Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.mft
File: bDjM5r4-JvXmJUacse03btd5v7A.mft (raw, json)
Hash identifier: 0YgkuFOWa0l5DormZ4RkTd7KQmWQDREHMBCgXrhRxBo=
Subject key identifier: DC:9F:CB:E5:15:10:F4:28:B5:49:A8:59:0B:F8:D0:D7:37:9D:D3:9B
Authority key identifier: 6C:38:CC:E6:BE:3E:26:F5:E6:25:46:9C:B1:ED:37:6E:D7:79:BF:B0
Certificate issuer: /CN=6c38cce6be3e26f5e625469cb1ed376ed779bfb0
Certificate serial: 019FA899D40FB77DABE021C720FB1F3E56EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDjM5r4-JvXmJUacse03btd5v7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:21 +0000
Manifest this update: Tue 28 Jul 2026 12:01:21 +0000
Manifest next update: Wed 29 Jul 2026 12:01:21 +0000
Files and hashes: 1: OZq72zv4sg7RvskqcH-YM473vC0.roa (hash: ZaPK+bZUcZeqLBhmkFhNu+PtlkG5P1ecScSV/otpvoU=)
2: aqZj2vUKzXW4OJOiXFcYzOGlOBE.asa (hash: OBvOGfVO6gpSCVcXtODca/H8DDZWmcTW85b6yxSA+tY=)
3: bDjM5r4-JvXmJUacse03btd5v7A.crl (hash: FN9z5iaBd3hUJDgLZeUQHuIqI+zHJHqa23Mksy+ldBk=)
4: isv1noVOs3IF7XKFRPIZvlT-zzs.roa (hash: Y7qPP/O0hbTSlwRSjlHZA/XaYa5Jq+RJtLqdMHL5xuY=)
5: vdQ0RaPFXcCVGYywpsZqkOR4hpw.roa (hash: ktZFb+NWv0kq4A04+BX1/mDAvqdfa84ChDii4aiEH4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDjM5r4-JvXmJUacse03btd5v7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:d4:0f:b7:7d:ab:e0:21:c7:20:fb:1f:3e:56:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c38cce6be3e26f5e625469cb1ed376ed779bfb0
Validity
Not Before: Jul 28 12:01:21 2026 GMT
Not After : Jul 29 12:01:21 2026 GMT
Subject: CN=dc9fcbe51510f428b549a8590bf8d0d7379dd39b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:34:a9:e1:a0:71:98:ed:7b:64:5c:d4:33:ad:
12:e3:63:9f:9f:61:75:6b:e2:7a:9a:4e:c8:dc:5a:
45:e0:3a:f9:46:bf:a4:ac:40:b5:da:50:68:d1:7a:
5a:a8:13:5a:06:a7:73:d1:86:77:ff:99:97:64:14:
9e:8a:b2:9f:96:a4:70:d9:c4:19:da:55:64:10:4a:
bd:b7:db:bf:37:f9:73:c1:e3:fb:19:9a:ab:c0:8f:
11:3a:da:4a:81:15:2c:e8:b5:5a:00:93:94:6c:3b:
87:2e:c2:97:74:7c:67:20:07:9c:61:35:58:e7:e7:
52:b4:3a:11:29:5d:cc:aa:3e:16:c4:a1:e9:f5:98:
76:f9:4b:36:6d:03:0c:62:5f:08:e6:d6:8c:7e:dc:
b0:16:1e:b9:f5:07:4f:a8:18:1c:ab:9a:15:47:33:
9d:72:55:c9:69:9b:bc:49:f1:ba:54:84:b3:c2:b4:
af:c9:f1:2b:71:c8:f8:f3:a4:e2:ad:11:7d:d2:90:
47:47:8a:94:69:72:d3:ca:38:68:8f:09:ef:41:9a:
26:35:fb:26:fa:19:74:7b:c6:b5:17:83:91:3d:b6:
51:47:eb:d6:84:42:3c:c9:dd:64:54:2e:dd:28:42:
9e:ad:63:18:4e:99:65:91:1b:5b:25:61:66:20:41:
e4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9F:CB:E5:15:10:F4:28:B5:49:A8:59:0B:F8:D0:D7:37:9D:D3:9B
X509v3 Authority Key Identifier:
keyid:6C:38:CC:E6:BE:3E:26:F5:E6:25:46:9C:B1:ED:37:6E:D7:79:BF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDjM5r4-JvXmJUacse03btd5v7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:6b:80:ec:86:e4:f5:bc:48:72:ed:04:3b:30:fb:30:55:b2:
fd:34:4a:70:7a:8f:e1:c3:6d:f4:3a:ca:0e:8e:9a:27:44:32:
3a:4a:cb:ac:20:16:00:d1:e0:8d:ad:9d:f5:bb:e7:83:ee:14:
fc:2b:d1:e2:2f:95:69:d8:3d:00:37:6d:3b:0d:50:9f:50:0d:
09:1f:31:8b:54:9b:e6:6e:62:a9:0e:9f:23:ad:b2:f7:f7:52:
2f:17:ff:c6:23:2d:f3:ab:7d:e1:6e:2a:b9:4f:89:d6:35:4b:
6c:67:18:d8:30:b1:6c:ed:bc:f1:0a:45:53:bc:46:8e:b0:34:
38:e3:17:f8:4c:72:53:e6:31:02:f4:ff:76:c4:6d:be:a0:d5:
46:78:fa:e3:ed:5d:7e:22:ae:c0:e5:84:70:6b:03:1f:ce:39:
3b:8f:62:4b:9f:91:34:af:03:3c:76:6c:30:75:e1:b1:9b:c4:
f7:09:23:ed:7f:65:f8:a4:8f:9c:71:42:23:e9:dc:62:0d:82:
ce:19:0d:eb:29:9b:13:29:ee:71:1f:89:66:25:05:95:a5:da:
92:8e:50:12:41:a3:bc:99:00:9d:5c:76:0d:ad:dd:ca:78:ae:
49:67:ab:e1:49:46:d5:60:ff:60:c6:02:8a:d4:71:3c:c0:a3:
c8:a5:94:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:39:49 2026 by rpki-client