Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/daobbpHzNqAdTS7JukRO_QZxYfc.mft
File: daobbpHzNqAdTS7JukRO_QZxYfc.mft (raw, json)
Hash identifier: x7PkSFI8STCN28cHRjAaznRT07UKHuiMn7tnjiTpDkU=
Subject key identifier: 88:6A:E3:A8:90:96:8C:01:CC:6C:F1:B7:0E:B8:80:6C:96:17:3A:D9
Authority key identifier: 75:AA:1B:6E:91:F3:36:A0:1D:4D:2E:C9:BA:44:4E:FD:06:71:61:F7
Certificate issuer: /CN=75aa1b6e91f336a01d4d2ec9ba444efd067161f7
Certificate serial: 019F83E7EB25BFBC4A1B715FC600228FB013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/daobbpHzNqAdTS7JukRO_QZxYfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/daobbpHzNqAdTS7JukRO_QZxYfc.mft
Manifest number: 39
Signing time: Tue 21 Jul 2026 09:00:42 +0000
Manifest this update: Tue 21 Jul 2026 09:00:42 +0000
Manifest next update: Wed 22 Jul 2026 09:00:42 +0000
Files and hashes: 1: 1-nNpS75iYMcjjtHDmrPvO5OT4c0.asa (hash: 8ky8Utp0nRPsWBK/+jB+V8TaLHoS6comwINplKcWJxQ=)
2: daobbpHzNqAdTS7JukRO_QZxYfc.crl (hash: kDsjo019/7GjmCeWdaO2uosAZbPVhIzhYVWKq3uWMBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/daobbpHzNqAdTS7JukRO_QZxYfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/daobbpHzNqAdTS7JukRO_QZxYfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/daobbpHzNqAdTS7JukRO_QZxYfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:e7:eb:25:bf:bc:4a:1b:71:5f:c6:00:22:8f:b0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75aa1b6e91f336a01d4d2ec9ba444efd067161f7
Validity
Not Before: Jul 21 09:00:42 2026 GMT
Not After : Jul 22 09:00:42 2026 GMT
Subject: CN=886ae3a890968c01cc6cf1b70eb8806c96173ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ee:2f:77:a5:bf:14:14:fe:ee:2f:e9:93:8f:
67:27:c7:f4:8e:eb:7e:f5:4f:77:b9:e6:5c:97:f1:
84:7c:9d:76:cd:23:0b:9f:15:b7:ba:b6:50:a3:14:
ec:53:8c:33:4d:c1:67:02:8b:93:b8:b2:37:3d:0b:
9b:59:af:af:fa:c7:7d:43:b5:b4:2b:46:e1:82:c8:
4b:51:e8:42:54:ea:55:ed:8c:5f:b8:75:30:73:35:
34:51:28:53:bb:d8:a0:92:94:75:9e:48:a4:a6:ad:
48:d9:be:17:bc:41:e6:d3:06:b1:e5:17:77:b0:6d:
a6:e0:53:91:be:7a:d1:86:a4:ce:e7:82:3e:c3:8a:
d4:aa:01:89:65:80:5e:8d:fa:4c:09:92:e4:46:bf:
89:1b:b9:90:19:cf:8f:ed:d9:84:96:45:86:1a:6f:
e4:4e:03:3f:40:14:4e:7a:9e:d0:9a:61:1d:12:86:
43:b9:07:fd:ed:85:7c:b1:5a:bf:21:a5:e4:48:4f:
33:15:5b:eb:14:44:d0:1f:92:85:27:f5:34:04:77:
f5:b3:35:44:8c:cc:e3:c8:c0:d5:5c:25:61:da:a4:
6a:98:08:8a:6b:62:e5:62:25:de:53:10:34:7d:5d:
0e:ba:c7:8f:31:52:a5:65:ad:3d:2d:62:69:7b:dc:
9e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6A:E3:A8:90:96:8C:01:CC:6C:F1:B7:0E:B8:80:6C:96:17:3A:D9
X509v3 Authority Key Identifier:
keyid:75:AA:1B:6E:91:F3:36:A0:1D:4D:2E:C9:BA:44:4E:FD:06:71:61:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/daobbpHzNqAdTS7JukRO_QZxYfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/daobbpHzNqAdTS7JukRO_QZxYfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/daobbpHzNqAdTS7JukRO_QZxYfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:35:79:9e:38:d3:0e:ef:fd:5a:9d:3c:65:fd:35:66:c0:f4:
26:b4:13:71:b0:74:b7:7f:b3:b3:75:dc:bb:c5:49:f5:66:91:
27:bf:bb:dd:48:a7:c3:03:55:3f:4d:9a:56:80:d9:6f:c6:43:
4d:17:80:42:c8:ce:ab:f4:6c:4c:e9:55:0a:08:30:4d:5b:f3:
a5:80:9d:62:bb:35:b4:4c:0c:71:05:d8:5e:84:f0:81:be:43:
fe:a9:10:3e:50:fd:f2:52:c4:85:eb:a7:13:30:a5:4d:aa:1d:
67:5e:d5:55:4c:49:9f:92:78:85:f3:e9:dd:95:da:22:8f:04:
30:b7:f3:6d:66:4b:60:5a:1c:a5:96:3c:47:fe:64:e8:2e:a1:
c2:25:18:1c:37:1c:f9:0a:03:f1:94:6d:e1:4a:2b:5a:fe:11:
3f:f7:a0:cd:13:db:98:08:b3:bd:2f:1a:d1:c1:dd:f6:48:e5:
e4:41:8d:2c:10:38:66:da:36:8c:06:d6:49:d0:29:80:f2:ef:
94:bf:cd:e3:3e:ec:86:bb:6f:ab:bf:72:a3:3d:83:ef:7f:ed:
9b:f7:be:3f:67:9d:50:ff:4b:e6:a2:d9:a8:62:8d:e6:52:39:
04:45:cc:ae:ca:f8:00:e4:ba:52:e6:dd:16:9e:97:64:45:24:
eb:13:f6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 16:51:53 2026 by rpki-client