Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
File: dRk72fhLSp7UegO9-JLZ55i3Jyc.mft (raw, json)
Hash identifier: hxCZUl7vbwOYBI2ZwGT22wuw8YZSqgOMvWcLJW2Yztc=
Subject key identifier: 2C:3B:42:0C:92:57:F1:E7:D3:92:F5:32:23:F3:7A:4C:00:29:82:64
Authority key identifier: 75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27
Certificate issuer: /CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727
Certificate serial: 019FAAF5FB82B3DA02694DAE36EE89E28CD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
Manifest number: 19D7
Signing time: Tue 28 Jul 2026 23:01:15 +0000
Manifest this update: Tue 28 Jul 2026 23:01:15 +0000
Manifest next update: Wed 29 Jul 2026 23:01:15 +0000
Files and hashes: 1: dRk72fhLSp7UegO9-JLZ55i3Jyc.crl (hash: ReXbTW8AQ/92trf3PAkLlzmUqog203Y+8qtISEKBIMA=)
2: npNQdbBPSAtnOlq0Culg6ehSO3c.roa (hash: nzhX62ENfek+KzOEsFGqCHI0pXJKicAlbiFtnu/GhCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:fb:82:b3:da:02:69:4d:ae:36:ee:89:e2:8c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727
Validity
Not Before: Jul 28 23:01:15 2026 GMT
Not After : Jul 29 23:01:15 2026 GMT
Subject: CN=2c3b420c9257f1e7d392f53223f37a4c00298264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bc:73:07:d7:1e:a1:ea:b1:22:07:32:8a:af:
a2:85:7c:02:5f:53:4e:3d:e5:07:97:07:7b:47:f7:
87:48:d2:fb:71:1c:cb:50:5a:a0:5f:4a:a3:38:55:
6c:d3:2d:24:76:0e:e2:f8:1b:5a:bb:8b:c1:73:9c:
67:e1:c2:ed:3e:ba:1a:a3:72:db:5c:b9:7b:0e:f3:
7b:c8:1d:fc:de:74:16:79:37:6d:54:f0:56:ba:a5:
26:72:9b:1e:2b:8c:40:e7:f5:6b:9c:2c:22:17:bc:
f3:d8:8a:eb:0f:42:b1:88:bf:94:2e:f0:0e:70:07:
55:1c:1b:ab:3e:68:8a:66:48:01:d2:cc:37:be:3e:
e4:8d:75:85:13:53:99:da:42:d1:ee:4c:c1:5b:90:
d6:5a:43:71:33:53:48:09:5c:23:a4:db:0d:44:a4:
d6:b7:fc:8b:0b:a1:d5:29:06:d4:7f:b5:aa:63:82:
a8:d7:3b:90:30:ba:29:85:ed:a1:95:6b:59:df:b2:
04:28:44:23:2d:ad:fb:82:cb:fc:9c:06:93:4d:68:
95:af:92:ff:a1:46:39:7b:07:6a:ee:b6:7b:7d:36:
67:3a:7d:98:b4:bb:4a:02:5f:0b:b1:87:49:df:02:
4e:d0:36:a5:dc:33:ee:80:f3:b5:d3:14:86:1a:94:
4a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3B:42:0C:92:57:F1:E7:D3:92:F5:32:23:F3:7A:4C:00:29:82:64
X509v3 Authority Key Identifier:
keyid:75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c3:3d:0f:e4:b5:a7:51:cd:1f:d2:26:80:94:81:b5:f7:76:
60:7a:8a:e6:36:b2:7d:30:8d:33:51:f9:7a:20:aa:ae:bf:a1:
a8:1f:b8:ee:74:2a:6b:4b:6c:1f:77:4a:75:86:bf:bf:f7:37:
06:f7:ae:b9:33:b5:d0:f3:5f:26:ca:fa:91:ab:d4:64:81:6f:
e6:8a:69:50:06:48:41:58:8c:f5:db:64:9a:54:1e:6a:8b:60:
ab:a4:e9:1c:0a:9e:b9:bb:02:93:72:cf:50:a7:4b:f4:94:e3:
be:92:2f:bc:e1:61:49:4c:ca:00:ab:32:c2:96:11:31:68:b2:
1b:e3:80:a2:c1:7f:8a:db:2c:fe:95:dc:cf:ad:1c:53:e3:9c:
1e:25:84:8d:39:5c:8f:f8:03:ac:0a:74:c2:35:37:9e:16:83:
e6:ac:29:94:b9:34:3a:61:6c:b4:0d:11:10:b9:a5:23:7b:d8:
e6:68:65:f9:bb:57:5c:4b:b5:6c:26:c3:70:1b:0d:3e:69:a9:
17:d5:04:45:94:a6:22:4a:59:24:8a:52:7f:fa:ca:42:39:b7:
44:93:4c:ac:66:bf:bd:12:40:87:1d:34:70:70:14:93:c2:b8:
ea:e6:dc:fb:8d:50:be:d0:d2:d3:2e:39:41:ee:46:eb:3e:c2:
8e:c2:72:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:49:45 2026 by rpki-client