Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/DFYjS8c9DKyBlhHK3imHSCL_XVQ.mft
File: DFYjS8c9DKyBlhHK3imHSCL_XVQ.mft (raw, json)
Hash identifier: gtpommMJnmVgGPRZ6PDRstIdgbgBztdwX26jfei6rRc=
Subject key identifier: D2:44:E1:73:A5:7E:E5:AB:BC:9F:77:23:E6:12:1A:69:6D:BC:FC:FD
Authority key identifier: 0C:56:23:4B:C7:3D:0C:AC:81:96:11:CA:DE:29:87:48:22:FF:5D:54
Certificate issuer: /CN=0c56234bc73d0cac819611cade29874822ff5d54
Certificate serial: 019FAC7705FE8BC5E2B52A14F857877C0C4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFYjS8c9DKyBlhHK3imHSCL_XVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/DFYjS8c9DKyBlhHK3imHSCL_XVQ.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:49 +0000
Manifest this update: Wed 29 Jul 2026 06:01:49 +0000
Manifest next update: Thu 30 Jul 2026 06:01:49 +0000
Files and hashes: 1: 2zJJEln3aMuBWTTX2Wghm64WL1c.roa (hash: 5hVuyCxLA7+9VBEWVzzqiucZv/QNutyUowFs04GW0IQ=)
2: DFYjS8c9DKyBlhHK3imHSCL_XVQ.crl (hash: NFsN9vWzWExT+hUMrEYn6HZBJYi5eNrMOm4gjlTxzw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/DFYjS8c9DKyBlhHK3imHSCL_XVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/DFYjS8c9DKyBlhHK3imHSCL_XVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFYjS8c9DKyBlhHK3imHSCL_XVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:77:05:fe:8b:c5:e2:b5:2a:14:f8:57:87:7c:0c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c56234bc73d0cac819611cade29874822ff5d54
Validity
Not Before: Jul 29 06:01:49 2026 GMT
Not After : Jul 30 06:01:49 2026 GMT
Subject: CN=d244e173a57ee5abbc9f7723e6121a696dbcfcfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:91:81:5f:49:b7:29:01:cd:78:09:6b:00:ee:
2f:7b:73:07:ef:8e:d1:86:d3:b5:dc:19:39:ec:35:
bd:f6:80:7f:64:34:10:0a:83:b8:1a:8e:bb:1f:9d:
f1:e0:22:61:55:2e:c0:b4:31:b1:8e:4b:57:3f:76:
b3:1c:40:c4:dd:47:f4:d1:9b:01:8a:89:61:c7:c2:
36:6f:43:5d:3d:16:49:51:0c:09:66:a7:af:e6:54:
1a:5d:59:cd:d0:b2:0c:40:9b:84:46:2c:10:22:f1:
af:e1:5a:e4:74:fc:ec:ff:38:97:42:45:5e:5f:d0:
be:26:d8:aa:2e:73:f2:17:38:5a:20:c7:75:c1:e8:
fc:37:1e:81:33:5e:dc:73:b7:76:cd:b5:56:6d:cd:
62:ba:fd:d5:e8:53:8e:4e:d3:9a:dd:cd:40:0f:1b:
1b:fa:5e:54:f9:4b:3d:7c:59:c6:90:e3:b1:48:21:
12:5a:23:2d:ae:11:a5:73:b6:5e:43:a5:a1:bd:b1:
cc:39:2b:d3:81:18:6a:06:e6:ff:15:71:4e:32:0d:
02:b9:53:b3:ec:d1:5d:17:f8:77:77:0c:c8:99:6a:
cb:7d:82:15:4c:a9:5f:ee:6d:9a:f4:5d:65:6c:b6:
e7:31:c6:44:d1:6c:29:4d:8c:c7:74:c3:89:b2:77:
68:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:44:E1:73:A5:7E:E5:AB:BC:9F:77:23:E6:12:1A:69:6D:BC:FC:FD
X509v3 Authority Key Identifier:
keyid:0C:56:23:4B:C7:3D:0C:AC:81:96:11:CA:DE:29:87:48:22:FF:5D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFYjS8c9DKyBlhHK3imHSCL_XVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/DFYjS8c9DKyBlhHK3imHSCL_XVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/DFYjS8c9DKyBlhHK3imHSCL_XVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:53:9e:be:af:8f:b7:1b:c5:c4:f4:e2:a4:d2:a4:c0:99:43:
07:74:f1:d1:0c:f6:3a:76:2a:39:17:a7:8f:60:70:64:44:30:
87:8b:96:53:08:41:f4:73:39:c7:e6:2d:15:04:70:68:78:fd:
29:43:d7:44:3a:f3:d6:cd:31:b0:95:9b:22:a0:bb:ad:15:fc:
86:ea:78:65:ac:07:f8:31:43:15:8a:5b:16:2d:2e:42:9f:cc:
17:bf:81:4c:6a:b1:f1:3a:6a:ef:a2:1b:8b:01:57:3b:b1:d0:
6c:8f:84:5b:a8:50:a4:64:c8:25:57:f1:59:ab:7b:46:22:bc:
ef:62:a5:7f:0d:c6:a1:3a:5f:8e:17:00:3e:f3:b9:4d:7d:1c:
c6:dc:4d:e6:4d:75:a0:8e:fb:5b:2f:0c:10:96:b5:1a:d0:63:
b6:da:f3:16:be:d0:0a:dd:92:91:f7:26:09:26:a5:40:15:11:
f3:97:77:78:57:3b:5b:45:f3:5d:79:00:33:0d:a4:ed:0c:9c:
0e:9d:73:aa:cc:2c:6c:45:4b:5d:3f:04:d4:75:40:86:c0:6c:
1e:9b:81:16:e0:8d:fa:06:e0:85:1a:26:45:1d:58:50:84:35:
93:27:f4:ca:de:55:bc:47:77:5f:36:44:f8:92:93:ef:7a:1d:
15:92:1d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:20:11 2026 by rpki-client