Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
File: dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft (raw, json)
Hash identifier: rYIC60ttfDAQwr5b/Cg9O10htQ6J4p3NZ2gOIOqm8q4=
Subject key identifier: 55:04:B0:F5:B3:B8:1C:DB:5A:29:C5:DB:97:0D:81:DC:28:BE:76:22
Authority key identifier: 74:24:88:F0:D9:B4:B1:71:A2:E2:F0:FA:55:9B:43:F9:A5:B3:2E:26
Certificate issuer: /CN=742488f0d9b4b171a2e2f0fa559b43f9a5b32e26
Certificate serial: 019FAC7665ACD8CAFEB36A3BE309A05544E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
Manifest number: 0943
Signing time: Wed 29 Jul 2026 06:01:08 +0000
Manifest this update: Wed 29 Jul 2026 06:01:08 +0000
Manifest next update: Thu 30 Jul 2026 06:01:08 +0000
Files and hashes: 1: dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl (hash: c+gDlSdS4o1o32S/hxS3c/TdHOf8dVZOlNJ+pcddKUc=)
2: fe3bi-doKDNu4dmU6DR8DAdVKZc.roa (hash: OoARVSCOyCQLc2Hu8VCrhllOD8R6T0zZ8zONXrdJeEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:65:ac:d8:ca:fe:b3:6a:3b:e3:09:a0:55:44:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742488f0d9b4b171a2e2f0fa559b43f9a5b32e26
Validity
Not Before: Jul 29 06:01:08 2026 GMT
Not After : Jul 30 06:01:08 2026 GMT
Subject: CN=5504b0f5b3b81cdb5a29c5db970d81dc28be7622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:be:09:1c:53:de:c5:be:d6:9f:ef:b0:26:08:
64:af:31:bf:b7:2b:81:ff:f0:2d:2f:91:94:a3:3f:
5c:9e:7a:92:8e:1f:43:bc:dc:dc:87:cf:03:7c:d1:
d8:02:4d:d5:8d:12:39:08:c2:71:1d:26:ba:bb:c7:
9c:22:24:7c:2f:e1:8e:41:41:6f:16:2e:40:dd:12:
ce:1e:99:73:f4:67:25:70:05:c9:9d:99:90:b0:63:
bc:c6:fc:c4:11:09:85:e4:c4:05:13:9b:8d:e2:fb:
3d:36:95:9b:ad:f9:d5:22:90:bb:c8:99:00:1a:72:
4b:2a:58:f4:95:ea:47:67:0e:4d:b0:b9:9e:f8:ef:
1b:33:58:a7:09:f7:54:92:94:57:a9:35:43:f2:3b:
59:83:b4:bc:0d:e7:df:95:2b:f1:61:a8:8a:75:f4:
44:86:64:73:75:71:68:6e:50:5e:2e:21:8f:83:1d:
38:5e:aa:da:b8:d8:f5:87:31:fa:77:60:6f:c0:49:
e3:95:2d:59:0b:c7:d0:14:cd:d3:3b:8b:45:1e:92:
6f:09:66:8f:3f:fd:61:26:36:74:69:b2:29:18:d0:
1f:bc:c9:d3:a4:13:3b:ba:67:03:62:5f:4f:91:15:
32:f9:2e:46:2d:4f:67:ac:3f:f7:6d:20:d8:9e:7c:
97:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:04:B0:F5:B3:B8:1C:DB:5A:29:C5:DB:97:0D:81:DC:28:BE:76:22
X509v3 Authority Key Identifier:
keyid:74:24:88:F0:D9:B4:B1:71:A2:E2:F0:FA:55:9B:43:F9:A5:B3:2E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:da:15:24:8e:72:c9:f5:95:06:e4:4c:84:31:7e:92:1b:25:
ca:6f:85:4a:0b:e6:c4:1e:74:c6:eb:75:3c:c0:7d:17:9c:5c:
77:33:fb:84:9c:45:e8:a5:b7:d2:10:11:19:78:d0:18:02:89:
72:09:65:fb:c0:cf:ff:44:13:e6:31:ab:ef:8b:e6:50:bd:b4:
95:c1:fb:22:7e:21:53:80:79:7d:87:25:2d:f4:58:fb:0f:06:
14:fd:3d:fa:c1:4f:86:65:e4:a1:52:85:e7:6f:67:1e:6d:ab:
08:64:07:2e:da:43:49:df:8e:6a:e5:8d:3b:b0:82:ed:fc:63:
97:9f:81:fe:c0:21:39:48:fc:3f:b7:a6:bb:c3:b4:dd:61:67:
a5:d5:5a:3a:de:6b:61:61:93:41:d4:f3:4d:17:c6:30:21:3d:
6a:7a:df:d4:8f:ac:02:7b:e7:83:8d:1e:70:3b:e4:8f:7b:eb:
25:f3:9d:ca:83:64:17:67:f4:35:0e:f9:04:52:16:1b:f3:50:
31:3b:ea:41:e4:60:47:a4:88:54:2c:05:29:78:68:cb:78:e2:
8a:c0:95:55:b0:89:95:0a:5b:41:e6:f3:4a:c6:a3:77:44:c4:
41:37:66:38:02:af:8e:9e:a2:0f:03:ee:4a:4c:33:71:c2:96:
4c:f3:13:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdmWs2Mr+s2o74wmgVUTgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MjQ4OGYwZDliNGIxNzFhMmUyZjBmYTU1OWI0M2Y5YTVi
MzJlMjYwHhcNMjYwNzI5MDYwMTA4WhcNMjYwNzMwMDYwMTA4WjAzMTEwLwYDVQQD
Eyg1NTA0YjBmNWIzYjgxY2RiNWEyOWM1ZGI5NzBkODFkYzI4YmU3NjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL4JHFPexb7Wn++wJghkrzG/tyuB
//AtL5GUoz9cnnqSjh9DvNzch88DfNHYAk3VjRI5CMJxHSa6u8ecIiR8L+GOQUFv
Fi5A3RLOHplz9GclcAXJnZmQsGO8xvzEEQmF5MQFE5uN4vs9NpWbrfnVIpC7yJkA
GnJLKlj0lepHZw5NsLme+O8bM1inCfdUkpRXqTVD8jtZg7S8DefflSvxYaiKdfRE
hmRzdXFoblBeLiGPgx04XqrauNj1hzH6d2BvwEnjlS1ZC8fQFM3TO4tFHpJvCWaP
P/1hJjZ0abIpGNAfvMnTpBM7umcDYl9PkRUy+S5GLU9nrD/3bSDYnnyXhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFUEsPWzuBzbWinF25cNgdwovnYiMB8GA1UdIwQY
MBaAFHQkiPDZtLFxouLw+lWbQ/mlsy4mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZENTSThObTBzWEdpNHZENlZadEQtYVd6TGlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iYzRjMjMtZjdjZS00MmYxLTg4MTkt
ZjJiYmZiYTcxYTI4LzEvZENTSThObTBzWEdpNHZENlZadEQtYVd6TGlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9iYzRjMjMtZjdjZS00MmYxLTg4MTktZjJiYmZiYTcxYTI4
LzEvZENTSThObTBzWEdpNHZENlZadEQtYVd6TGlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUtoVJI5y
yfWVBuRMhDF+khslym+FSgvmxB50xut1PMB9F5xcdzP7hJxF6KW30hARGXjQGAKJ
cgll+8DP/0QT5jGr74vmUL20lcH7In4hU4B5fYclLfRY+w8GFP09+sFPhmXkoVKF
529nHm2rCGQHLtpDSd+OauWNO7CC7fxjl5+B/sAhOUj8P7emu8O03WFnpdVaOt5r
YWGTQdTzTRfGMCE9anrf1I+sAnvng40ecDvkj3vrJfOdyoNkF2f0NQ75BFIWG/NQ
MTvqQeRgR6SIVCwFKXhoy3jiisCVVbCJlQpbQebzSsajd0TEQTdmOAKvjp6iDwPu
SkwzccKWTPMT9w==
-----END CERTIFICATE-----
Generated at Wed Jul 29 15:47:47 2026 by rpki-client