Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
File: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft (raw, json)
Hash identifier: hwYfgVuNdIcT+Hpp5s28ZyTfvAowEqq+2XjA/143dYU=
Subject key identifier: D5:80:A4:E4:EF:D1:0C:0A:87:59:E0:9D:21:57:6C:3D:F1:93:2C:45
Authority key identifier: 0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A
Certificate issuer: /CN=0c5e870d31ca7019951370cb221f18f1f09fa58a
Certificate serial: 019F1943A29984B9ECBA47DB5306437D2A48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
Manifest number: 198C
Signing time: Tue 30 Jun 2026 16:01:30 +0000
Manifest this update: Tue 30 Jun 2026 16:01:30 +0000
Manifest next update: Wed 01 Jul 2026 16:01:30 +0000
Files and hashes: 1: 1TwtEwBMlCxF8zqgEDzuBJ_MkQk.roa (hash: TD25ePA+FEqAqKpKYIGbiC60SkZANZcldOpqjTjdHRs=)
2: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl (hash: DvWUPUyX9oWXTuLpwOhMZCxrjN66rGztdliIpe47M8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:a2:99:84:b9:ec:ba:47:db:53:06:43:7d:2a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5e870d31ca7019951370cb221f18f1f09fa58a
Validity
Not Before: Jun 30 16:01:30 2026 GMT
Not After : Jul 1 16:01:30 2026 GMT
Subject: CN=d580a4e4efd10c0a8759e09d21576c3df1932c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:52:1f:bf:b7:96:c2:9e:4a:37:85:59:9a:7d:
23:4e:3d:7b:de:58:8c:76:b9:f0:e1:bf:a1:cc:ab:
cc:1f:0c:af:6e:da:f3:69:19:7b:08:ff:32:51:aa:
34:98:d0:34:1f:82:5d:82:0e:8a:3f:38:c3:b7:46:
34:5e:92:02:90:87:d2:da:1f:8d:66:d7:e5:7a:50:
91:10:0c:a6:c2:fd:2c:5a:bd:b1:97:1f:87:50:e1:
8d:3c:ee:f3:f3:e5:72:27:f4:0c:01:6b:10:a4:8c:
8d:3d:5e:b3:07:f7:83:2d:af:95:cb:7b:c5:eb:da:
af:34:bd:2b:cf:84:20:a4:94:b2:bf:0d:b2:08:2c:
0d:09:dc:69:9f:d3:23:5b:43:82:1f:b3:f1:10:1c:
12:31:79:43:02:a4:4b:e0:d8:c2:8c:06:f6:a7:79:
e8:ee:57:f0:40:9d:71:8a:ac:18:a5:12:4e:b7:f4:
2e:7f:3e:c4:1a:9f:2e:3d:9c:f5:9d:c1:41:00:89:
55:62:ba:31:75:35:c8:fd:5d:87:1e:43:f7:4b:c6:
b4:41:68:49:71:7c:fa:9c:b6:dc:a6:e9:63:77:39:
2c:52:8c:70:1e:3c:22:b1:bc:26:f0:11:46:e0:fd:
3a:6a:8a:44:b4:e3:c4:aa:c9:f5:fe:51:f6:89:8f:
c0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:80:A4:E4:EF:D1:0C:0A:87:59:E0:9D:21:57:6C:3D:F1:93:2C:45
X509v3 Authority Key Identifier:
keyid:0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f3:ce:38:e2:17:0e:70:07:32:84:7d:da:45:6e:2c:5a:9b:
87:84:08:82:51:66:74:68:79:4f:42:e9:fb:6b:03:30:29:ea:
9c:a4:7c:3b:40:a4:65:13:a2:fb:62:d8:17:63:e5:9a:99:5b:
68:51:e6:fe:b6:82:18:c9:05:c5:06:41:36:dd:df:5a:28:4e:
44:54:2a:f1:c3:01:6d:3f:6b:6c:28:68:07:8a:95:a4:50:fd:
6a:3a:3e:b5:7f:62:ff:66:6a:8b:02:41:ec:3e:4a:de:56:19:
cd:54:b5:4a:7a:63:39:fe:f2:b3:f0:d2:97:df:51:22:fc:85:
55:ce:25:67:3c:ff:09:9a:68:b6:ad:91:92:93:c7:bd:84:86:
d8:0a:de:45:5f:a9:86:94:c0:8b:ea:2a:fd:1f:8f:f6:e1:1d:
e2:28:b6:db:8d:be:6d:df:05:78:9f:a4:40:0c:9e:16:9f:d1:
70:77:2e:c0:10:c5:42:1e:3d:e6:0b:7a:6e:6d:f8:1a:05:02:
ff:de:7c:9f:d8:98:ab:bd:bf:5f:e7:83:1e:a7:0a:cb:fe:28:
a9:20:2a:5e:f2:ba:dc:96:15:07:1d:5e:e2:88:a7:fd:81:ce:
63:ca:89:18:6a:33:d4:07:9d:da:00:8c:b1:8c:45:70:8b:a4:
2c:a0:7e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:10:33 2026 by rpki-client