Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.mft
File: D3jqRswh1F7WEmjUqfVnMsheIVA.mft (raw, json)
Hash identifier: LaBSSoMeAsszRlXioLVhJLvYdQwy6RvIAweGIrkA9fM=
Subject key identifier: 07:DF:56:AF:C9:58:6A:D1:08:72:72:26:E4:DE:C9:53:FE:42:22:7B
Authority key identifier: 0F:78:EA:46:CC:21:D4:5E:D6:12:68:D4:A9:F5:67:32:C8:5E:21:50
Certificate issuer: /CN=0f78ea46cc21d45ed61268d4a9f56732c85e2150
Certificate serial: 019FA975D11924EEBF185F21525AD26873EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3jqRswh1F7WEmjUqfVnMsheIVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 16:01:38 +0000
Manifest this update: Tue 28 Jul 2026 16:01:38 +0000
Manifest next update: Wed 29 Jul 2026 16:01:38 +0000
Files and hashes: 1: D3jqRswh1F7WEmjUqfVnMsheIVA.crl (hash: t6ZEXAYBnWuAlUUnCvDl+3VdhRAkrxRbiC6k+MvZtZY=)
2: hFTnWGImSrItjvTZMgv5Y6qcHWI.roa (hash: pZbkXKYC4cfW4J3LrFAYotHKXZiiOIa/hV0bOys/6DA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3jqRswh1F7WEmjUqfVnMsheIVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:d1:19:24:ee:bf:18:5f:21:52:5a:d2:68:73:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f78ea46cc21d45ed61268d4a9f56732c85e2150
Validity
Not Before: Jul 28 16:01:38 2026 GMT
Not After : Jul 29 16:01:38 2026 GMT
Subject: CN=07df56afc9586ad108727226e4dec953fe42227b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2c:86:ba:ac:ab:ad:db:18:9d:9b:a2:31:7d:
77:e0:df:52:f1:2e:44:38:64:81:e2:2e:f8:60:ba:
26:13:10:fc:e6:43:56:bb:d2:71:80:23:29:2c:2f:
63:44:df:be:07:50:7c:77:86:84:2e:5a:42:13:02:
ab:c4:1c:23:53:d9:b1:5c:f1:1c:67:a0:00:5c:72:
59:8d:ce:88:02:dd:72:0c:24:b3:6c:6c:d4:3f:12:
e1:eb:8a:24:0a:96:fa:25:c7:b9:4b:8a:bc:d5:40:
73:6e:72:cf:4b:52:c9:50:d4:72:bd:44:cd:1b:77:
51:73:70:18:65:76:f6:4e:31:03:57:b4:eb:51:5b:
76:da:f8:0f:ee:f7:ed:6f:87:a4:d0:80:07:75:11:
52:f4:94:3d:30:9f:05:57:39:b0:f6:f0:a6:a6:34:
01:12:40:98:0f:56:d3:29:83:bc:b0:c7:b1:dc:47:
67:af:3e:02:10:33:70:c8:db:94:19:31:da:fe:ea:
a8:a6:8d:34:a5:28:04:8a:58:e5:01:15:99:60:79:
85:c7:b6:0e:72:fb:53:34:65:e1:af:fd:2f:b7:44:
9d:33:fe:d5:40:0d:11:4b:e4:86:11:a4:80:b0:f3:
e8:3f:51:73:ee:e1:29:b1:b1:e2:89:ea:1c:5c:c5:
22:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DF:56:AF:C9:58:6A:D1:08:72:72:26:E4:DE:C9:53:FE:42:22:7B
X509v3 Authority Key Identifier:
keyid:0F:78:EA:46:CC:21:D4:5E:D6:12:68:D4:A9:F5:67:32:C8:5E:21:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3jqRswh1F7WEmjUqfVnMsheIVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:bf:b3:d0:9e:d6:bb:1e:a6:b2:ba:1f:f8:17:dd:b9:35:b4:
b5:40:d3:9b:d3:9d:33:dd:e0:b0:a6:3a:20:6d:d3:4f:ea:ae:
4a:f8:17:94:af:be:31:98:f0:d1:6c:fb:37:a0:b4:bc:2b:5f:
af:d2:78:a4:05:5d:ea:8b:4b:8f:56:7d:a4:9d:dc:e2:33:7b:
f7:d7:d3:3a:29:96:e4:62:52:df:88:6e:4f:44:93:3e:54:11:
da:28:79:dd:9c:13:2d:c4:f4:f3:f6:79:5e:2d:33:93:5b:d1:
58:18:1e:ee:e3:49:21:e0:ca:52:02:a2:07:99:88:2b:37:6b:
39:3a:f0:8a:a7:c7:07:fe:f7:7f:26:ad:9c:31:ad:a2:b0:f5:
60:6f:89:5d:fd:6a:3e:8d:00:01:a4:14:d4:02:64:59:b1:5e:
e6:41:67:59:3a:aa:69:d5:53:a8:df:81:99:d4:e6:09:ef:34:
db:d5:13:82:64:aa:23:d1:7a:50:d9:43:46:bf:78:dd:32:db:
13:c2:35:42:70:63:b4:4f:d7:53:b7:36:bf:17:08:d5:85:84:
b3:b9:d7:b9:4a:c1:34:86:10:1a:a7:7a:40:c2:0d:c0:6e:fc:
05:0c:b5:95:d6:d7:e7:8f:2a:48:cd:7c:26:6e:09:2b:45:c0:
3f:44:28:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:40:33 2026 by rpki-client