Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
File: dRSDZVs1orhHGF9onI_RYB3McYc.mft (raw, json)
Hash identifier: ULVxYS7+CE7T/Djxo3r2bwMQYIIUotHET+y7Ko9fzNo=
Subject key identifier: B3:B9:5B:C3:65:13:E1:CB:B4:58:AD:7E:7C:50:1E:6E:0F:24:E8:8A
Authority key identifier: 75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87
Certificate issuer: /CN=751483655b35a2b847185f689c8fd1601dcc7187
Certificate serial: 019FA82BB53F6CC22A0B432F5E5AB6374F01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 10:01:04 +0000
Manifest this update: Tue 28 Jul 2026 10:01:04 +0000
Manifest next update: Wed 29 Jul 2026 10:01:04 +0000
Files and hashes: 1: as_rlXqJ-9X5yyFioptlwk_3ywE.asa (hash: WOqxDpfG0009xOfBOkYF5jMYghhxHEkdiXrFFzH+iVs=)
2: dRSDZVs1orhHGF9onI_RYB3McYc.crl (hash: 0ybVvbCFKqvqgMxsIjT6CjoMvWiP4awjFcn2xcWLMSw=)
3: mCi8IXM78zEe8k6a11x1wQYJJHk.roa (hash: XXRc/LdihJuiCQ6i4r0S3QErFt5j7/TSAtBg4nnm1BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:b5:3f:6c:c2:2a:0b:43:2f:5e:5a:b6:37:4f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=751483655b35a2b847185f689c8fd1601dcc7187
Validity
Not Before: Jul 28 10:01:04 2026 GMT
Not After : Jul 29 10:01:04 2026 GMT
Subject: CN=b3b95bc36513e1cbb458ad7e7c501e6e0f24e88a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dc:8c:9b:92:0a:80:96:37:4c:72:1a:9c:67:
f0:53:a8:89:a5:2f:c5:4e:5e:54:b6:d2:8c:b6:d0:
08:3b:ad:4a:cf:ce:c9:f8:8c:c5:9c:5f:fb:33:4a:
00:e8:01:26:99:60:92:cf:7e:50:66:2e:d1:f3:3e:
76:29:f6:d4:25:af:77:bd:54:6e:f0:89:2d:b8:d6:
c7:13:26:49:87:bd:6f:ac:a6:1d:31:70:f9:4c:37:
d5:8d:02:2c:e7:07:a3:66:25:a8:a2:e0:f7:88:8f:
9d:41:90:6f:ec:33:47:8d:d1:7d:17:04:62:dc:23:
76:c0:d0:05:07:93:b5:28:f7:83:2e:36:ed:85:ba:
0d:a4:1a:ec:f6:65:07:cd:75:93:4f:3b:d3:7c:58:
5c:c7:5c:63:a2:ec:69:d2:a4:4e:c2:59:12:07:aa:
85:19:b4:2b:00:51:79:1c:07:94:9c:a3:78:70:39:
6a:02:62:17:53:d7:97:04:cf:6e:76:c0:8c:5e:a5:
a2:3e:5c:96:87:1e:1a:67:4a:01:dd:23:b3:2a:6c:
ae:bc:ae:79:01:bc:99:6d:18:f7:fa:14:65:2b:52:
e7:76:01:22:21:b6:d7:6c:14:3d:58:66:f2:7a:b5:
03:bb:ef:f0:31:3f:9d:dd:db:43:bb:0c:48:ec:0a:
79:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B9:5B:C3:65:13:E1:CB:B4:58:AD:7E:7C:50:1E:6E:0F:24:E8:8A
X509v3 Authority Key Identifier:
keyid:75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e0:0d:47:c5:5a:ab:cc:1a:fe:68:22:90:84:19:bc:4f:99:
37:8e:45:db:85:eb:1d:78:fd:e6:c4:2e:36:4d:a9:0a:76:10:
43:05:87:97:06:9e:d2:1f:28:89:25:13:d9:39:75:43:cb:42:
99:92:61:5b:da:a3:68:38:91:fa:15:52:81:5e:e5:4d:25:14:
ba:1a:5b:c3:1a:9c:b6:17:2b:90:bc:32:98:da:b6:c7:52:91:
f5:46:de:e9:bb:c7:71:2f:bd:54:0c:bc:dc:61:1a:05:37:55:
a5:70:5e:13:fa:02:f7:52:78:10:e9:f2:6e:c8:5c:a8:12:23:
30:16:ac:b2:ae:b1:0b:a7:3d:57:a3:83:f2:2c:a1:1b:7f:e8:
95:e2:86:56:88:bb:7d:ed:51:06:f5:60:9a:d2:d9:e8:41:1b:
00:de:3a:b4:ad:e9:53:7d:b3:e3:df:e4:c1:42:00:f6:92:ff:
3f:25:5c:12:b6:5e:42:fb:61:74:ad:aa:6c:a5:bc:6c:ce:1c:
73:c6:7c:9c:b0:ae:c8:8a:a8:9b:1c:6d:d5:23:b2:92:c5:7d:
1a:57:6b:1e:06:cd:65:8f:1f:70:11:ae:d1:4c:2c:16:97:12:
5e:df:16:3f:41:02:68:0b:23:7c:54:b2:0a:92:41:bc:b0:b4:
b4:a7:cb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:05:30 2026 by rpki-client