Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
File: Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft (raw, json)
Hash identifier: 1/AySuLqpQRfp/e2LH6lm+pQaQonX+wYgLTCRbvEwew=
Subject key identifier: F0:A3:79:6D:6A:E7:63:C6:25:0E:48:1D:4A:B3:F3:37:82:83:7B:E6
Authority key identifier: 0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92
Certificate issuer: /CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92
Certificate serial: 019FAABE2266A437BF941B368BAA2075F578
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
Manifest number: 19D9
Signing time: Tue 28 Jul 2026 22:00:14 +0000
Manifest this update: Tue 28 Jul 2026 22:00:14 +0000
Manifest next update: Wed 29 Jul 2026 22:00:14 +0000
Files and hashes: 1: DkVdvbXhpbo9CQqVcVFBg1LNoNE.roa (hash: qaF1R+er71d5hFs2KTiNhXAjh56KPYgioy+6tvssIEE=)
2: Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl (hash: IMVHNRDMlT3UH4vuNzoQIp1plpyWRjZzmt9/eMC3RdI=)
3: WIQ88PUyl0Wn69b9mzqB92sF45M.roa (hash: ATP8ajAQ0MqjrK6hyWC+m5lGC/lxKRtV3XstqqIRErs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:22:66:a4:37:bf:94:1b:36:8b:aa:20:75:f5:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92
Validity
Not Before: Jul 28 22:00:14 2026 GMT
Not After : Jul 29 22:00:14 2026 GMT
Subject: CN=f0a3796d6ae763c6250e481d4ab3f33782837be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:20:3c:88:19:ac:8f:18:34:2a:16:96:11:6d:
d8:83:d6:32:6a:7a:14:09:53:40:1b:67:13:07:23:
d4:78:80:f2:bd:b0:f1:17:5b:e7:2c:51:18:3f:e4:
44:c3:ff:43:14:3d:4f:56:14:ad:bc:9c:01:92:eb:
8a:4c:c9:75:b4:0d:f4:0f:59:8c:c8:52:e5:07:ff:
e5:29:3c:f7:bc:a9:a6:16:b2:49:fc:9a:4a:5f:34:
c3:f1:80:5d:e7:8e:b3:f2:10:5a:69:61:a8:28:32:
1e:97:43:31:0b:63:38:09:16:6b:81:35:dd:45:dd:
d7:8c:ac:bf:96:69:32:f0:46:9e:f0:2a:3e:c7:c4:
42:59:3b:aa:de:4c:bd:f6:c6:59:f4:d5:52:58:8f:
e6:f6:cd:26:f8:1f:ac:8e:53:4f:0e:9d:5a:6a:1b:
c2:c6:de:0f:2f:ac:f1:d6:73:bb:fc:7d:f9:7e:b7:
75:cc:f4:c3:18:c8:8e:06:29:9a:a0:e9:81:f5:4b:
9d:8d:12:ef:32:ab:6e:fd:01:b7:32:0a:63:c7:a3:
ea:e9:ac:9c:88:fa:78:14:bb:2d:31:ec:39:2a:0a:
8d:da:84:cb:49:a2:7e:00:e1:81:f5:b4:78:6d:24:
b8:e2:5a:bd:8b:18:3a:19:b4:35:42:d5:93:ce:97:
77:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A3:79:6D:6A:E7:63:C6:25:0E:48:1D:4A:B3:F3:37:82:83:7B:E6
X509v3 Authority Key Identifier:
keyid:0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:15:f5:6a:d3:f2:15:7d:6a:c0:4d:5b:7e:c9:47:88:db:cd:
6f:50:6d:fd:1a:55:8a:7a:2a:9e:45:ae:c7:31:8d:d3:8a:c7:
ca:fb:a4:8b:af:b5:fe:69:b0:07:13:4b:57:a9:e6:11:3f:5c:
83:42:1a:c5:25:6d:3b:72:47:52:06:37:bf:75:2a:46:86:f7:
a6:40:e0:60:57:d7:f7:8e:b6:75:14:bb:05:8c:31:b3:10:b2:
cc:c3:53:66:ab:94:45:01:b5:98:f0:1d:d8:cd:9c:e7:29:70:
bf:21:c1:43:3a:7d:85:10:d2:85:dc:5b:90:53:59:0d:37:39:
c3:d8:8b:77:00:27:c6:d7:10:d3:f9:70:ac:d0:dc:95:9e:43:
5a:5c:b7:c9:38:6a:9c:a7:65:e6:57:04:24:77:be:b8:29:84:
4b:61:13:89:5e:36:82:73:9d:c8:16:ac:dc:14:4e:8b:99:e8:
4f:de:67:d1:bf:fe:8b:76:1d:5f:15:d0:50:b7:08:81:3c:f0:
47:c1:53:0b:9e:cc:16:f1:51:48:0c:9a:ba:9c:5f:cf:0b:9d:
dd:3d:22:36:99:ad:5a:a8:e6:86:0b:2e:36:2c:e0:50:22:30:
71:cf:a3:6d:cb:68:c2:8e:92:33:f3:a9:44:25:9b:13:be:06:
81:ff:fc:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:53:01 2026 by rpki-client