
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
File: DyFSGnEnFX99rwrQkTlK1aHM53k.mft (raw, json)
Hash identifier: U0vEz5GHo/zJqLPDaiJtJo/glxdtb1byE94YMZjqleI=
Subject key identifier: EE:32:C1:9F:AB:3A:8A:80:5E:BB:3E:10:50:6A:69:4C:04:8A:5A:CA
Authority key identifier: 0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
Certificate issuer: /CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Certificate serial: 019FAB2C2C19F8A4B3634306040A0D45EACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
Manifest number: 19E0
Signing time: Wed 29 Jul 2026 00:00:26 +0000
Manifest this update: Wed 29 Jul 2026 00:00:26 +0000
Manifest next update: Thu 30 Jul 2026 00:00:26 +0000
Files and hashes: 1: 0IWvtKpWz8nwzfyztFPG-10e-ec.roa (hash: M3DL2KpstDY4RX5irHxTIoQ7SYVzPk7eR23DZZrDMbo=)
2: DyFSGnEnFX99rwrQkTlK1aHM53k.crl (hash: hI026gCxjJvPHkbmoDMbAzDT6/dXxqXCebA8ZVfUDeQ=)
3: pYVSN2AB9mwBr8yDS1zYwXrTuMQ.roa (hash: xWYPQfiNQqIYcOLgwTTjRZ9fSTqKYlkmjs7r1ngIGF4=)
4: uXN7_MtPKMwhSTIFKpLUwo-V5P8.roa (hash: 8z/tTyMqQq524Fl02SLcRSjti3sQ0AEo40zN2vpCYes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:2c:19:f8:a4:b3:63:43:06:04:0a:0d:45:ea:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Validity
Not Before: Jul 29 00:00:26 2026 GMT
Not After : Jul 30 00:00:26 2026 GMT
Subject: CN=ee32c19fab3a8a805ebb3e10506a694c048a5aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ff:aa:6d:cc:18:22:03:5d:25:d6:d8:fa:14:
13:2d:b3:67:17:77:09:6b:95:bd:57:05:e9:d6:eb:
da:d9:35:e4:11:df:aa:e0:da:5c:82:e6:26:62:97:
df:0c:19:63:f8:b5:30:87:83:93:39:31:e0:be:f1:
29:76:35:48:a2:49:76:97:a4:ab:36:f8:96:18:4e:
ef:8b:ca:f6:eb:88:2a:a5:37:f2:30:34:12:f4:2b:
93:c6:d9:a2:80:3b:95:b4:62:d6:b0:f3:4b:e5:a1:
1f:2e:fc:ff:cc:ae:7e:ec:20:42:9f:97:be:66:fc:
b4:c5:90:c8:31:5a:9f:c6:dd:ce:bc:d7:1a:a3:c2:
b6:21:34:e5:5a:4a:bb:64:4c:16:73:e5:f2:d6:ad:
cb:f0:56:a0:96:44:b4:15:83:2c:d3:fe:3a:6a:b4:
fd:74:ea:b1:58:83:e7:5e:f2:6a:3d:29:ad:79:67:
f8:6b:61:40:2b:01:db:cc:36:41:ca:85:7a:27:3f:
63:78:bf:14:7c:9d:1e:f5:43:a4:1f:84:d5:27:65:
99:18:e6:10:f0:f9:5f:76:a8:aa:ae:7b:29:f1:70:
53:cc:0f:2d:9f:1c:10:31:05:38:bc:d7:90:d5:9d:
73:cf:d3:c0:fe:64:ef:3d:f5:81:96:14:35:40:9f:
2d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:32:C1:9F:AB:3A:8A:80:5E:BB:3E:10:50:6A:69:4C:04:8A:5A:CA
X509v3 Authority Key Identifier:
keyid:0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c2:0c:6b:c5:57:a0:dc:14:79:eb:52:c7:0a:43:60:5c:b4:
75:1b:9f:21:bf:8a:b6:25:16:8d:47:f7:a2:27:ae:29:9d:97:
d7:e2:0b:c0:35:e0:6d:dd:20:76:d5:69:6b:67:3f:72:cb:c7:
2f:08:85:6d:1e:1a:1f:5f:6a:8f:95:42:d1:33:44:75:ff:e4:
88:64:c5:82:35:d7:49:40:d7:b0:67:e3:1d:57:e5:73:4a:be:
27:61:44:8b:6a:53:1c:f3:37:48:07:43:c6:1f:e6:c3:eb:8e:
38:10:8f:44:c1:6e:6f:d6:3b:18:e4:82:ad:4e:cf:17:3c:56:
d5:16:7e:20:4e:20:b4:9c:f4:0f:a1:8a:f1:7a:fa:04:c7:a3:
81:e9:09:34:e3:dc:1b:03:1e:64:e5:79:3c:e0:f4:c4:8e:25:
f3:9d:14:8a:6f:ef:f1:81:9f:ff:da:22:aa:15:6a:f1:c0:58:
df:29:69:e3:a3:c1:af:76:30:1b:84:6d:8c:21:a9:a0:a3:98:
af:41:ad:49:25:9c:b7:24:91:15:65:5a:53:ae:96:95:bb:c6:
60:f1:a0:d6:b8:34:85:92:5a:4a:1d:68:53:d8:ab:dd:c2:d4:
98:f8:77:8e:33:89:3a:d9:6d:7c:51:3a:5b:a0:b2:67:2d:0d:
3e:54:90:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:08:06 2026 by rpki-client