41:5d:5c:f1:7d:d1:b1:74:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7450810f13df8d9019f157c36fbd0f6db9862992
Validity
Not Before: Jul 28 17:00:44 2026 GMT
Not After : Jul 29 17:00:44 2026 GMT
Subject: CN=74ba07c2f8c189bf03bcfc6919a631c0119f5a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:89:ef:95:f4:5c:87:2d:64:c2:c1:4b:19:c4:
1d:50:75:5e:9c:0c:e6:4a:81:77:1b:bf:3a:5a:53:
fe:f2:94:52:2d:02:a8:72:35:25:66:0c:ba:1f:d6:
35:6b:ba:81:9f:96:4e:87:cd:b7:36:96:5b:98:80:
53:5c:21:83:57:ef:01:24:e1:22:da:13:c4:15:3c:
b9:97:6d:cf:f1:1e:8a:98:3f:44:b4:08:c8:6c:94:
fa:ac:31:25:ef:b0:bf:3f:1c:ba:cf:54:f5:a9:29:
32:68:b0:12:90:fb:ff:11:81:cb:8d:f8:dd:2d:3b:
99:d2:82:c4:01:9e:c4:e7:3d:2e:51:a5:20:e0:19:
8f:74:e6:e2:69:bc:fe:ee:a1:c2:6d:7a:2c:d4:ab:
47:a0:35:a6:05:91:63:3c:49:e2:11:e1:4c:1c:e1:
b7:8f:42:07:08:80:be:0a:54:a0:7d:d0:3b:f7:14:
72:e7:36:76:b1:70:37:19:43:c3:ca:54:89:0a:4c:
0c:cf:f6:9c:b3:e0:6e:98:21:30:92:d3:62:e2:eb:
9c:53:af:69:ca:4d:86:b5:e1:36:bd:fd:11:94:69:
d8:21:51:7a:eb:08:52:71:be:a9:93:29:93:70:62:
ab:a2:ed:db:80:26:cc:58:7d:c9:00:07:38:bc:ae:
d6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BA:07:C2:F8:C1:89:BF:03:BC:FC:69:19:A6:31:C0:11:9F:5A:9E
X509v3 Authority Key Identifier:
keyid:74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:0f:bf:78:f1:28:d7:16:75:f5:31:50:eb:76:c7:53:53:d6:
89:ad:57:b4:5b:d0:67:cf:e6:d4:b3:f2:a1:c2:04:30:f7:cd:
ed:c9:c9:42:bd:54:d1:d6:56:03:99:d2:96:4c:f0:9f:1c:a8:
58:dc:36:86:42:84:9a:b7:f4:62:e3:d4:3c:7b:32:d1:30:37:
77:fc:6b:80:fe:fb:79:64:3c:2b:56:a5:20:fc:c6:ce:f4:c8:
ce:ec:76:dc:54:a7:1e:a0:9a:34:df:97:5e:4d:d4:9f:fe:e6:
ab:9f:92:c5:37:2e:d8:7f:c8:4b:2b:32:a6:63:b8:f1:0d:37:
a2:b7:a4:aa:de:92:17:23:11:7a:a2:e5:24:79:af:3b:e6:07:
3d:41:2b:58:fa:b7:a7:3e:58:40:39:fa:3a:c7:3d:11:e3:0b:
d1:36:36:0a:64:b7:1b:18:c2:0d:ca:4a:a6:f5:47:5d:65:ae:
c1:07:ce:03:e6:cf:f3:4f:5d:0a:db:1d:7e:bb:bd:66:a1:d9:
57:59:49:25:2a:c2:21:46:84:f3:b4:08:9e:76:1f:75:4b:8b:
ec:93:b2:d0:00:81:4c:34:d2:94:9a:db:21:8c:11:4a:c7:0d:
31:c5:c3:b7:ce:e7:3c:6a:af:43:50:f8:70:fc:33:e0:2c:ac:
21:77:1b:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pq+46vtgdQV1c8X3RsXTgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NTA4MTBmMTNkZjhkOTAxOWYxNTdjMzZmYmQwZjZkYjk4
NjI5OTIwHhcNMjYwNzI4MTcwMDQ0WhcNMjYwNzI5MTcwMDQ0WjAzMTEwLwYDVQQD
Eyg3NGJhMDdjMmY4YzE4OWJmMDNiY2ZjNjkxOWE2MzFjMDExOWY1YTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4nvlfRchy1kwsFLGcQdUHVenAzm
SoF3G786WlP+8pRSLQKocjUlZgy6H9Y1a7qBn5ZOh823NpZbmIBTXCGDV+8BJOEi
2hPEFTy5l23P8R6KmD9EtAjIbJT6rDEl77C/Pxy6z1T1qSkyaLASkPv/EYHLjfjd
LTuZ0oLEAZ7E5z0uUaUg4BmPdObiabz+7qHCbXos1KtHoDWmBZFjPEniEeFMHOG3
j0IHCIC+ClSgfdA79xRy5zZ2sXA3GUPDylSJCkwMz/acs+BumCEwktNi4uucU69p
yk2GteE2vf0RlGnYIVF66whScb6pkymTcGKrou3bgCbMWH3JAAc4vK7WcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHS6B8L4wYm/A7z8aRmmMcARn1qeMB8GA1UdIwQY
MBaAFHRQgQ8T342QGfFXw2+9D225himSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEZDQkR4UGZqWkFaOFZmRGI3MFBiYm1HS1pJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8xMzM1ZDYtYjRkNi00YzgzLThiMGUt
OGYyMTVjMDlhZTcyLzEvZEZDQkR4UGZqWkFaOFZmRGI3MFBiYm1HS1pJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8xMzM1ZDYtYjRkNi00YzgzLThiMGUtOGYyMTVjMDlhZTcy
LzEvZEZDQkR4UGZqWkFaOFZmRGI3MFBiYm1HS1pJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQw+/ePEo
1xZ19TFQ63bHU1PWia1XtFvQZ8/m1LPyocIEMPfN7cnJQr1U0dZWA5nSlkzwnxyo
WNw2hkKEmrf0YuPUPHsy0TA3d/xrgP77eWQ8K1alIPzGzvTIzux23FSnHqCaNN+X
Xk3Un/7mq5+SxTcu2H/ISysypmO48Q03orekqt6SFyMReqLlJHmvO+YHPUErWPq3
pz5YQDn6Osc9EeML0TY2CmS3GxjCDcpKpvVHXWWuwQfOA+bP809dCtsdfru9ZqHZ
V1lJJSrCIUaE87QInnYfdUuL7JOy0ACBTDTSlJrbIYwRSscNMcXDt87nPGqvQ1D4
cPwz4CysIXcbUw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:26:34 2026 by rpki-client