Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
File: DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft (raw, json)
Hash identifier: coASSgFLK59ATRPYm/EuwPbj6g9rfkDPvqxvpJmQoE8=
Subject key identifier: D0:F1:6D:ED:C3:B0:0F:36:46:ED:AE:F4:72:E9:94:EF:8A:93:3D:DD
Authority key identifier: 0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
Certificate issuer: /CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Certificate serial: 019FAA19C728E46EB6900386552077374BC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
Manifest number: 19D7
Signing time: Tue 28 Jul 2026 19:00:43 +0000
Manifest this update: Tue 28 Jul 2026 19:00:43 +0000
Manifest next update: Wed 29 Jul 2026 19:00:43 +0000
Files and hashes: 1: DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl (hash: XFs+BsXWbRhYLJOQB8st99TbmlT3FfrNbEKgbDDR+eY=)
2: xRmmdqH1-j--sEXPtnNY3Z-R5Zo.roa (hash: 3OUa7VjiPRdUyQdSMo547+vkOocCdI86key02w1U7/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:c7:28:e4:6e:b6:90:03:86:55:20:77:37:4b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Validity
Not Before: Jul 28 19:00:43 2026 GMT
Not After : Jul 29 19:00:43 2026 GMT
Subject: CN=d0f16dedc3b00f3646edaef472e994ef8a933ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:25:39:0f:42:f5:8c:ed:7a:ff:4a:30:b4:ac:
01:74:89:bb:f7:89:e7:47:c1:a7:9d:f0:6d:ba:b2:
52:c5:c8:02:c9:53:ca:b0:c6:af:3f:f4:50:53:20:
8b:e4:a8:03:b9:1c:bc:80:db:2e:c0:ea:82:33:40:
b8:69:fc:39:f8:45:19:df:88:53:52:69:76:7d:64:
6e:1d:00:18:35:57:9b:4a:86:85:17:eb:3e:08:a8:
3c:81:9a:ff:a8:ba:94:f9:95:4d:32:45:3f:6b:2c:
2c:9b:47:9f:53:b2:44:00:5f:92:87:e4:eb:94:e3:
3b:4f:cc:ba:7c:fb:46:c4:37:21:f5:db:e0:dc:4c:
6b:d5:7b:c1:71:44:bb:1c:94:c5:62:11:b4:d3:61:
37:02:0b:58:9b:fc:70:bc:fc:aa:d5:7b:05:14:4f:
2b:8a:46:e4:17:4c:ea:68:f8:e0:2b:35:d2:ff:4e:
ac:31:68:4a:31:4d:b0:11:98:0f:4d:75:30:23:e5:
d2:a9:f5:e8:e7:82:fe:e8:34:f7:13:eb:41:7e:16:
ec:b7:ef:eb:81:ca:d5:5d:3d:83:3a:50:da:50:33:
21:23:a2:57:32:d1:74:fe:64:7d:55:68:23:18:58:
f0:de:4a:06:6d:17:10:cc:2a:76:c3:f1:e0:9b:03:
30:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F1:6D:ED:C3:B0:0F:36:46:ED:AE:F4:72:E9:94:EF:8A:93:3D:DD
X509v3 Authority Key Identifier:
keyid:0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:4b:74:3d:ec:9e:b6:93:fc:ff:0f:7e:5e:ec:43:e3:b5:02:
50:8c:cc:8e:f1:c2:46:3b:0f:ca:72:cc:16:f8:58:f6:aa:32:
da:91:cf:cc:07:9c:0d:e1:a4:35:64:5d:cc:0d:b1:86:d0:6c:
bd:f4:b9:9a:e5:54:03:bb:a1:6c:65:84:07:53:92:d8:27:03:
90:7f:40:70:5f:64:2c:2a:e3:d8:01:4b:f2:ff:7a:f1:0c:14:
4b:22:09:da:3a:4d:a6:75:36:15:65:88:1c:c3:18:57:8a:a4:
3d:78:8f:1f:d1:dd:a5:e7:de:39:b9:09:d1:f3:7d:5b:69:f4:
fe:4c:56:15:48:e4:20:f6:56:94:13:c9:6b:07:75:31:58:de:
90:d8:02:26:94:10:90:13:cd:88:78:6d:8c:31:96:46:3e:6e:
80:4c:6a:88:d7:c5:a5:dc:97:df:4d:15:1f:41:88:c7:67:0f:
ed:e9:05:ad:f4:79:64:e5:cd:1f:46:60:03:2a:2d:6e:32:de:
a1:be:c9:4c:3e:8b:4a:94:9b:b2:77:70:60:2a:61:ca:5c:17:
28:65:ec:ea:b3:85:39:de:84:4a:49:fb:73:9e:fd:83:9c:c6:
94:69:63:76:7a:4d:b0:f1:da:31:ec:7a:4b:d2:16:6f:84:54:
7e:90:53:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:42:38 2026 by rpki-client