Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
File: DJvBsU8NllP1FOwWd3G3dVmsY8w.mft (raw, json)
Hash identifier: hCZt76R3oV5t2v8bl6ayaLprQMHC2iArupF8i+h6faA=
Subject key identifier: EE:63:A6:05:9C:A2:48:6F:D4:97:94:27:16:71:85:4C:30:B2:24:7C
Authority key identifier: 0C:9B:C1:B1:4F:0D:96:53:F5:14:EC:16:77:71:B7:75:59:AC:63:CC
Certificate issuer: /CN=0c9bc1b14f0d9653f514ec167771b77559ac63cc
Certificate serial: 019FAAF620F291D3546D5C8C9ADE49C9F58B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 23:01:24 +0000
Manifest this update: Tue 28 Jul 2026 23:01:24 +0000
Manifest next update: Wed 29 Jul 2026 23:01:24 +0000
Files and hashes: 1: DJvBsU8NllP1FOwWd3G3dVmsY8w.crl (hash: 1FGQAyibRD5GFk76UT46Mt8Z5aIHUVhrskNqonq/IIU=)
2: USkUk1O_55dbtUL8NgX3D9MuJlk.roa (hash: l0RD4Yub4vls7PSxviu1JxH4TvO1gXOCiQ61YNO4X7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f6:20:f2:91:d3:54:6d:5c:8c:9a:de:49:c9:f5:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9bc1b14f0d9653f514ec167771b77559ac63cc
Validity
Not Before: Jul 28 23:01:24 2026 GMT
Not After : Jul 29 23:01:24 2026 GMT
Subject: CN=ee63a6059ca2486fd49794271671854c30b2247c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:97:35:fd:ac:6c:f7:86:c1:48:e5:c9:c7:f5:
3a:4c:de:00:55:88:00:48:5e:5b:81:14:d2:94:ae:
f8:ae:01:b8:81:6e:58:bd:b2:ae:01:ed:2a:0a:97:
40:b8:06:28:4f:07:d3:07:84:ff:5b:51:19:8a:d7:
e0:32:df:c0:20:78:14:53:45:be:b4:73:c6:4b:70:
61:31:ff:15:eb:4c:bf:9f:b9:39:b7:3b:dc:3f:d3:
25:f0:ef:ae:99:4c:43:05:83:9c:07:a9:70:6e:cb:
68:2f:76:2d:34:bc:6d:1c:82:5c:03:ed:82:9e:0c:
09:e3:00:1b:46:40:2a:74:7d:c4:cb:51:f1:0c:bb:
f6:d3:38:eb:b4:22:16:d7:87:4e:b2:cb:0d:a1:51:
82:67:89:c2:78:fa:a5:28:f5:f5:8e:60:6c:de:cf:
c9:1b:cf:98:3a:d5:74:9d:d6:f0:a1:89:5a:ce:f6:
7b:35:18:60:98:07:34:6d:12:36:65:b7:e9:c1:56:
f7:17:07:3b:aa:2f:4f:39:fb:57:0b:da:de:f8:69:
6b:56:9f:5f:60:c7:5e:dd:bd:88:b7:8e:28:99:5a:
ab:b3:50:47:51:31:c8:59:24:f3:f0:67:90:10:b8:
94:d9:c8:50:2e:dc:14:49:b7:70:73:a9:31:a8:c7:
25:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:63:A6:05:9C:A2:48:6F:D4:97:94:27:16:71:85:4C:30:B2:24:7C
X509v3 Authority Key Identifier:
keyid:0C:9B:C1:B1:4F:0D:96:53:F5:14:EC:16:77:71:B7:75:59:AC:63:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:0f:78:20:3f:3f:d3:94:4b:02:49:f9:f0:b2:aa:0c:11:85:
3e:66:e0:38:b4:91:83:de:1a:22:64:9f:68:83:02:a7:42:9a:
0d:17:6e:d3:e3:11:3d:a0:f0:2c:95:0a:80:e5:db:be:bc:99:
c8:59:75:de:eb:00:49:7b:8e:4a:d1:70:53:82:fd:45:38:47:
f8:cc:03:60:dd:ed:66:03:42:e6:33:0e:af:d1:54:37:ad:b9:
c7:56:d6:09:ac:5b:79:49:1c:d3:b6:ea:ee:c6:12:4f:1e:db:
86:7e:67:f4:a4:be:46:f3:7c:e2:3e:ed:71:c7:fa:55:c1:e1:
8c:4a:30:72:f1:60:3a:75:02:96:eb:c5:9d:44:ce:2c:fa:65:
52:66:77:28:d8:d0:72:6c:57:d0:b6:8b:34:92:37:89:ab:8f:
7b:ee:4c:16:50:b4:a0:bf:59:02:93:56:74:05:90:d7:94:4d:
eb:a1:ff:3f:61:48:fd:37:13:6d:45:de:ec:94:19:aa:3b:ed:
a5:da:d9:eb:57:e2:3b:89:40:03:6a:22:a5:26:0e:ce:14:36:
62:71:07:93:7e:bb:d8:e0:88:b2:96:c3:da:a6:fb:9a:15:87:
ca:59:21:ad:77:2d:68:05:5a:3d:0f:73:a5:73:52:86:f4:40:
b6:ff:b0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:14:32 2026 by rpki-client