Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
File: dBSRprEEM7mWFXVv3pMT8r4dPfA.mft (raw, json)
Hash identifier: Sb7OL8gB7aOVP8cdHFtPgC/EziJeRjUYvtq8zy0jMIs=
Subject key identifier: 19:90:0A:AD:F6:21:7B:47:27:B9:DD:BA:FF:A4:E6:67:07:46:4D:F4
Authority key identifier: 74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0
Certificate issuer: /CN=741491a6b10433b99615756fde9313f2be1d3df0
Certificate serial: 019FADBF4F7AA5D2D6B8C7CCD595B318FB28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
Manifest number: 14AF
Signing time: Wed 29 Jul 2026 12:00:23 +0000
Manifest this update: Wed 29 Jul 2026 12:00:23 +0000
Manifest next update: Thu 30 Jul 2026 12:00:23 +0000
Files and hashes: 1: ISzoHWBHuetmLQLrWc6n51rZYYg.roa (hash: 1yzmUR8v23fkpuJd9tVMCHTMq6Cr5Yk1vOljZxe5hY0=)
2: dBSRprEEM7mWFXVv3pMT8r4dPfA.crl (hash: Fqi6u3NKHYRgkjTiFa9NHQLOQ9XsD5Vox5f+5b/DtWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 12:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:bf:4f:7a:a5:d2:d6:b8:c7:cc:d5:95:b3:18:fb:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741491a6b10433b99615756fde9313f2be1d3df0
Validity
Not Before: Jul 29 12:00:23 2026 GMT
Not After : Jul 30 12:00:23 2026 GMT
Subject: CN=19900aadf6217b4727b9ddbaffa4e66707464df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:89:9c:d1:2f:27:ae:45:e5:34:e0:f7:4f:5a:
f3:e9:f2:85:b1:36:f3:08:cb:89:91:67:1e:75:3a:
4e:b8:ba:a5:91:ca:98:9c:42:e2:c3:b1:5b:39:60:
80:10:46:1f:5f:dc:31:b8:6f:71:3b:34:f9:3b:0e:
ac:1d:08:30:f5:49:1c:73:e1:ac:51:8d:ba:0f:10:
ff:60:12:f5:f4:f2:6e:6d:89:38:c9:b3:5e:e6:fe:
3d:f6:fa:22:26:c5:b2:7b:cc:88:d5:f7:18:49:48:
07:82:2a:9c:ed:6b:b8:83:dc:92:a8:55:20:b8:2b:
86:a6:b5:63:d1:2f:4e:da:f2:b0:03:f6:1e:af:4d:
1c:55:be:a7:6a:3a:68:9f:08:7d:88:c6:9a:ec:f2:
aa:f7:76:85:43:77:0d:e5:81:55:8e:55:62:fd:f8:
9e:9e:a2:0e:89:17:3d:c2:f8:f5:9b:e5:a3:7c:6d:
b3:9f:3e:d2:c0:0d:be:92:8f:9f:13:cc:3b:48:d1:
a2:dd:ef:be:c7:10:ec:35:62:25:23:8d:9e:a5:73:
a1:32:4d:92:72:c1:a7:9b:64:51:27:0b:72:0e:46:
e0:38:33:e9:d2:90:8d:6f:01:57:c1:9f:60:c7:a5:
20:ee:e2:15:ad:15:4d:5a:72:27:38:f9:84:43:ea:
43:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:90:0A:AD:F6:21:7B:47:27:B9:DD:BA:FF:A4:E6:67:07:46:4D:F4
X509v3 Authority Key Identifier:
keyid:74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:bb:18:c2:d3:3b:d3:0d:6f:14:96:45:c9:2f:b8:79:de:39:
e6:6d:ce:30:25:12:66:f7:46:35:76:71:04:ff:8f:8e:25:7b:
02:db:bd:f1:59:10:70:c6:b5:a1:6c:86:98:54:d2:46:7d:58:
73:30:d0:4f:03:4b:86:45:4b:b6:f0:57:87:f6:70:5f:3a:22:
f5:04:2c:da:99:32:d1:d4:a1:2f:1f:fc:3b:91:16:97:55:74:
a8:50:7d:02:a0:dc:3f:60:a5:75:11:5c:a3:92:40:64:f8:c6:
c0:37:19:14:f7:2d:ac:ae:5d:16:0d:82:9e:1d:d1:6c:6e:24:
f3:01:81:12:90:67:e7:5a:18:d3:b1:67:b8:40:6d:4f:d6:0d:
e7:9c:b8:54:a0:f9:42:3e:4a:0a:b8:61:2a:bb:bb:07:41:ce:
31:33:3f:40:d4:f7:75:69:02:24:f6:26:60:53:10:ee:c2:df:
97:f5:c8:8c:41:30:68:93:7a:39:3e:22:86:b4:7e:b4:76:c2:
e1:54:f2:cb:40:d5:6c:8e:4b:d0:ad:4a:b2:52:aa:cc:e0:5e:
ca:9a:87:0f:8b:d2:af:9f:39:71:1d:69:fa:a6:b0:7c:fb:eb:
12:83:5b:9e:a0:76:50:ef:1b:76:61:0a:35:cb:98:4a:de:53:
cb:21:46:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:01:26 2026 by rpki-client