Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
File: dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft (raw, json)
Hash identifier: 5VRISqDqtVvTm5swZbrtvDQexnu5Tp0zBotW35Cn6p8=
Subject key identifier: 25:01:AD:DD:40:F0:2D:10:B1:1C:13:49:C3:8B:2D:C3:1C:82:4E:DD
Authority key identifier: 74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
Certificate issuer: /CN=7450810f13df8d9019f157c36fbd0f6db9862992
Certificate serial: 019FF8D9DDEBD47595D4D49166E2EAB79E10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
Manifest number: 19FE
Signing time: Thu 13 Aug 2026 02:00:55 +0000
Manifest this update: Thu 13 Aug 2026 02:00:55 +0000
Manifest next update: Fri 14 Aug 2026 02:00:55 +0000
Files and hashes: 1: dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl (hash: NuAav//rjifMlbl/V/1t29FYSOeIIFUqilyQdGTcVXs=)
2: vWKPs1EksdLNehXFmCXDKSULnXk.asa (hash: yNn9JtBbsWodt41KzrmjveQKUch9zXpyA0sczkLauf4=)
3: yV3n7Of-XfxujJs_oZpOk9T5zxc.roa (hash: RWU+lLoWMG+Uf+PGBYW1EPxQGP3cMIviVCgLyu7si9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:d9:dd:eb:d4:75:95:d4:d4:91:66:e2:ea:b7:9e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7450810f13df8d9019f157c36fbd0f6db9862992
Validity
Not Before: Aug 13 02:00:55 2026 GMT
Not After : Aug 14 02:00:55 2026 GMT
Subject: CN=2501addd40f02d10b11c1349c38b2dc31c824edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:9f:0b:22:b0:19:f0:27:cb:b2:a2:7c:c9:c1:
4a:7f:b4:96:21:ea:22:72:13:e7:5b:39:ed:e3:b4:
a5:d9:5b:39:5a:f8:c2:89:2c:2d:f4:b5:82:48:19:
12:02:56:9a:eb:f0:a1:be:58:6d:c6:6c:76:7b:68:
53:02:e2:2f:3d:54:40:a5:f4:44:c0:48:eb:e4:f3:
c0:72:61:6a:5f:b1:04:17:97:22:74:5a:61:4e:47:
72:6b:f6:42:5b:b6:8a:b4:4f:a6:70:09:66:63:96:
66:5e:9c:3b:18:bb:a3:b2:59:1b:a2:aa:20:d7:dc:
f6:e0:f8:37:a0:d0:03:ae:23:1f:2e:cb:e3:49:dd:
a4:04:19:ff:67:fc:cb:56:b9:5b:41:02:f5:b4:71:
5d:82:91:3c:bf:62:87:4c:89:5f:5e:f9:14:23:c3:
1b:0c:ce:0c:85:89:54:6f:24:89:25:53:f2:19:88:
09:a2:c0:48:39:9b:64:d0:b4:69:b8:ab:eb:c4:e4:
70:3b:ac:d9:4b:ab:c3:83:34:e5:6d:0d:3d:1a:c3:
8c:f0:76:00:d5:11:cd:bb:7f:54:f3:52:5c:9b:7b:
52:bf:7d:7f:aa:6e:54:7c:a1:85:6a:69:b9:d2:82:
06:f7:51:4f:15:b1:a5:06:25:1f:d4:34:a0:e1:df:
1d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:01:AD:DD:40:F0:2D:10:B1:1C:13:49:C3:8B:2D:C3:1C:82:4E:DD
X509v3 Authority Key Identifier:
keyid:74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e0:95:d8:8e:25:48:1d:d3:ff:dc:a4:90:7a:01:4a:3f:66:
fc:24:f6:6c:6d:20:53:0c:17:98:5a:16:78:a4:35:7e:64:53:
3f:0c:c6:5b:c9:d8:70:d3:60:87:64:4a:df:6e:c2:2b:f6:97:
df:0c:5a:d1:cb:72:71:78:e4:97:67:0b:e3:5c:05:38:6d:c8:
94:36:a1:16:a1:18:33:75:b5:1b:be:e3:28:fa:43:25:bf:d5:
f2:0a:ce:ac:66:3f:e5:d8:25:c7:7c:6b:77:39:e4:0e:cd:02:
41:c7:2e:27:f9:9a:fa:7a:68:17:10:78:d7:cb:a5:53:3a:d3:
bd:aa:cd:e1:65:0c:a4:9c:ac:6c:7b:fd:a9:4c:4d:80:aa:11:
3b:49:8d:86:8e:76:2b:6d:4f:6d:17:39:81:c1:68:99:93:91:
45:80:95:7a:54:5c:0b:5b:49:b5:ba:4b:99:7c:3a:a5:dd:ae:
b6:80:45:53:fb:fe:38:d7:4f:4b:5d:80:31:a5:7e:75:a1:8d:
c8:13:ae:bd:74:c6:de:db:d1:fa:ea:c3:5a:78:2a:ff:9e:cb:
7c:3d:d2:c6:7e:d1:fb:63:ed:6e:53:e1:6d:ca:1a:76:90:bc:
b8:76:e0:a0:d4:44:04:c2:98:be:dd:90:6a:40:f7:dc:b1:26:
43:ad:90:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:49:24 2026 by rpki-client