Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
File: DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft (raw, json)
Hash identifier: eHwsAy0f7TbxUgc8ohm+f35b0EA5p3k+Cj4+HwMkiL8=
Subject key identifier: 43:86:20:28:BA:CA:A1:A5:E3:B4:5C:96:2E:86:66:70:39:F1:B7:2B
Authority key identifier: 0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
Certificate issuer: /CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Certificate serial: 019FAABEA78E7471B59560EBF9DE6D9303D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
Manifest number: 18C5
Signing time: Tue 28 Jul 2026 22:00:49 +0000
Manifest this update: Tue 28 Jul 2026 22:00:49 +0000
Manifest next update: Wed 29 Jul 2026 22:00:49 +0000
Files and hashes: 1: 2lfnmN1-dLZH09vmQWL0x_KLc8Y.roa (hash: JmmqwM4dV5ZCDyqAq/Au9vdb5ogccNfE+4IrV1SqD54=)
2: DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl (hash: W5RqI8wxPOQmyK62QKnkQk0/fNxndFx8EH8fAyoBzx8=)
3: cpBLfVVbG2Bg4TA77UzT5VjhgRE.roa (hash: N0d6jFAymHdRViLXYwxHMPIvLpjH51TdzFY5Ek5D56g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:a7:8e:74:71:b5:95:60:eb:f9:de:6d:93:03:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Validity
Not Before: Jul 28 22:00:49 2026 GMT
Not After : Jul 29 22:00:49 2026 GMT
Subject: CN=43862028bacaa1a5e3b45c962e86667039f1b72b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:81:65:e6:40:fa:5c:e4:5c:34:10:1e:46:ec:
03:f7:b2:1a:5a:83:47:e7:f5:17:a4:be:52:63:30:
cb:f8:76:a8:ad:3d:a5:82:32:2c:dd:8a:56:33:74:
23:f8:83:63:85:ae:e7:08:55:a7:88:48:b1:06:1f:
bc:eb:af:7c:11:0e:9c:d4:0c:23:bc:40:b8:eb:7f:
9d:2f:55:9e:7c:c3:31:90:dc:a5:38:a3:2f:80:10:
f5:dc:41:9e:32:e9:b7:cc:b6:16:36:4a:78:79:3f:
32:87:6a:22:99:ce:f7:77:60:50:7e:8c:f9:e3:dc:
1d:39:9a:00:2d:01:54:8e:98:78:de:d2:20:ac:4c:
e2:d1:64:4f:0a:c0:8c:76:eb:31:d0:7e:54:38:3d:
bc:e2:f9:c4:36:28:66:52:6f:d0:cb:ba:57:8f:bb:
ad:ef:c1:69:81:bc:f0:05:11:d2:e5:26:f6:f0:76:
58:7a:16:fc:04:51:61:d3:ec:4a:9a:5e:da:36:1e:
c2:d7:16:c9:c9:1b:74:b1:11:73:f6:07:2d:03:c2:
0f:0c:7f:27:27:99:53:83:b4:dd:26:51:4f:b1:c6:
f7:25:05:f7:bb:b2:95:e4:86:d4:82:6a:96:44:aa:
95:4b:5d:b0:70:27:c0:79:e9:be:e8:e2:6f:98:eb:
28:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:86:20:28:BA:CA:A1:A5:E3:B4:5C:96:2E:86:66:70:39:F1:B7:2B
X509v3 Authority Key Identifier:
keyid:0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:61:bb:97:b3:ed:78:34:a9:61:30:d3:41:be:20:fa:c5:b5:
3e:62:96:c4:0c:90:a4:c8:f7:51:52:71:09:6b:e1:2f:4b:6e:
2e:22:a8:94:6f:44:30:c2:2a:0f:5f:4c:68:68:70:bc:fe:99:
c1:f6:9f:73:ef:13:4e:56:ea:f3:b6:2e:e6:f3:60:00:cb:8f:
a3:22:23:0b:34:9d:b9:70:2f:0b:25:7e:7a:f9:8c:a7:82:c3:
36:a1:3e:3b:6d:24:03:bd:3b:51:74:3a:be:b8:0a:c6:1c:ec:
3c:9e:ca:3e:5e:38:e1:6f:11:df:89:33:5a:bb:fc:03:56:af:
69:1c:10:fc:bb:c8:b1:cd:08:6b:ad:49:cf:a1:e5:19:c3:93:
89:1a:08:40:1d:a9:f4:8b:6a:4c:ea:34:8a:e3:77:64:ce:22:
00:88:d1:06:b1:5b:a5:9b:13:3f:42:7c:26:17:7e:08:5a:9b:
aa:0c:61:b1:e4:f8:2c:c7:f3:8b:42:65:9d:5d:40:ee:ac:e8:
3f:a9:bb:c4:3c:5f:7e:48:5a:5f:d8:fa:99:ea:b0:00:a9:ac:
65:68:eb:ab:03:cb:f1:fb:65:ff:a5:26:92:ca:0f:34:3a:87:
ed:e7:68:a8:9e:e3:e0:e6:0a:c2:48:ba:dd:14:8e:13:fc:12:
ba:a7:b7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:53:46 2026 by rpki-client