Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
File: DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft (raw, json)
Hash identifier: 2IxlEgtcQaf93TbQAYqRwgeUpO26D/p55AlL5T/Ny+A=
Subject key identifier: B6:1F:52:02:14:F1:25:DB:BA:6D:05:B5:91:01:F7:E9:D8:7E:72:BE
Authority key identifier: 0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
Certificate issuer: /CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Certificate serial: 019FD873D22745B0CC73289B3EAB64F91D4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
Manifest number: 19EF
Signing time: Thu 06 Aug 2026 19:01:36 +0000
Manifest this update: Thu 06 Aug 2026 19:01:36 +0000
Manifest next update: Fri 07 Aug 2026 19:01:36 +0000
Files and hashes: 1: DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl (hash: a31FagzWVZtTIX9APXJKikzDJWV/jJiy4IFnPxwoUjI=)
2: xRmmdqH1-j--sEXPtnNY3Z-R5Zo.roa (hash: 3OUa7VjiPRdUyQdSMo547+vkOocCdI86key02w1U7/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Aug 2026 13:27:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d8:73:d2:27:45:b0:cc:73:28:9b:3e:ab:64:f9:1d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Validity
Not Before: Aug 6 19:01:36 2026 GMT
Not After : Aug 7 19:01:36 2026 GMT
Subject: CN=b61f520214f125dbba6d05b59101f7e9d87e72be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3a:6c:85:40:8d:12:c5:32:83:7f:72:cf:f0:
4f:1d:c8:3f:29:7e:b3:bd:1e:22:e5:52:b6:0b:30:
c8:ae:74:65:27:dd:bb:9f:9f:d7:5d:6b:a5:99:4a:
69:e7:d3:dc:d5:f2:48:33:9e:89:e5:22:7a:25:f6:
6a:e0:92:54:aa:50:5f:2f:9d:de:49:aa:1b:f8:03:
7d:67:f6:35:49:a3:16:70:26:7c:17:81:52:97:9c:
5c:35:5d:18:98:37:a1:90:df:7f:9b:0c:a2:4f:e4:
72:39:73:95:8c:36:9a:b5:fd:55:6a:56:3c:45:1f:
da:c4:e4:0e:e5:3e:c8:fb:6a:3a:3a:dc:de:89:c6:
2f:f8:8b:95:c6:0a:ea:c7:aa:d5:f1:df:86:e4:67:
63:59:35:48:e1:e1:ec:65:cb:e4:db:0f:8f:10:0a:
d1:37:10:6c:ea:f2:c8:1d:6f:68:f3:21:7e:00:59:
78:c6:12:86:56:d2:16:db:a4:47:99:f6:0e:ce:b3:
ec:4b:02:14:0b:0a:34:97:f4:06:06:ab:7a:73:15:
f0:74:a6:2e:69:e2:fc:11:dc:ac:19:b2:70:cd:3d:
89:f7:ec:1e:f4:dd:3f:9c:13:60:5c:14:68:da:8d:
a0:7a:22:07:f9:a1:7a:22:9d:52:40:39:62:3a:47:
43:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1F:52:02:14:F1:25:DB:BA:6D:05:B5:91:01:F7:E9:D8:7E:72:BE
X509v3 Authority Key Identifier:
keyid:0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:28:96:76:fc:48:0b:95:68:c9:8c:c9:09:21:39:e1:60:72:
26:67:df:86:87:c8:e9:5b:42:a8:bd:91:d6:c4:56:4e:6a:0a:
4c:c9:cd:8d:47:a9:8f:5b:f2:12:4d:77:d7:b5:4b:e7:30:97:
4c:dc:db:b6:c9:3f:dc:d1:1e:bb:87:36:ab:d9:ce:ae:41:fb:
9a:0d:a1:a7:5c:b2:21:a2:6c:63:d2:f0:fa:f8:cd:a6:7e:7d:
c4:8d:13:cb:4e:49:f8:32:27:e9:18:e0:bf:92:28:77:bc:e9:
10:fc:e6:b2:8a:10:67:9b:91:8e:6a:83:d0:98:be:6e:a2:30:
ef:60:6e:e6:20:1e:15:62:96:6d:ee:ce:44:9a:16:e3:2a:02:
df:16:ff:97:8f:e5:1b:91:d0:26:79:f8:bc:c7:61:db:95:e6:
6a:20:3c:31:bb:01:af:22:98:c7:bb:79:95:81:79:a2:3c:67:
ad:02:f1:6e:f0:fc:2c:dd:b9:94:46:67:ed:c1:3d:bb:4d:e3:
f7:74:09:d2:9a:b8:1b:50:36:c8:dc:d5:77:39:c6:b5:bc:65:
9b:16:67:4e:c4:9c:5f:fc:b6:c2:15:b9:57:d9:5b:6d:74:5e:
15:62:09:4b:39:5e:4e:9f:22:04:da:96:fb:9c:75:4a:8f:dd:
e1:27:00:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 21:12:23 2026 by rpki-client