Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
File: dxvOKaNsveiYrABwfblRQ_hqeSI.mft (raw, json)
Hash identifier: lsSvGNqXmNTXGui4bv8T5kKFGnsU+u/apMz1I6YQxLI=
Subject key identifier: C7:FB:A1:76:8A:15:48:D0:F6:45:AA:33:0F:6A:77:B7:0F:F3:65:3B
Authority key identifier: 77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22
Certificate issuer: /CN=771bce29a36cbde898ac00707db95143f86a7922
Certificate serial: 019FAA8881E859EC3C0ED54F912F52E0B7AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
Manifest number: 11B2
Signing time: Tue 28 Jul 2026 21:01:40 +0000
Manifest this update: Tue 28 Jul 2026 21:01:40 +0000
Manifest next update: Wed 29 Jul 2026 21:01:40 +0000
Files and hashes: 1: dxvOKaNsveiYrABwfblRQ_hqeSI.crl (hash: KdMLwqrqUe9YoUBC3P5spcNDnXuhHnss5RUw5xMLR5Y=)
2: qZ8aQgjdabGbDv-i6H620T5YhwY.roa (hash: UdXrLbOlQenxMN6hG/0L/eJWuifEwthlbNrK+9DhFyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:81:e8:59:ec:3c:0e:d5:4f:91:2f:52:e0:b7:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771bce29a36cbde898ac00707db95143f86a7922
Validity
Not Before: Jul 28 21:01:40 2026 GMT
Not After : Jul 29 21:01:40 2026 GMT
Subject: CN=c7fba1768a1548d0f645aa330f6a77b70ff3653b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b3:a6:a6:3a:71:f5:0b:36:5b:e6:fc:9c:1b:
5c:b7:af:37:01:a0:99:3f:ad:50:4e:f3:1d:be:79:
50:d1:c4:d8:5d:46:4a:d6:f7:83:4f:70:c0:87:48:
0f:fc:c9:a6:0e:c2:55:9d:b5:ef:78:a0:0a:02:99:
d5:b5:5b:84:16:29:84:de:5a:5c:83:63:a6:39:01:
6d:88:95:60:2e:e6:46:3c:0d:a3:32:47:f8:0d:c7:
e0:29:3d:56:95:9a:ad:ac:15:c2:d2:4b:dc:5f:78:
31:c1:ff:74:66:ae:44:58:d4:4a:23:2e:38:ab:2d:
83:8a:5b:f5:e9:e7:f9:f4:06:5d:59:aa:91:d2:fc:
a9:42:40:0b:08:28:0f:dc:b1:a0:79:53:c9:0b:26:
f4:69:6c:92:76:a7:60:dc:0a:db:ea:25:d8:3a:0b:
61:9e:14:ba:54:1d:14:80:26:d1:ec:ed:b0:8e:ba:
01:af:70:a5:3a:1e:5f:01:98:d9:9c:a3:60:f2:f1:
b0:9c:60:15:85:36:3c:b7:64:ea:c7:24:b3:52:09:
16:8d:ed:2d:7f:ac:4a:80:9f:11:78:57:6c:66:00:
ca:5a:a5:e8:a9:cb:b3:45:ac:ca:dd:a9:95:72:7e:
f1:97:26:ce:f5:4a:c9:ff:ed:a9:db:a9:dc:b6:b9:
36:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:FB:A1:76:8A:15:48:D0:F6:45:AA:33:0F:6A:77:B7:0F:F3:65:3B
X509v3 Authority Key Identifier:
keyid:77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:64:a9:70:5a:2f:75:35:c1:5e:94:c2:1f:87:d9:6e:06:eb:
f8:c7:14:2f:eb:ac:ba:76:f6:b2:26:d9:09:ee:64:ab:5a:01:
c1:56:08:02:81:1a:d1:7a:f2:d3:6a:00:e7:a7:0f:e4:89:ae:
e2:86:fb:88:d6:f9:e7:7e:16:ff:98:16:69:1a:d0:ae:12:bc:
41:df:4e:d9:c0:50:4d:c5:50:43:e1:59:89:7f:91:f0:7a:d0:
aa:35:61:1f:3f:8f:0e:b7:70:ab:27:21:f4:70:7f:37:06:4c:
a7:4b:87:8f:84:97:db:80:c3:58:04:37:c2:b2:03:06:de:a7:
20:ab:1f:85:d0:84:c6:4d:f2:c9:22:70:62:a8:0a:aa:5a:69:
60:99:ce:54:05:17:a3:1a:a3:3b:8b:6d:db:42:da:35:6e:8f:
6b:05:de:b1:45:d6:06:52:73:37:85:ff:6d:e5:1b:ff:99:6e:
31:e1:6a:29:98:20:84:73:a7:1e:4e:f8:f6:14:b2:32:0c:f5:
98:6a:be:b3:fe:19:c7:fb:21:55:9b:3f:f6:cf:e6:79:b8:64:
9c:ad:57:3b:cc:19:74:f0:a0:fe:bb:f2:54:b4:23:54:18:2b:
c5:59:a8:53:db:1a:48:44:31:84:86:f3:9b:d9:d0:2f:24:64:
7d:e0:5a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:53:57 2026 by rpki-client