Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
File: txDNRHGj-M3NhE0_NmFIlAlStOc.mft (raw, json)
Hash identifier: aUn0TOx5lzy1quw9fEybQBH3hGyReinyyV4fciDBff0=
Subject key identifier: 5D:C3:A6:B6:22:A8:3E:15:5C:98:A6:51:FA:BF:DC:DC:BF:C9:8E:A9
Authority key identifier: B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7
Certificate issuer: /CN=b710cd4471a3f8cdcd844d3f366148940952b4e7
Certificate serial: 019FAAF53604E4D874C3BE33ADF6AF42668A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 23:00:24 +0000
Manifest this update: Tue 28 Jul 2026 23:00:24 +0000
Manifest next update: Wed 29 Jul 2026 23:00:24 +0000
Files and hashes: 1: Hh4oawFMPhlZWHiv9oVznjVHldw.roa (hash: ZkANeMjzmI2+4mD6XiyteCRytMwKnaF4f4SfTl1h+1g=)
2: txDNRHGj-M3NhE0_NmFIlAlStOc.crl (hash: MLX/+T4fu89Ql8ok7s4kiE976NUETRrFROaYPB9ns2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:36:04:e4:d8:74:c3:be:33:ad:f6:af:42:66:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b710cd4471a3f8cdcd844d3f366148940952b4e7
Validity
Not Before: Jul 28 23:00:24 2026 GMT
Not After : Jul 29 23:00:24 2026 GMT
Subject: CN=5dc3a6b622a83e155c98a651fabfdcdcbfc98ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:be:5a:af:f6:55:6f:9e:69:da:6a:84:da:d2:
a3:11:4b:a7:e5:7b:a6:3f:f1:e0:68:46:a2:36:ec:
a4:05:2b:8a:74:b0:ee:94:a6:78:e7:0d:2c:61:31:
7e:42:cf:89:aa:38:e2:9b:35:28:e9:47:52:88:7e:
2d:d2:55:52:ec:30:98:29:35:9f:d8:b8:0d:e8:4e:
e7:46:0d:6d:74:16:ef:1e:67:7f:b1:68:f9:0e:68:
84:6b:0d:4b:98:9e:d7:3f:70:48:7c:0d:82:fe:d6:
60:0d:bf:30:78:5f:9c:25:f1:86:d0:53:57:b7:cb:
de:70:76:63:61:d3:bc:6b:d4:3a:cb:45:b4:1f:22:
27:18:92:b4:37:b2:d9:af:ee:1a:15:26:e6:18:a4:
ca:de:c3:a4:e6:23:b6:c3:71:c0:30:a4:ab:92:6b:
8c:2c:71:a7:5a:2d:c7:4e:5b:c1:78:68:42:33:69:
23:01:c7:34:88:bc:46:f2:24:1b:db:90:d1:0d:18:
74:c5:1d:6d:28:2b:7f:de:61:a0:e0:66:ea:65:6f:
39:3a:ec:70:d0:37:63:c9:aa:7a:a5:04:40:3d:e6:
dc:5d:3e:ae:ca:ba:9c:83:1a:6e:e7:fb:37:6b:dd:
9a:f3:cc:97:cf:6e:45:12:fa:21:b4:64:c1:e2:af:
9d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C3:A6:B6:22:A8:3E:15:5C:98:A6:51:FA:BF:DC:DC:BF:C9:8E:A9
X509v3 Authority Key Identifier:
keyid:B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ef:e0:15:fc:4a:a4:44:6b:b7:b4:64:d5:a3:8d:84:4b:1a:
e2:e5:84:14:6b:fa:2e:0f:c5:f9:95:37:a4:f2:8b:19:cb:2b:
f1:29:99:8b:f2:2f:a7:04:0f:27:39:19:35:bf:48:91:10:fd:
d6:9e:ca:85:e1:8b:bc:63:05:63:4d:96:f4:b1:a4:0b:aa:3a:
32:13:d0:78:34:44:04:a0:7f:47:56:1a:2e:d9:a9:10:9b:23:
cf:2c:73:f3:ee:f6:72:d0:2a:fb:45:ed:e3:d8:c0:f2:09:e7:
f5:76:cc:c2:db:77:ab:cb:8b:03:35:4a:ef:4e:76:07:e7:5c:
b3:a9:a6:d7:24:c5:5b:ef:fb:36:0a:4c:08:f1:c9:bb:91:1b:
ea:67:75:b2:f9:10:7d:03:65:79:96:2e:7d:ce:99:1e:68:fb:
3d:45:53:0d:29:1c:f5:ef:bf:74:38:4d:3b:57:6e:e4:ec:8b:
74:25:24:42:8c:e4:8d:8b:dd:c2:b4:35:ab:fd:72:c0:a9:c9:
b1:37:c1:34:cf:76:1c:ee:b2:31:3b:eb:32:fa:f8:57:33:f2:
ef:82:32:51:f1:b8:76:de:d8:3a:37:56:e1:c7:4f:57:73:35:
9e:2f:a3:95:4e:34:e4:93:6b:30:8f:d8:55:0e:d4:24:72:a8:
5e:1c:ec:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:43:33 2026 by rpki-client