Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
File: dh55HzroOuiyY-PNtoKjR1tXB98.mft (raw, json)
Hash identifier: 87uTkywelxw6+ckVUwfVEcZ820CK65a2sgv1fABtgc8=
Subject key identifier: 05:CE:18:0A:65:12:7E:89:50:D4:E8:AF:27:2F:82:9C:2F:16:0F:1F
Authority key identifier: 76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
Certificate issuer: /CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
Certificate serial: 019FAB2C845F255F90E1A44AD668177C092B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
Manifest number: 19D3
Signing time: Wed 29 Jul 2026 00:00:49 +0000
Manifest this update: Wed 29 Jul 2026 00:00:49 +0000
Manifest next update: Thu 30 Jul 2026 00:00:49 +0000
Files and hashes: 1: HeTj1rlCLTtvBYW1onGZ7LauPQY.roa (hash: weFl57AveWg1aEff8nmfajyotthwbCTL0U0EBzxk8Zk=)
2: dh55HzroOuiyY-PNtoKjR1tXB98.crl (hash: Svgm4aEs9N5bpkrlCAJMKj1Nl40Ks0MTx3mHqbrkASA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:84:5f:25:5f:90:e1:a4:4a:d6:68:17:7c:09:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
Validity
Not Before: Jul 29 00:00:49 2026 GMT
Not After : Jul 30 00:00:49 2026 GMT
Subject: CN=05ce180a65127e8950d4e8af272f829c2f160f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b0:50:92:3e:8c:b9:da:c2:5a:b9:3a:69:12:
4d:0f:65:38:dd:57:c6:9c:69:2c:d8:e8:0a:9f:78:
85:9d:de:8c:c8:a2:ef:e0:1c:43:cb:bc:a0:9d:7b:
8b:48:b7:fc:69:73:de:b8:29:d3:97:ec:6d:76:e8:
21:50:82:fe:38:21:b6:65:ea:00:fa:a2:b9:82:2e:
16:0f:06:43:4d:84:a8:8b:9d:56:2a:ce:4d:c7:7a:
e8:45:3c:b7:8f:20:c6:ff:f3:d7:53:eb:bd:f7:b4:
6e:20:61:b8:67:a4:28:d8:6d:a2:4b:0d:23:2f:3a:
68:b2:2d:ff:18:05:99:42:ef:ac:57:da:12:4f:13:
18:bf:e1:31:f9:79:86:b9:f6:ad:99:ea:c9:02:90:
31:6e:ee:c2:11:8d:b4:1b:d3:02:0d:d6:67:e1:9d:
a5:8e:61:07:bb:97:fb:da:d4:30:13:9e:11:a6:b8:
3b:5c:fa:fc:c8:cd:86:8e:86:73:99:93:62:d0:cd:
c7:3a:87:e4:39:c3:4d:8d:6f:ac:3c:bb:12:14:31:
cb:8b:f3:08:92:e9:dc:8b:ce:2f:7a:37:98:49:d3:
b8:e2:9a:07:a6:6a:9e:25:ce:9f:ba:80:56:1f:f9:
12:fa:ab:e8:9a:b0:26:79:19:8d:85:6f:b2:f7:53:
cf:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CE:18:0A:65:12:7E:89:50:D4:E8:AF:27:2F:82:9C:2F:16:0F:1F
X509v3 Authority Key Identifier:
keyid:76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b3:70:c2:ac:c7:04:1f:e4:16:a5:7b:26:9b:b0:a4:a6:64:
06:16:27:ac:3b:47:f8:fc:ed:90:72:7a:86:ae:4b:80:a0:82:
58:a3:4c:da:83:f5:fb:90:ab:91:d5:d8:c5:58:fd:71:2f:08:
f9:49:d8:1d:06:d9:8b:1a:1d:42:bb:93:61:1c:f2:e7:76:ea:
6d:3d:ef:d5:2c:12:c0:5a:78:85:9f:07:a5:b2:b2:39:54:56:
ed:62:5f:6a:a9:f9:6c:51:0f:4c:b6:0f:8f:a2:26:12:00:58:
34:bf:9e:2f:5f:21:09:63:75:0e:2e:f9:8d:1d:15:7b:05:77:
d6:0f:f5:c9:72:13:88:3b:c0:67:18:12:76:42:9e:64:29:00:
b1:47:3c:7f:b6:1e:f2:66:e9:de:d2:5b:ed:9c:f2:7f:90:8c:
51:8b:1b:32:8b:79:ea:55:33:10:77:0b:01:bc:27:ac:7c:03:
e1:ef:40:08:8b:a6:60:7d:e8:44:9c:78:51:ad:df:0a:e9:35:
22:77:1a:c9:f0:47:b2:a7:6f:44:f0:31:5c:6b:08:cb:ce:e9:
e8:a3:24:04:2f:bb:23:a3:c7:49:b9:a4:ab:5f:d2:58:08:8a:
fb:53:80:fe:de:c2:98:46:cb:b5:65:e1:43:1f:48:06:22:4f:
aa:21:6c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:21:33 2026 by rpki-client