Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
File: DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft (raw, json)
Hash identifier: gryrYhKvc7eFi8LS/nOm8m2F9Raqi09eZXIzY2mR4gI=
Subject key identifier: 58:C4:5C:DE:B9:F4:9C:7F:61:8B:7F:01:E2:26:8C:E8:13:0E:75:68
Authority key identifier: 0C:20:26:63:DE:85:2C:70:60:FD:EA:02:98:B4:90:D5:ED:CC:0F:24
Certificate issuer: /CN=0c202663de852c7060fdea0298b490d5edcc0f24
Certificate serial: 019FA9755982C4C74EE40A6868CE371C4DD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
Manifest number: 19DD
Signing time: Tue 28 Jul 2026 16:01:07 +0000
Manifest this update: Tue 28 Jul 2026 16:01:07 +0000
Manifest next update: Wed 29 Jul 2026 16:01:07 +0000
Files and hashes: 1: DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl (hash: AARq+Fg8s9mgSkZ+GIJ64b1gztzG+FwNJ8J5siU4yS4=)
2: eRJh73NsCl5nLTcM8L-WtjQ1i8M.roa (hash: FurWUtoK3SJ5oNGdIN9dbo+ONOIK9GXi/NLIt8LbtMY=)
3: kEe6Bn-Wm8OU0BMeJ1sgg9otE2g.roa (hash: uUTvD8lHdMsxga0kjra2N6+gIRpOiRjAnp6etvYJekA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:59:82:c4:c7:4e:e4:0a:68:68:ce:37:1c:4d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c202663de852c7060fdea0298b490d5edcc0f24
Validity
Not Before: Jul 28 16:01:07 2026 GMT
Not After : Jul 29 16:01:07 2026 GMT
Subject: CN=58c45cdeb9f49c7f618b7f01e2268ce8130e7568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4a:40:2c:52:31:96:18:4c:cf:69:06:e6:e1:
d5:94:1d:30:52:42:f0:87:29:f6:83:33:61:f4:db:
1d:55:16:19:78:e8:78:81:74:98:da:84:49:66:0d:
00:a8:2e:87:c8:28:70:5d:b2:84:05:8d:a0:20:c0:
48:01:89:5a:ec:30:55:45:c8:72:12:ca:bf:59:bc:
0d:13:d5:4c:b2:53:9f:ca:1a:20:b6:4d:15:57:34:
91:4b:fd:ff:62:25:fb:21:11:97:dd:c0:9b:c1:25:
44:3b:c3:51:b5:a7:5d:cc:1a:e4:1e:07:0a:fc:c5:
68:48:c0:08:fd:be:ac:d4:b7:0e:8f:30:c6:3e:76:
1b:c0:ca:78:9e:52:84:e0:57:c4:18:69:a9:20:ef:
e9:fb:6a:f7:47:ca:c7:b3:bf:3d:02:cd:08:cd:4d:
fb:4a:4a:9b:cb:af:a9:94:66:43:7f:d9:c8:ba:e5:
f1:2a:ee:fd:85:cd:16:d0:6a:c9:d4:43:4a:0f:3f:
53:7a:8e:e2:50:15:f8:bb:27:47:79:da:a0:36:8b:
ac:3e:84:ca:3b:c0:d1:d4:6d:dd:b2:51:61:b3:f1:
c2:cc:05:b7:50:cd:ec:bd:86:ac:f9:03:86:5a:d4:
1e:5c:53:66:6d:1a:67:3f:3d:4d:97:99:df:8d:2f:
b4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C4:5C:DE:B9:F4:9C:7F:61:8B:7F:01:E2:26:8C:E8:13:0E:75:68
X509v3 Authority Key Identifier:
keyid:0C:20:26:63:DE:85:2C:70:60:FD:EA:02:98:B4:90:D5:ED:CC:0F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:27:dc:ba:1a:de:21:5e:4f:87:2d:50:8c:c2:09:96:f4:da:
b9:45:27:65:7c:fa:5a:45:5d:63:54:e6:94:90:30:e2:60:98:
0b:24:30:09:6d:6d:f8:56:a6:5e:ea:47:0b:9c:0a:43:d8:d5:
24:b2:3a:3c:38:f1:75:04:7f:a7:71:d6:ff:98:94:a1:c0:a7:
ca:20:57:cd:5a:8c:1d:d0:01:b2:5d:a9:c3:8c:44:14:17:b5:
24:a4:34:5e:b9:e3:69:c3:16:da:56:e0:54:20:bd:3f:89:b8:
d6:be:50:88:a0:8c:09:11:25:9c:92:32:39:fe:f6:6b:9c:b0:
4a:09:a3:78:a5:ad:5a:c4:ff:86:c1:6b:c6:56:e5:96:d0:04:
16:f2:4b:18:2e:88:1c:38:13:2f:9c:99:72:2a:b6:82:a0:b6:
2a:d2:21:98:a8:fa:d1:fe:08:13:a5:5e:0c:4f:0b:2f:52:2f:
35:36:b7:37:b0:53:91:0c:6f:ef:40:03:67:0a:25:1b:1b:e4:
33:b4:9a:f5:c1:df:f5:95:a2:94:77:66:a9:db:ce:11:48:02:
76:96:23:83:da:cd:e3:48:4b:e6:72:37:44:7d:75:35:4e:7e:
5b:17:31:35:fa:60:c0:bd:b8:de:7e:7c:7a:d2:da:75:f1:78:
98:90:5b:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdVmCxMdO5ApoaM43HE3YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMjAyNjYzZGU4NTJjNzA2MGZkZWEwMjk4YjQ5MGQ1ZWRj
YzBmMjQwHhcNMjYwNzI4MTYwMTA3WhcNMjYwNzI5MTYwMTA3WjAzMTEwLwYDVQQD
Eyg1OGM0NWNkZWI5ZjQ5YzdmNjE4YjdmMDFlMjI2OGNlODEzMGU3NTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkpALFIxlhhMz2kG5uHVlB0wUkLw
hyn2gzNh9NsdVRYZeOh4gXSY2oRJZg0AqC6HyChwXbKEBY2gIMBIAYla7DBVRchy
Esq/WbwNE9VMslOfyhogtk0VVzSRS/3/YiX7IRGX3cCbwSVEO8NRtaddzBrkHgcK
/MVoSMAI/b6s1LcOjzDGPnYbwMp4nlKE4FfEGGmpIO/p+2r3R8rHs789As0IzU37
Skqby6+plGZDf9nIuuXxKu79hc0W0GrJ1ENKDz9Teo7iUBX4uydHedqgNousPoTK
O8DR1G3dslFhs/HCzAW3UM3svYas+QOGWtQeXFNmbRpnPz1Nl5nfjS+0kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFjEXN659Jx/YYt/AeImjOgTDnVoMB8GA1UdIwQY
MBaAFAwgJmPehSxwYP3qApi0kNXtzA8kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRENBbVk5NkZMSEJnX2VvQ21MU1ExZTNNRHlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wOTEwZTYtYzA3NC00MGQwLWI3ODkt
YTE3ODA0NDM5ODk1LzEvRENBbVk5NkZMSEJnX2VvQ21MU1ExZTNNRHlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8wOTEwZTYtYzA3NC00MGQwLWI3ODktYTE3ODA0NDM5ODk1
LzEvRENBbVk5NkZMSEJnX2VvQ21MU1ExZTNNRHlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABifcuhre
IV5Phy1QjMIJlvTauUUnZXz6WkVdY1TmlJAw4mCYCyQwCW1t+FamXupHC5wKQ9jV
JLI6PDjxdQR/p3HW/5iUocCnyiBXzVqMHdABsl2pw4xEFBe1JKQ0XrnjacMW2lbg
VCC9P4m41r5QiKCMCRElnJIyOf72a5ywSgmjeKWtWsT/hsFrxlblltAEFvJLGC6I
HDgTL5yZciq2gqC2KtIhmKj60f4IE6VeDE8LL1IvNTa3N7BTkQxv70ADZwolGxvk
M7Sa9cHf9ZWilHdmqdvOEUgCdpYjg9rN40hL5nI3RH11NU5+WxcxNfpgwL243n58
etLadfF4mJBbNw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:40:53 2026 by rpki-client