Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
File: dxBykg2MmitA6zoEXx8qbjNKRJY.mft (raw, json)
Hash identifier: eDdjASj/XowvfiPX6Ed35LBkDBIFp84lqe7FakVhahA=
Subject key identifier: BF:24:74:F1:26:E2:7B:44:20:7C:76:7F:12:2D:28:88:03:F2:6A:D4
Authority key identifier: 77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
Certificate issuer: /CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Certificate serial: 019F837A4F82E0C7C2B57DC51E0813289ADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
Manifest number: 19C2
Signing time: Tue 21 Jul 2026 07:00:58 +0000
Manifest this update: Tue 21 Jul 2026 07:00:58 +0000
Manifest next update: Wed 22 Jul 2026 07:00:58 +0000
Files and hashes: 1: dxBykg2MmitA6zoEXx8qbjNKRJY.crl (hash: MUIF6rmGz6EJa2lktZtqKMe+ljPEuo1eBIM1Lmc6xg4=)
2: qMa40C2bwbsuAhlKHVj7zBev3Sk.roa (hash: Q1yI4h86YGsQR3DwWZlfSBoYmM0cIR/AXm0wW8+aF5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:7a:4f:82:e0:c7:c2:b5:7d:c5:1e:08:13:28:9a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Validity
Not Before: Jul 21 07:00:58 2026 GMT
Not After : Jul 22 07:00:58 2026 GMT
Subject: CN=bf2474f126e27b44207c767f122d288803f26ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:75:ad:51:2e:14:f7:e9:01:b5:52:f4:b5:7e:
95:f5:9c:ff:73:6f:c3:3c:bc:96:d4:a0:7c:6c:0b:
02:d8:48:d2:f4:45:34:8e:cd:3b:11:57:d2:e8:04:
ca:15:af:36:87:50:3a:ce:9c:4a:c1:3e:53:43:33:
7a:64:7c:b0:fc:0b:43:53:66:e5:95:5a:e2:c5:f7:
72:ad:4f:3e:0c:16:07:2e:93:59:6b:bf:02:a8:d4:
01:9d:cb:98:7d:c0:b8:8e:f7:df:6c:93:6c:c7:77:
8d:96:ea:cb:32:c8:de:84:26:fb:f1:34:55:ed:c4:
bf:9d:bf:ec:51:ae:ea:dd:04:b2:6c:bc:c3:0c:bb:
93:19:b6:6f:70:e3:0a:92:df:39:d9:18:a0:29:69:
c4:3d:ae:b0:39:c1:2e:3c:72:25:8a:af:6c:1b:a1:
6e:2a:93:f9:39:b5:97:c2:93:98:4a:a9:46:46:8a:
b5:12:64:9d:b2:25:62:7f:6c:de:6d:11:1c:68:2f:
89:9c:c9:01:75:6f:77:53:3e:58:e9:f1:ed:ba:a8:
c1:ff:c4:59:ab:0c:56:0b:13:63:c8:f0:5d:95:17:
65:3f:01:6f:85:fc:bc:91:5e:f4:25:a9:fd:bc:7d:
6e:90:25:e1:6e:da:44:dd:bb:f1:d9:e0:d4:28:66:
03:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:24:74:F1:26:E2:7B:44:20:7C:76:7F:12:2D:28:88:03:F2:6A:D4
X509v3 Authority Key Identifier:
keyid:77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f7:dd:fc:46:9d:1d:0a:29:cb:0a:4c:9f:68:25:1a:0e:be:
65:fa:15:e1:4d:3e:a0:f1:cc:b2:d8:96:4f:1f:b5:cc:4d:2c:
bc:c8:18:ad:25:c6:a3:f6:a2:aa:88:62:33:b4:84:09:e8:20:
ce:4a:8d:be:26:f4:1a:8d:f3:67:24:fb:61:52:06:b8:38:94:
a0:82:2d:f2:23:8e:7d:ea:30:a5:45:a3:3d:ce:b9:9c:7c:d3:
d1:44:08:d0:cf:6e:90:b6:27:e9:ad:e6:d3:23:da:7a:f6:3a:
6c:94:0f:36:d2:e0:e2:af:75:d0:58:71:fb:ed:33:c7:cd:41:
8f:6c:e8:94:2a:f6:db:22:3a:56:ef:91:1b:62:95:4f:5f:74:
8f:be:ed:d6:2f:85:c5:3b:5a:ff:c8:dc:2a:03:1c:ce:21:e6:
1a:fc:89:45:01:a6:99:aa:1a:6c:11:ff:88:ce:3a:15:55:6e:
39:ae:d8:cd:a9:36:97:78:aa:d2:99:9c:8e:9e:b0:04:79:f0:
ef:e1:2a:e5:56:e1:ef:89:0b:8b:34:9e:71:98:17:00:dc:cc:
17:6d:23:8f:f7:2e:2c:4f:1c:e2:ef:0b:26:c2:6a:9f:3c:b8:
4a:35:e1:7c:68:bf:e9:d3:93:5d:a3:71:4c:dd:af:d5:a9:db:
e7:57:69:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:23:38 2026 by rpki-client