Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
File: dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft (raw, json)
Hash identifier: mHFLMjB2TZaAdIzpCtSmhoDvu3XUj3I+2TCoAhonbDY=
Subject key identifier: E3:D4:7C:9B:63:24:7C:EE:1F:59:1F:5E:26:9F:A0:F3:8B:83:B9:15
Authority key identifier: 74:E4:3F:9E:5A:E3:F6:EA:FB:50:68:AE:88:F1:8C:29:E4:43:59:07
Certificate issuer: /CN=74e43f9e5ae3f6eafb5068ae88f18c29e4435907
Certificate serial: 019FA1BB8D3D3CF7B68B645A659DB2A6F803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
Manifest number: 19CD
Signing time: Mon 27 Jul 2026 04:00:50 +0000
Manifest this update: Mon 27 Jul 2026 04:00:50 +0000
Manifest next update: Tue 28 Jul 2026 04:00:50 +0000
Files and hashes: 1: T4BJnDBfE6AyBSAWAjPZ1GzLlMM.roa (hash: SXBhd3/vnyIoPB/kDRi62FVnMbysfno7J5T9Eftc8tY=)
2: dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl (hash: Z6J95MH9a2gW7ffNBCYyIUzMbwcSqdDj9QSGoRU2s4s=)
3: tSpDrZGtdp0mH1aXKivR6nDrhuY.roa (hash: xkSEr+C7WhhCLocSo1zhSLhZi6gcFYi1jnV4sR3gnUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:8d:3d:3c:f7:b6:8b:64:5a:65:9d:b2:a6:f8:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e43f9e5ae3f6eafb5068ae88f18c29e4435907
Validity
Not Before: Jul 27 04:00:50 2026 GMT
Not After : Jul 28 04:00:50 2026 GMT
Subject: CN=e3d47c9b63247cee1f591f5e269fa0f38b83b915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:08:a3:84:70:1e:60:9d:45:14:16:49:9d:5f:
20:81:7c:41:bf:8b:bc:f3:e3:22:2b:15:2f:25:e2:
5f:c3:1e:cc:9f:9e:07:22:b2:a3:78:4b:7a:6c:17:
04:9b:c3:2a:9f:db:4a:47:76:0c:a0:ad:ef:ed:91:
6c:a5:a5:7d:14:c5:6b:a5:c3:71:47:15:f0:a7:6e:
c4:bc:00:aa:17:cb:44:0d:06:43:1c:d7:71:3a:29:
2d:2f:35:65:fd:be:49:a5:c7:20:1e:a8:ef:48:34:
b0:cc:5f:48:5d:f9:17:37:9e:72:3f:d1:e1:ee:89:
6c:ab:b3:ed:30:98:79:76:17:e7:d8:e6:4c:8c:b6:
23:d2:39:8c:ce:3a:57:e3:83:e5:4d:a7:ae:3e:e9:
3c:84:ab:f7:7a:91:b2:69:9f:ad:af:e9:f8:bc:2b:
29:87:60:5b:64:af:9c:de:2c:90:37:ac:c0:63:e2:
7c:16:68:80:cc:f1:0d:9b:5f:fb:86:6c:50:e3:65:
22:c3:36:fc:f6:69:34:9d:4f:9e:75:f3:2f:b6:6c:
eb:96:ff:91:ed:6e:aa:07:bc:cd:04:2c:b6:a4:14:
6e:f8:e1:18:9b:e4:3c:ab:4d:05:df:f4:59:40:5d:
11:c0:7f:71:33:86:36:69:cb:9d:b4:93:a3:ca:a5:
56:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D4:7C:9B:63:24:7C:EE:1F:59:1F:5E:26:9F:A0:F3:8B:83:B9:15
X509v3 Authority Key Identifier:
keyid:74:E4:3F:9E:5A:E3:F6:EA:FB:50:68:AE:88:F1:8C:29:E4:43:59:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:51:15:91:d5:86:f5:56:b4:a4:6b:6a:be:10:f8:94:34:cc:
cf:18:89:cd:55:1b:1b:8a:d7:76:8a:46:29:06:1c:98:ac:5e:
64:1f:35:34:18:ed:c3:26:b4:ea:a9:0c:d8:4f:21:9d:de:21:
b6:ec:ee:dc:8c:e6:b3:f3:94:67:1d:1e:80:3c:14:15:84:25:
20:c6:d0:4c:31:05:73:a9:42:cd:10:0e:2a:5e:1a:02:76:64:
c1:7b:34:b7:f1:88:72:ff:83:fa:e9:87:27:a2:01:f4:f1:98:
98:3b:c0:47:2f:5c:a2:97:d1:32:e3:c4:97:f8:e6:78:00:31:
2b:02:24:8a:9e:15:fd:01:78:20:e0:3f:88:23:8e:e3:39:c1:
52:5d:93:90:51:b9:f5:40:2e:fc:ad:38:52:58:70:10:e7:21:
fb:4b:25:bc:5d:57:66:29:10:82:16:c3:ec:27:cb:e6:df:62:
8e:0d:68:de:b6:36:ee:c3:53:0f:d9:86:85:d9:1b:59:8d:3f:
50:2b:24:1a:18:f5:01:00:50:e2:f9:de:97:2c:7f:1b:da:77:
d3:ee:8d:73:b2:82:7d:4f:f1:77:5d:93:d9:7d:19:d4:99:c8:
e8:4c:7b:6f:c3:5f:97:a7:6d:a1:7e:98:c5:83:cc:69:b0:1a:
30:e2:35:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:42:48 2026 by rpki-client