Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
File: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft (raw, json)
Hash identifier: jHyLaqE2Q0AC3AYa/5iAVAzdigdtCKCGksjVIQoxYnw=
Subject key identifier: 21:EF:83:FD:D9:6C:E2:D2:75:71:3D:46:F4:38:74:A0:77:57:43:54
Authority key identifier: 0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A
Certificate issuer: /CN=0c5e870d31ca7019951370cb221f18f1f09fa58a
Certificate serial: 019FA82BFC716293A834E5B6655A5648145E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
Manifest number: 19D6
Signing time: Tue 28 Jul 2026 10:01:22 +0000
Manifest this update: Tue 28 Jul 2026 10:01:22 +0000
Manifest next update: Wed 29 Jul 2026 10:01:22 +0000
Files and hashes: 1: 1TwtEwBMlCxF8zqgEDzuBJ_MkQk.roa (hash: TD25ePA+FEqAqKpKYIGbiC60SkZANZcldOpqjTjdHRs=)
2: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl (hash: fUSTxuK7f0fQ1/YZhCOyG3CwWa2snXyAKVXziVpJLoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:fc:71:62:93:a8:34:e5:b6:65:5a:56:48:14:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5e870d31ca7019951370cb221f18f1f09fa58a
Validity
Not Before: Jul 28 10:01:22 2026 GMT
Not After : Jul 29 10:01:22 2026 GMT
Subject: CN=21ef83fdd96ce2d275713d46f43874a077574354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e2:e4:f0:79:eb:24:cf:f6:d9:5f:14:7e:5e:
5b:9a:ed:ca:e4:05:6c:ec:24:4b:a0:1e:56:b5:d9:
b0:14:5c:4a:ff:1a:23:24:15:32:b1:5e:76:ee:29:
63:99:e9:d3:38:c9:05:20:72:4d:d4:70:dd:54:ff:
21:9a:d1:78:e9:38:12:c9:14:2b:c4:db:63:a7:2c:
a8:e4:e5:95:74:eb:45:d4:45:b9:3b:a9:89:5f:da:
1b:a6:f8:27:59:8f:68:bb:c0:a2:32:bb:5f:4a:74:
15:be:bc:9e:bb:5e:81:fd:cd:df:5b:04:6f:44:00:
7f:bd:3e:63:66:8d:7e:91:b7:3e:bf:c6:e5:23:f5:
42:49:81:94:5b:14:d0:0d:a9:ff:76:1e:1d:a8:81:
f7:68:68:e0:5f:48:d0:3e:62:a4:19:5a:57:e7:f3:
f8:5c:28:2d:36:3d:1f:78:02:51:c6:c2:63:09:a7:
e6:f1:ac:02:09:73:ef:03:96:08:1c:14:2a:99:22:
0d:1c:f5:fa:6c:b7:8e:e8:38:01:ca:07:82:7e:c8:
e9:78:88:09:94:f1:27:7d:c5:58:a3:ee:b6:fc:34:
a9:59:ec:b1:b0:fe:d9:0c:78:8c:52:eb:d1:87:d9:
9d:97:62:4e:1e:f2:10:47:ae:8c:af:22:4e:21:87:
a6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EF:83:FD:D9:6C:E2:D2:75:71:3D:46:F4:38:74:A0:77:57:43:54
X509v3 Authority Key Identifier:
keyid:0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:73:fd:46:23:e9:1d:38:83:fb:6b:7c:0a:b0:40:20:08:7e:
ee:06:3a:7d:fb:1a:11:b3:23:8a:c3:59:fb:1c:cc:f4:f8:92:
09:fe:59:34:d5:c1:2c:f6:bf:6c:cd:5c:8c:d4:3b:c9:2c:01:
9c:50:f3:fb:aa:e2:40:9b:12:41:cb:1b:e1:dd:e6:9c:4c:38:
b7:bd:6e:13:79:7d:cf:89:46:38:62:50:03:cd:f9:3e:5c:a2:
49:35:4d:24:41:e5:17:3b:c9:a3:18:2d:56:29:9c:ee:d9:5f:
c7:37:a2:74:96:6a:6e:dc:8b:a9:21:de:de:b5:3e:20:40:17:
9f:9d:66:3c:e4:ae:e9:a7:da:62:8c:41:eb:ba:01:8d:93:1b:
ba:84:f9:f7:89:bb:fe:c6:b8:9e:19:a7:db:ec:b2:f6:76:3e:
44:b0:c3:3b:b5:79:57:db:22:29:4d:9e:8b:12:5e:81:81:2f:
d1:c1:cd:5b:c2:1c:98:1d:c3:90:98:23:58:78:72:3d:9e:bf:
34:4c:7d:46:df:4d:c0:1a:16:52:88:6b:b7:85:0d:a8:25:ee:
33:ad:58:a7:a8:ee:fc:c1:0c:1f:e1:68:fb:cd:e5:62:ea:c4:
a8:c7:ca:5e:5f:4c:7a:03:e5:e2:99:b1:e3:c9:f3:50:67:b2:
44:47:05:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:09:57 2026 by rpki-client