Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
File: dBc29lciH8E0MWMjsHQFhanBsgw.mft (raw, json)
Hash identifier: R7O2b3tamhPEzTstDt3sZ09fZ+9li87hfs/6LDhKUX4=
Subject key identifier: 49:63:4B:53:0D:64:C0:C0:C3:82:DF:93:CC:34:0A:C5:C8:4A:C8:ED
Authority key identifier: 74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
Certificate issuer: /CN=741736f657221fc134316323b0740585a9c1b20c
Certificate serial: 019FAC7691AE5BB62AC3ED8449FF321CD28D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
Manifest number: 19D7
Signing time: Wed 29 Jul 2026 06:01:19 +0000
Manifest this update: Wed 29 Jul 2026 06:01:19 +0000
Manifest next update: Thu 30 Jul 2026 06:01:19 +0000
Files and hashes: 1: 3D6ST7VPwU1ruJHTqcORchHTAiE.roa (hash: NASIK7MkKYD9o//4ZODXB3XY9C+uWrjRQevxzYiJxB0=)
2: FsryNOkpTRhYXYiVpfSErxkdF5I.roa (hash: 7TnmsucFlZLELXfMUZN9SGlpQMX8+cF0eWaXdVfCFOM=)
3: dBc29lciH8E0MWMjsHQFhanBsgw.crl (hash: M/ugLDPehsK+MFfymwp4mG9lUYpsiF1RzdD39yueO9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:91:ae:5b:b6:2a:c3:ed:84:49:ff:32:1c:d2:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741736f657221fc134316323b0740585a9c1b20c
Validity
Not Before: Jul 29 06:01:19 2026 GMT
Not After : Jul 30 06:01:19 2026 GMT
Subject: CN=49634b530d64c0c0c382df93cc340ac5c84ac8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:65:c1:59:34:fa:f8:fc:1b:d8:25:06:2d:50:
3a:4e:06:03:fe:34:a5:51:65:b5:de:e6:39:59:e0:
77:8f:35:24:d2:f9:27:01:2e:a6:b6:14:9c:cd:df:
0a:df:6c:1d:5a:75:9c:6b:61:8f:21:8f:37:13:f0:
e4:00:9d:ef:c3:3e:e7:01:e7:61:bb:4e:2d:69:b6:
e3:1d:8b:cd:4a:77:c7:c6:11:66:ce:71:27:96:0b:
79:07:5c:af:4e:bb:97:90:1a:d5:3c:e1:68:6b:6c:
5e:38:48:a9:10:42:9d:17:a2:8b:3d:25:9d:b1:b5:
48:28:de:a6:82:46:18:4f:45:f2:e3:cf:5a:5a:53:
11:c1:68:fe:f8:b3:14:c4:3a:cd:03:54:b2:d1:30:
1d:c8:49:51:2c:7b:74:19:5d:ef:e4:e4:2d:02:f6:
a1:da:5e:da:fb:3d:56:4d:96:e6:01:11:7d:45:f4:
c1:9a:31:32:ba:4c:35:55:02:76:cf:b0:78:c7:af:
24:8b:b2:66:02:d1:90:58:02:1b:cb:56:d1:7a:38:
b9:58:51:89:dd:7f:ca:03:00:2e:03:0d:30:ec:b3:
4b:f8:a6:3f:5f:3a:86:76:54:05:54:b2:48:ed:03:
28:a1:63:f9:95:eb:e0:ce:36:e6:a3:d8:5a:ee:e0:
0c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:63:4B:53:0D:64:C0:C0:C3:82:DF:93:CC:34:0A:C5:C8:4A:C8:ED
X509v3 Authority Key Identifier:
keyid:74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:b1:7a:b2:59:eb:5b:e6:c0:05:3a:33:50:ee:7c:dd:d5:7a:
8f:72:b0:9e:4f:a7:8e:b2:ee:90:6e:ab:58:6a:3c:bd:90:1b:
f6:37:c5:41:cf:15:ac:cb:0d:9c:50:23:a0:43:53:6b:3c:e2:
a5:e2:f4:b8:49:ad:20:4f:1d:d2:67:ec:da:2a:35:6e:3f:e7:
2c:83:28:48:b4:eb:5a:6b:2f:6f:b7:74:f8:dd:19:02:62:35:
8a:58:b3:37:38:11:41:74:0d:ec:5b:3c:99:74:75:15:c6:99:
34:69:9c:16:3b:6b:e8:73:ac:78:db:86:58:34:5f:aa:8e:e7:
9d:16:61:44:04:80:fa:7b:5a:b8:b3:de:52:dc:6d:8a:44:6d:
37:92:2d:d2:03:d2:ec:28:9c:b6:9e:e1:9c:eb:cd:79:ec:dc:
f4:24:39:ba:ae:df:68:37:1f:53:e6:f7:0c:77:3a:64:22:0a:
10:e4:9e:34:03:ea:7c:48:71:6a:c3:94:b4:2c:84:a4:3e:b2:
a0:f5:b6:b7:ed:f2:f2:07:a1:59:32:d7:51:bd:2d:6f:e5:d9:
e6:6b:81:b6:d2:0b:2c:1a:00:f8:d2:40:1f:6e:74:05:1c:ff:
cd:0d:8c:ac:21:89:f4:52:01:b3:30:83:ea:a1:de:da:53:2b:
a1:80:47:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdpGuW7Yqw+2ESf8yHNKNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MTczNmY2NTcyMjFmYzEzNDMxNjMyM2IwNzQwNTg1YTlj
MWIyMGMwHhcNMjYwNzI5MDYwMTE5WhcNMjYwNzMwMDYwMTE5WjAzMTEwLwYDVQQD
Eyg0OTYzNGI1MzBkNjRjMGMwYzM4MmRmOTNjYzM0MGFjNWM4NGFjOGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGXBWTT6+Pwb2CUGLVA6TgYD/jSl
UWW13uY5WeB3jzUk0vknAS6mthSczd8K32wdWnWca2GPIY83E/DkAJ3vwz7nAedh
u04tabbjHYvNSnfHxhFmznEnlgt5B1yvTruXkBrVPOFoa2xeOEipEEKdF6KLPSWd
sbVIKN6mgkYYT0Xy489aWlMRwWj++LMUxDrNA1Sy0TAdyElRLHt0GV3v5OQtAvah
2l7a+z1WTZbmARF9RfTBmjEyukw1VQJ2z7B4x68ki7JmAtGQWAIby1bReji5WFGJ
3X/KAwAuAw0w7LNL+KY/XzqGdlQFVLJI7QMooWP5levgzjbmo9ha7uAMUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEljS1MNZMDAw4Lfk8w0CsXISsjtMB8GA1UdIwQY
MBaAFHQXNvZXIh/BNDFjI7B0BYWpwbIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEJjMjlsY2lIOEUwTVdNanNIUUZoYW5Cc2d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iMzE0Y2ItNjJiNS00ZmE2LWI0NDUt
Y2JmYmE0NTlkOGY3LzEvZEJjMjlsY2lIOEUwTVdNanNIUUZoYW5Cc2d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9iMzE0Y2ItNjJiNS00ZmE2LWI0NDUtY2JmYmE0NTlkOGY3
LzEvZEJjMjlsY2lIOEUwTVdNanNIUUZoYW5Cc2d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvLF6slnr
W+bABTozUO583dV6j3Kwnk+njrLukG6rWGo8vZAb9jfFQc8VrMsNnFAjoENTazzi
peL0uEmtIE8d0mfs2io1bj/nLIMoSLTrWmsvb7d0+N0ZAmI1ilizNzgRQXQN7Fs8
mXR1FcaZNGmcFjtr6HOseNuGWDRfqo7nnRZhRASA+ntauLPeUtxtikRtN5It0gPS
7Cictp7hnOvNeezc9CQ5uq7faDcfU+b3DHc6ZCIKEOSeNAPqfEhxasOUtCyEpD6y
oPW2t+3y8gehWTLXUb0tb+XZ5muBttILLBoA+NJAH250BRz/zQ2MrCGJ9FIBszCD
6qHe2lMroYBHPw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:26:30 2026 by rpki-client