Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
File: DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft (raw, json)
Hash identifier: dckOy7ORbpZafmE7CE/60ZBspNXH3e+FwtDgllxn7bQ=
Subject key identifier: 8F:7B:94:D9:1F:A4:81:5F:D5:33:56:67:FA:9E:28:C1:1A:4B:E3:76
Authority key identifier: 0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4
Certificate issuer: /CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4
Certificate serial: 019FA907BAC7BBD7EBB417D667707E8ED252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
Manifest number: 10B8
Signing time: Tue 28 Jul 2026 14:01:23 +0000
Manifest this update: Tue 28 Jul 2026 14:01:23 +0000
Manifest next update: Wed 29 Jul 2026 14:01:23 +0000
Files and hashes: 1: DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl (hash: U1DWKTgxqaYSA+HG0uGalBdDYu7bAnFrJPXtuYeCEh0=)
2: pEi1sXolFr3_KzzGy9GgxCb35YI.roa (hash: 0hWxK4UVYjDavdDARBqtyWujMUcunhSXg8YFegPVy8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:ba:c7:bb:d7:eb:b4:17:d6:67:70:7e:8e:d2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4
Validity
Not Before: Jul 28 14:01:23 2026 GMT
Not After : Jul 29 14:01:23 2026 GMT
Subject: CN=8f7b94d91fa4815fd5335667fa9e28c11a4be376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:20:98:d8:4e:7e:54:a1:d3:61:f8:ea:c8:61:
49:5f:ab:69:e3:b7:8b:58:d4:22:20:db:df:82:21:
ef:ef:f2:3e:28:b4:c5:2e:d8:f8:15:06:7a:ef:71:
4c:ea:00:76:1e:b7:b6:59:29:15:8a:ab:10:52:44:
5b:2f:46:13:fb:fe:bc:bf:75:65:60:65:76:16:48:
c8:b0:f1:5e:29:2e:0c:fc:08:2f:ca:81:f3:d0:00:
72:51:73:a6:75:cd:a7:8c:ae:23:06:3b:a2:fa:b0:
7d:6e:a4:59:9a:49:b6:72:f5:f1:40:2a:7e:02:51:
3c:f0:0c:fc:87:38:25:57:ea:f5:69:9f:1d:3d:c1:
85:dd:51:35:79:56:ca:85:4f:f9:bf:63:73:ae:59:
dc:a2:f6:9b:dd:ea:bd:57:03:19:67:01:8e:9b:10:
4b:6d:fe:03:19:c2:08:cb:70:fc:ae:4e:c8:cb:69:
a2:91:0a:01:11:95:b1:45:2a:22:e0:70:da:83:17:
b1:75:46:2f:77:ea:43:9a:3c:be:6d:15:62:dc:33:
12:89:71:12:0f:a5:4f:d8:c9:85:28:fd:c6:27:b4:
19:a4:1f:46:e0:05:d3:e8:e4:7e:92:23:fb:da:4d:
a1:4e:67:a2:f1:62:e9:bc:ec:25:05:29:17:ba:55:
cc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7B:94:D9:1F:A4:81:5F:D5:33:56:67:FA:9E:28:C1:1A:4B:E3:76
X509v3 Authority Key Identifier:
keyid:0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:88:fb:ab:3f:42:9a:fe:12:af:29:3a:39:52:c9:b3:70:54:
3e:54:1a:d1:e1:f3:44:48:33:99:9b:c5:a5:24:cf:2f:c0:65:
1f:45:3d:19:7b:c1:ea:3f:87:59:80:f3:c8:bc:01:57:e3:4e:
86:4a:f5:93:4a:3d:66:04:ce:5e:49:25:89:b6:c8:1f:ea:f0:
69:a4:7a:dd:a3:09:54:e3:86:ea:32:e7:13:59:31:1f:02:7d:
92:89:b3:cd:fc:aa:28:67:b8:64:5f:67:99:89:a8:94:c8:6a:
9e:9d:9d:3c:43:fc:a9:e9:f4:1a:0b:58:9a:c8:01:cb:1c:be:
e3:00:fd:61:67:36:ba:75:b5:3e:09:40:e1:96:0d:27:0c:e0:
42:3d:19:34:2b:42:63:a0:1c:57:cd:fc:bb:6d:a5:2d:9e:c4:
25:9e:86:fa:69:28:10:56:1f:30:82:ed:47:2b:86:4a:72:8f:
9f:53:44:d4:63:32:fc:28:9d:df:ad:6b:68:c5:b8:64:72:c2:
bf:7a:b4:50:6f:10:97:ea:a2:32:31:28:98:48:6c:58:0e:03:
e0:35:b9:6f:da:43:2e:5c:76:bf:b1:fd:3c:d3:f3:42:46:2b:
57:ab:59:00:71:88:7c:04:02:ee:2b:c8:0f:6e:3c:d1:a4:8e:
73:13:56:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:31:13 2026 by rpki-client