Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
File: dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft (raw, json)
Hash identifier: elwcG4tY6i128+DekwOC+7DBaTK14voFsc9rBGVD3nA=
Subject key identifier: 3A:A0:8A:CF:23:E4:67:56:B0:69:B4:21:82:BD:C0:A7:C2:2E:02:E6
Authority key identifier: 74:24:88:F0:D9:B4:B1:71:A2:E2:F0:FA:55:9B:43:F9:A5:B3:2E:26
Certificate issuer: /CN=742488f0d9b4b171a2e2f0fa559b43f9a5b32e26
Certificate serial: 019FAE654EA0BF2430EA7B50F6F6FFF1099F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
Manifest number: 0944
Signing time: Wed 29 Jul 2026 15:01:42 +0000
Manifest this update: Wed 29 Jul 2026 15:01:42 +0000
Manifest next update: Thu 30 Jul 2026 15:01:42 +0000
Files and hashes: 1: dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl (hash: yNhbEQqyKcsz7IT4CbA9wBGlW3zCj1gdAYTu8OiXvN4=)
2: fe3bi-doKDNu4dmU6DR8DAdVKZc.roa (hash: OoARVSCOyCQLc2Hu8VCrhllOD8R6T0zZ8zONXrdJeEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:65:4e:a0:bf:24:30:ea:7b:50:f6:f6:ff:f1:09:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742488f0d9b4b171a2e2f0fa559b43f9a5b32e26
Validity
Not Before: Jul 29 15:01:42 2026 GMT
Not After : Jul 30 15:01:42 2026 GMT
Subject: CN=3aa08acf23e46756b069b42182bdc0a7c22e02e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:86:6f:48:d2:21:ef:7b:32:f4:81:52:19:eb:
4c:4f:5f:6a:fe:80:c6:58:5e:8f:29:4b:95:bb:b0:
b3:5a:be:f0:b3:84:94:4f:ef:ba:90:1f:23:1c:e5:
27:4c:41:4a:6a:53:bb:46:f1:8a:c0:b1:a2:7a:cd:
69:05:81:e8:8e:f5:55:9d:99:fd:ad:9d:93:44:2e:
79:8b:4a:05:02:c7:ba:fc:be:03:c6:8b:6f:f6:e0:
34:e6:11:30:74:12:27:fc:45:88:b9:5e:91:5b:23:
15:09:6b:bc:01:0f:da:c6:92:8a:a1:ae:ba:14:52:
27:d2:5c:35:b3:38:8f:9f:01:f8:c5:14:2b:6a:44:
b5:d9:77:dd:a4:d0:4d:46:f2:2b:09:7b:30:92:d2:
fe:73:36:f8:28:47:3e:ce:8d:12:51:a7:23:96:1a:
b1:14:e9:c7:ea:ea:7b:4b:8b:a5:14:d6:ce:8a:39:
97:3f:78:e7:59:c6:d8:b3:f2:2f:84:19:80:88:4f:
6e:8f:b6:b0:df:4b:9f:98:33:36:6a:2f:7e:7b:d1:
dc:77:0d:ae:9c:59:04:8f:2b:63:ef:ca:3d:9c:af:
92:a0:fa:e9:0f:63:76:4e:25:65:9f:f4:90:5e:c3:
1c:86:e7:6b:05:f9:df:fa:96:63:30:5f:2e:02:4c:
f2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A0:8A:CF:23:E4:67:56:B0:69:B4:21:82:BD:C0:A7:C2:2E:02:E6
X509v3 Authority Key Identifier:
keyid:74:24:88:F0:D9:B4:B1:71:A2:E2:F0:FA:55:9B:43:F9:A5:B3:2E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:34:70:58:11:9b:58:ab:9a:ee:ea:fb:28:69:9c:af:bb:22:
ec:b3:f6:bd:1d:36:90:47:22:51:7a:aa:a1:55:a7:5b:e4:45:
9c:a1:e3:07:34:13:6a:ae:d4:31:f0:9b:56:4c:f9:31:ed:60:
3e:7c:b4:d4:06:03:48:88:09:f8:06:b1:9f:b3:af:24:75:47:
ef:d8:3f:ff:f4:b1:cd:97:40:a0:28:b0:fc:e1:83:5f:62:a2:
a0:62:9c:98:11:f4:b2:a4:77:1c:20:f1:c3:0e:b8:45:e4:2f:
73:d9:b6:dc:01:5d:a6:8b:6f:e9:6e:e9:34:b5:f1:b6:cb:03:
1d:40:e1:03:87:7c:47:6f:31:a4:dc:83:98:0d:e6:69:6e:c8:
bc:6b:6c:47:3c:da:c3:d2:c7:65:6e:45:93:75:03:a1:10:ba:
95:fc:7f:d2:5f:fd:4d:f5:3a:69:9d:83:b9:22:76:62:8b:c1:
a3:4d:af:a1:6f:ad:ac:c6:60:71:f3:72:9d:34:a1:a4:3a:e0:
ee:1b:3d:2d:df:1c:25:a4:98:2d:15:d8:38:a0:6f:7e:6c:77:
7e:2c:49:39:eb:8e:6e:f3:73:3e:75:9e:a2:60:5f:a8:d1:db:
19:c3:48:d8:86:2d:94:22:b4:97:45:df:db:21:57:e0:b1:cb:
1d:5a:68:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:02:43 2026 by rpki-client