Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/dRWCm38DQRu-IbGiAEmM7r9cBsA.mft
File: dRWCm38DQRu-IbGiAEmM7r9cBsA.mft (raw, json)
Hash identifier: xx+j+i1KnSxv3xYiKcB2R80scIzA/J+TTMKtNIZzsms=
Subject key identifier: 95:5A:2E:DD:20:E8:BD:7F:78:5F:5B:5B:35:00:D3:C4:3F:9C:32:BD
Authority key identifier: 75:15:82:9B:7F:03:41:1B:BE:21:B1:A2:00:49:8C:EE:BF:5C:06:C0
Certificate issuer: /CN=7515829b7f03411bbe21b1a200498ceebf5c06c0
Certificate serial: 019FAB9A61E0A02F00A42BBCB7D3AB902AB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRWCm38DQRu-IbGiAEmM7r9cBsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/dRWCm38DQRu-IbGiAEmM7r9cBsA.mft
Manifest number: 024C
Signing time: Wed 29 Jul 2026 02:00:49 +0000
Manifest this update: Wed 29 Jul 2026 02:00:49 +0000
Manifest next update: Thu 30 Jul 2026 02:00:49 +0000
Files and hashes: 1: dRWCm38DQRu-IbGiAEmM7r9cBsA.crl (hash: E14Ly45vrVPrhmYPIwRF6wyI39d9k6Bl3OzufNifmkY=)
2: xtgzbsY4RQgAHqGjGSJ0iMYk8Y4.roa (hash: z72ZDa/NMuWUT8gblQL7edLWi92ZNQzGqAeFXRe+TZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/dRWCm38DQRu-IbGiAEmM7r9cBsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/dRWCm38DQRu-IbGiAEmM7r9cBsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRWCm38DQRu-IbGiAEmM7r9cBsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:61:e0:a0:2f:00:a4:2b:bc:b7:d3:ab:90:2a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7515829b7f03411bbe21b1a200498ceebf5c06c0
Validity
Not Before: Jul 29 02:00:49 2026 GMT
Not After : Jul 30 02:00:49 2026 GMT
Subject: CN=955a2edd20e8bd7f785f5b5b3500d3c43f9c32bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a5:36:cf:7c:e0:91:40:99:ca:9d:33:9e:13:
2a:9a:d0:c8:4e:d1:4b:37:c3:59:57:50:16:9c:32:
ef:3e:3a:cf:b1:84:ab:75:34:d2:fc:10:39:83:61:
9d:17:24:93:54:b8:ef:bd:d8:0d:d3:92:99:11:b5:
ac:ec:27:7e:b2:93:9e:47:68:0b:d1:df:da:60:b3:
af:da:6b:5f:ce:d5:74:ec:cf:26:d2:aa:94:9b:7f:
61:8f:30:74:ba:9a:7b:9b:55:51:73:5a:17:38:79:
18:8c:c4:7e:6f:a9:93:ad:8f:f8:ea:16:4f:33:a3:
fb:7a:c9:8b:a5:0c:35:3c:e4:9c:81:06:a1:94:2d:
1c:b9:e6:60:2b:46:3e:cf:7c:c2:ab:89:d9:df:9b:
5e:23:eb:6a:11:e4:8d:ca:d6:9e:92:a9:bc:40:e6:
91:ba:ee:3d:6d:74:f1:3a:b6:76:03:31:72:33:01:
52:65:08:99:85:d1:42:6a:a3:2e:82:21:cb:d6:c1:
62:98:de:28:45:58:da:dd:27:d8:df:c5:66:77:2b:
9b:f7:26:9d:6b:4b:8b:53:4d:05:b5:20:e1:f8:b0:
87:35:58:b9:ae:a2:91:78:6d:2c:26:c6:aa:1e:21:
80:3c:0d:9c:59:5b:da:75:fb:7d:e1:2a:65:a0:2a:
6f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:5A:2E:DD:20:E8:BD:7F:78:5F:5B:5B:35:00:D3:C4:3F:9C:32:BD
X509v3 Authority Key Identifier:
keyid:75:15:82:9B:7F:03:41:1B:BE:21:B1:A2:00:49:8C:EE:BF:5C:06:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRWCm38DQRu-IbGiAEmM7r9cBsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/dRWCm38DQRu-IbGiAEmM7r9cBsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/dRWCm38DQRu-IbGiAEmM7r9cBsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:51:41:fc:4f:0d:68:c1:fc:24:81:09:2c:41:6a:5f:94:c6:
14:0f:cb:71:15:c1:a0:a3:3f:e2:c2:59:31:6f:ab:24:74:55:
6f:7f:ca:3d:ef:0d:cb:8c:36:5b:bf:1d:11:e8:cb:f7:7c:9a:
36:e7:be:58:a4:f8:d2:19:16:47:9c:8f:d3:fd:9e:3a:71:ae:
d7:7c:7e:ff:d2:6b:09:cc:78:36:f8:9c:59:20:56:d5:ad:b6:
a1:b5:b1:76:6c:79:03:8d:41:20:7d:ce:4a:4a:24:42:55:d1:
52:21:9c:98:a9:f2:6d:21:10:db:e2:2b:95:9e:f4:1b:d5:1a:
a7:69:64:73:50:1e:05:5a:00:87:09:d3:69:b5:72:79:6c:54:
e0:a0:c8:df:80:93:cb:19:81:13:30:0d:f8:bc:18:c1:df:d7:
e9:70:46:fe:c9:5b:79:aa:3d:05:15:e0:4c:27:13:88:b3:8b:
e4:a2:22:16:f9:1a:d3:98:63:3f:6b:b3:1b:80:79:89:f3:20:
0d:f6:03:7f:d2:bc:cf:9a:e1:68:1c:28:10:38:c8:ba:38:bf:
de:14:93:c0:fe:80:7c:81:89:ee:45:33:a7:2e:95:09:81:ac:
66:49:27:23:d7:e3:39:ad:87:89:57:17:0e:5a:c2:5d:5b:54:
5b:d2:a5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:25:37 2026 by rpki-client