Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
File: dPEFnCc8UO3PPc7fxYABUuyR26I.mft (raw, json)
Hash identifier: dzvZLLS5zf+ZCseBNVHyU6Z27lGngEnqg1LvvqVIqHs=
Subject key identifier: 89:EA:A4:1C:20:9B:57:4D:89:28:15:2A:2C:33:EA:45:27:DD:49:F3
Authority key identifier: 74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
Certificate issuer: /CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Certificate serial: 019FAB2CC7E0A1DC16D154EC4DB10FEB009E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
Manifest number: 19D2
Signing time: Wed 29 Jul 2026 00:01:06 +0000
Manifest this update: Wed 29 Jul 2026 00:01:06 +0000
Manifest next update: Thu 30 Jul 2026 00:01:06 +0000
Files and hashes: 1: 4zHqkXwTdPpErUuwool8-zX-SB4.roa (hash: LHnM5v5Sz1IzlHeFp2joapwPeszU3VAj2kHXfdYdwu4=)
2: dPEFnCc8UO3PPc7fxYABUuyR26I.crl (hash: VfGSkLrH76ER518+5KuDwB+atkeWpHbJC465ykN0OLM=)
3: f_myMJMSIIWO9m-PmHiygg0XXSs.roa (hash: 3LE3GccOE6KqVlj9DZ+EFPId6e66LFjW7NsGN3ZdmPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:c7:e0:a1:dc:16:d1:54:ec:4d:b1:0f:eb:00:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Validity
Not Before: Jul 29 00:01:06 2026 GMT
Not After : Jul 30 00:01:06 2026 GMT
Subject: CN=89eaa41c209b574d8928152a2c33ea4527dd49f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:9d:67:5e:80:d6:41:ed:e3:68:be:e1:ca:c3:
da:f5:92:da:4b:f3:63:0b:59:55:ec:6d:32:0b:3c:
e5:a7:c7:da:e9:4e:61:ca:51:24:99:f1:5c:ac:35:
51:f4:38:1d:e0:c6:10:5f:04:00:23:36:f6:05:93:
76:e6:1b:aa:17:c5:a3:ff:f6:f7:5a:ee:ec:43:25:
01:65:8e:c9:56:4b:a5:bd:17:22:a1:24:62:af:06:
fc:d6:aa:b6:18:28:b6:3e:ec:d7:75:8d:e0:f9:c4:
76:ce:e0:80:fa:d2:93:9a:f0:79:ae:9c:cf:20:a0:
ef:fe:dc:64:74:5a:30:14:70:74:28:bd:6c:3a:98:
2a:75:f3:f6:79:9b:9f:e2:11:1e:aa:57:50:46:61:
59:8f:61:23:2c:dc:18:5d:3e:87:a9:85:8c:46:28:
3e:2e:99:38:82:87:16:05:14:fc:b2:0b:21:6d:f1:
5d:b1:9f:2a:ae:8e:4e:e5:3d:25:bc:52:d4:06:6b:
1d:f8:58:81:51:e9:a9:c8:c3:6a:ee:04:96:61:14:
a9:b7:f7:58:42:94:2b:4c:f5:7f:a5:39:f1:3e:cb:
21:97:84:b2:d2:c7:46:82:df:16:c5:44:b3:d6:81:
db:74:58:63:aa:f4:34:06:24:21:55:61:e8:9a:f8:
c4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EA:A4:1C:20:9B:57:4D:89:28:15:2A:2C:33:EA:45:27:DD:49:F3
X509v3 Authority Key Identifier:
keyid:74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b5:c4:05:fc:20:59:be:21:40:07:4a:71:54:42:5f:f0:6c:
5e:b7:d3:54:ee:41:40:2c:43:fa:16:65:69:04:57:28:10:ab:
c5:54:1c:7d:ef:33:de:8f:35:52:d4:5a:e3:ab:d2:7a:fc:52:
46:79:b4:1b:b8:2a:d2:88:03:f3:b7:a4:18:bf:dd:72:e1:08:
c6:be:3c:c4:ea:f2:07:99:cb:fe:d6:93:84:80:07:19:77:bf:
51:8d:21:3e:fe:8d:cc:80:2f:61:0f:61:55:d4:51:d8:cf:13:
c6:17:04:81:75:cb:0d:5f:8f:3a:c1:b5:ad:8a:d2:92:e8:e5:
5d:a4:7e:b9:cd:f3:b2:51:78:50:d2:dc:a2:03:7a:14:e7:0f:
f4:6b:d5:9d:75:37:ac:41:fa:f8:7f:58:bf:c3:31:01:e4:49:
2c:6c:87:db:ec:87:73:04:db:66:e3:aa:2c:a5:1d:a8:b3:51:
6a:db:40:fd:c4:4b:eb:47:8b:77:6d:2a:ec:74:77:ed:59:d4:
9b:f5:84:13:6f:17:fd:88:26:70:c5:cb:8f:7f:20:b2:d7:7c:
b4:b1:77:2d:b5:f2:a1:39:15:33:c5:00:b7:d0:18:56:48:32:
09:33:7a:6b:d6:7b:76:fa:0f:64:df:34:2c:5d:bd:25:47:3d:
9b:43:a2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:46:46 2026 by rpki-client