Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
File: dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft (raw, json)
Hash identifier: ih8M+dZzqYjNYU20TwPEmWB0aAzUZeq+jzk5fhVPR+Y=
Subject key identifier: B9:32:23:53:DF:AA:F4:E1:46:59:D8:3C:61:EA:80:3D:7A:CD:40:FF
Authority key identifier: 74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
Certificate issuer: /CN=7450810f13df8d9019f157c36fbd0f6db9862992
Certificate serial: 019EFCB93FC1A7059E7A06A74595E6973FAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
Manifest number: 197B
Signing time: Thu 25 Jun 2026 03:00:59 +0000
Manifest this update: Thu 25 Jun 2026 03:00:59 +0000
Manifest next update: Fri 26 Jun 2026 03:00:59 +0000
Files and hashes: 1: BzyRKVh8G6MxV92pq1WYXw5su3Y.asa (hash: 3hX1G/8KfCcJykl9PaVXJ9wMH1P2QICFRRtGllgYDUo=)
2: dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl (hash: 8qgiTGGVUqKflXvkHIUpAJskFZJapeqCuf/kXkarx6Q=)
3: yV3n7Of-XfxujJs_oZpOk9T5zxc.roa (hash: RWU+lLoWMG+Uf+PGBYW1EPxQGP3cMIviVCgLyu7si9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:b9:3f:c1:a7:05:9e:7a:06:a7:45:95:e6:97:3f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7450810f13df8d9019f157c36fbd0f6db9862992
Validity
Not Before: Jun 25 03:00:59 2026 GMT
Not After : Jun 26 03:00:59 2026 GMT
Subject: CN=b9322353dfaaf4e14659d83c61ea803d7acd40ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7f:1c:a0:2b:09:20:db:d1:56:61:14:b9:df:
98:74:bd:ab:89:e2:05:3e:89:f4:b9:7c:fc:e2:7c:
b5:d7:21:7c:d6:e5:f2:dc:a8:6b:b6:a0:27:4c:5a:
0c:c7:99:15:8c:d8:34:1a:96:31:8a:ec:da:56:0d:
94:39:dd:82:8a:65:15:13:05:92:eb:1d:8f:43:44:
66:53:44:35:68:5d:45:19:23:22:d8:40:cd:7c:eb:
3b:f6:f4:45:93:f6:24:cc:09:03:56:e7:1a:ae:a6:
e5:98:77:ce:2b:05:4a:19:ae:cb:c1:a7:74:bb:ba:
9b:33:11:61:63:76:ac:ad:7e:b3:23:55:9e:56:cc:
42:f7:a6:65:f2:96:c7:cd:b5:e1:78:0c:8e:15:a0:
db:38:96:45:7d:4a:e3:c7:84:72:9c:59:fa:bc:0c:
b5:64:f8:8f:9c:a2:00:eb:3e:1e:24:62:7b:1a:7c:
50:16:46:8d:0c:a8:3c:a0:09:67:71:cf:41:e6:e9:
25:09:95:2a:f9:fd:80:f6:fa:c2:71:b3:8a:ca:e4:
78:c8:1b:f7:e0:74:62:65:5a:5a:8b:1e:15:bd:f0:
92:21:e9:4e:c6:b4:52:29:cf:33:8f:c7:69:a3:19:
01:c0:67:79:49:93:4f:04:be:33:2f:4f:de:2d:b0:
ee:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:32:23:53:DF:AA:F4:E1:46:59:D8:3C:61:EA:80:3D:7A:CD:40:FF
X509v3 Authority Key Identifier:
keyid:74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:3d:48:eb:13:f9:9d:e6:58:a0:49:62:94:39:06:4f:a7:f8:
f0:05:8c:cf:61:10:5b:a5:ee:68:5c:b5:35:6e:c8:d7:f1:25:
ff:e7:2d:41:bc:48:7c:bf:4b:d5:d3:c5:27:f2:24:2a:c4:07:
19:b7:d5:fc:54:87:a5:03:34:c0:12:29:0a:4a:ad:8f:a8:0d:
0f:f2:a5:07:4b:66:58:c5:c8:d0:09:e8:e8:40:e7:d0:fb:8f:
31:e0:72:a3:96:d3:99:fd:ff:41:3f:55:05:2a:b5:47:ca:e0:
4d:cd:0e:2a:db:5e:de:49:06:41:aa:6e:e2:83:17:69:8a:f0:
c2:e6:f1:c0:71:57:ba:00:4a:10:2a:d6:65:ae:44:d8:c1:d2:
83:5e:74:32:f9:54:8b:5e:6c:2a:4a:d9:3d:7d:e8:b2:82:20:
e3:80:85:34:45:21:e3:ab:f7:3b:ea:7b:f5:58:c4:c5:56:60:
a7:9c:78:aa:82:bf:1f:82:92:5f:17:5b:71:ef:75:60:9c:fe:
d5:69:59:41:28:f5:29:01:03:ad:b4:13:03:68:84:49:60:d4:
a7:d9:22:46:f9:fd:5e:c2:3f:b0:5b:d2:22:f6:42:df:92:38:
3f:cb:10:e3:f5:c9:35:7b:f4:e9:cd:fe:49:61:7f:37:6f:7a:
55:05:22:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:28:05 2026 by rpki-client