Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
File: dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft (raw, json)
Hash identifier: GfUKEXmF0jbznbIyf7ijxZR/dqRSOAIJBmlw8qAGZo8=
Subject key identifier: D8:7D:AF:E0:4C:F7:DC:0E:43:0A:04:50:34:12:7B:45:6E:8A:12:1F
Authority key identifier: 74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
Certificate issuer: /CN=7450810f13df8d9019f157c36fbd0f6db9862992
Certificate serial: 019FDDD080800F272F22F655FA84CA88AADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
Manifest number: 19F0
Signing time: Fri 07 Aug 2026 20:00:56 +0000
Manifest this update: Fri 07 Aug 2026 20:00:56 +0000
Manifest next update: Sat 08 Aug 2026 20:00:56 +0000
Files and hashes: 1: dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl (hash: paLd8X2w7cx3D/27HKyFC4/ZA3gNJ07Cqds1+71JQFk=)
2: vWKPs1EksdLNehXFmCXDKSULnXk.asa (hash: yNn9JtBbsWodt41KzrmjveQKUch9zXpyA0sczkLauf4=)
3: yV3n7Of-XfxujJs_oZpOk9T5zxc.roa (hash: RWU+lLoWMG+Uf+PGBYW1EPxQGP3cMIviVCgLyu7si9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Aug 2026 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dd:d0:80:80:0f:27:2f:22:f6:55:fa:84:ca:88:aa:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7450810f13df8d9019f157c36fbd0f6db9862992
Validity
Not Before: Aug 7 20:00:56 2026 GMT
Not After : Aug 8 20:00:56 2026 GMT
Subject: CN=d87dafe04cf7dc0e430a045034127b456e8a121f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:72:5e:e5:be:33:d6:32:da:94:43:aa:d4:0e:
00:be:ae:9e:48:49:e4:c8:85:9d:8d:1e:cb:0c:ef:
16:46:71:9f:27:7e:8f:27:d1:af:18:96:9b:a3:41:
7a:bf:a3:fe:7e:cd:6a:12:30:23:14:f8:6e:ee:31:
a2:5c:e0:b2:7e:b8:5c:bd:f0:e5:a6:47:4d:f1:43:
e2:d6:59:0d:c9:e8:f5:39:6d:0d:d0:87:98:18:b9:
c6:30:ba:52:c4:08:37:91:7f:88:b5:03:d9:12:7a:
38:d6:a9:07:13:56:d9:e1:31:22:8e:c9:8d:24:66:
24:18:fc:68:50:d1:c3:0d:57:91:65:cc:32:85:c5:
df:42:9e:ce:93:fd:09:48:4b:32:ca:41:39:db:53:
d6:70:67:2b:c4:f9:f3:06:1c:37:07:40:dd:60:f6:
4c:cc:2a:dd:b5:75:10:02:49:7e:78:b5:f1:72:0d:
be:1a:af:43:d2:2f:25:bc:44:58:86:c0:bb:cc:90:
24:56:09:e3:53:f7:4e:84:08:e2:1a:fc:7f:1c:45:
8f:6c:fe:67:c5:2e:3c:7d:8e:38:87:50:83:ee:50:
6e:d1:b7:05:db:44:76:0a:5c:7a:22:c0:1e:b6:41:
14:95:3e:a9:ea:87:46:8c:08:19:ff:83:2c:26:8c:
65:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7D:AF:E0:4C:F7:DC:0E:43:0A:04:50:34:12:7B:45:6E:8A:12:1F
X509v3 Authority Key Identifier:
keyid:74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:9e:9b:20:67:3e:33:5e:85:13:21:4b:26:78:9d:d5:51:05:
ab:bb:ca:51:88:c6:a6:d0:98:e4:d2:1b:75:56:da:55:35:be:
57:cf:d1:42:f3:20:43:aa:4e:af:d7:28:50:ac:16:fc:bc:bf:
76:6e:77:58:00:a4:c6:a8:28:bc:d2:0d:66:0e:a8:20:d3:dc:
66:c2:cf:e4:e9:51:56:d1:60:7b:ab:55:75:c3:13:e0:4d:36:
5c:ae:16:97:df:be:f6:ed:60:01:a6:c6:18:5f:48:42:6d:a6:
1b:0d:59:db:5f:f2:38:2f:9c:1a:56:71:55:12:ea:57:5f:4b:
f2:b6:f8:b1:66:84:cf:35:2d:a1:06:6c:5d:5a:59:ee:f3:2a:
05:4a:b7:07:4b:20:9d:96:ad:a1:db:ca:80:cc:af:fb:24:82:
94:d2:33:da:72:59:cb:3a:aa:03:c2:14:ca:cc:ca:89:b4:6a:
38:d5:74:f4:53:c7:9d:62:90:0b:0b:1a:de:95:d6:a1:70:9b:
69:38:bf:93:86:97:a5:e6:a7:15:1d:ff:2b:6f:5d:91:b4:d9:
ae:39:2d:ce:60:9e:1e:9f:9f:9a:1f:01:75:28:27:ac:43:c9:
11:35:7e:02:00:5a:ca:2f:3a:07:53:b4:a9:e7:70:3b:b9:df:
03:95:eb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:47:31 2026 by rpki-client