Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
File: dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft (raw, json)
Hash identifier: WPNblCHR/KdAMrdM6L5yhqlwnhYGxa2tuVFOJyqw/2k=
Subject key identifier: CA:E4:DD:80:1B:31:F5:E2:DF:C4:E0:E6:EA:75:81:86:34:42:E4:9F
Authority key identifier: 74:A5:9B:7F:B4:E0:34:F6:77:75:F2:87:5E:FB:FC:9E:FF:24:7E:8E
Certificate issuer: /CN=74a59b7fb4e034f67775f2875efbfc9eff247e8e
Certificate serial: 019FA229B0CA253003074B721B3C3D16040B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
Manifest number: 12AD
Signing time: Mon 27 Jul 2026 06:01:08 +0000
Manifest this update: Mon 27 Jul 2026 06:01:08 +0000
Manifest next update: Tue 28 Jul 2026 06:01:08 +0000
Files and hashes: 1: dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl (hash: GbT3/ETEA+5QA6+SNJZQzA9bLAeuyphvn3BEXtKYpDk=)
2: uWzsh13780WlQ44M3rfglByUCB8.roa (hash: yGLdoL/Xc8KKRv7LLREr+ACqHv9uN9Icl3Uh1WiiuFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:b0:ca:25:30:03:07:4b:72:1b:3c:3d:16:04:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a59b7fb4e034f67775f2875efbfc9eff247e8e
Validity
Not Before: Jul 27 06:01:08 2026 GMT
Not After : Jul 28 06:01:08 2026 GMT
Subject: CN=cae4dd801b31f5e2dfc4e0e6ea7581863442e49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c7:91:78:9f:d6:50:66:57:57:a5:fc:f2:c6:
c4:76:df:7f:5a:78:b2:25:a0:74:cf:16:95:d2:bb:
ab:f6:a8:0c:45:52:eb:a2:79:60:9b:54:1f:85:bc:
1a:9a:22:67:61:2f:fe:dc:9e:59:82:aa:0e:1b:7b:
2b:ae:2d:8f:70:b9:1e:52:99:35:e9:f6:63:66:26:
36:ce:ff:ed:28:d1:b7:ff:82:dc:ef:0d:4c:b3:32:
5a:44:20:eb:33:0e:d5:1d:74:79:35:f0:5b:f6:58:
32:c8:68:02:b5:83:8b:04:7f:aa:d5:65:3b:b2:eb:
50:69:c0:5c:52:47:d6:a9:c8:1f:be:9c:15:a7:c7:
6d:e1:dd:a0:13:b2:56:85:59:1c:0f:7f:cf:1d:10:
bf:73:e9:64:11:bc:d6:8c:13:cb:ab:f1:b0:bf:d3:
1c:f8:a4:1f:63:68:36:11:fe:46:2f:d5:10:73:68:
4b:cd:39:d2:4e:bd:85:7a:dd:74:45:55:8a:56:7b:
9e:d2:e7:20:92:6a:70:fa:16:09:a3:6d:9d:25:78:
45:5a:11:99:7a:94:e7:e5:13:6e:fb:49:35:12:f2:
6d:7a:50:f1:bb:71:22:9e:ea:a4:08:ac:cc:40:93:
ed:0d:8e:2b:4e:a3:b0:7d:de:a4:e3:51:ce:3d:c8:
0f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E4:DD:80:1B:31:F5:E2:DF:C4:E0:E6:EA:75:81:86:34:42:E4:9F
X509v3 Authority Key Identifier:
keyid:74:A5:9B:7F:B4:E0:34:F6:77:75:F2:87:5E:FB:FC:9E:FF:24:7E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:6a:b0:29:e2:01:83:25:10:89:18:53:75:b6:e9:b1:90:f8:
9a:76:65:61:e7:3c:43:01:9a:94:14:64:c4:45:c0:ea:c7:da:
ab:a9:7e:6b:db:42:95:8f:23:e0:24:9b:40:e8:8d:cb:bf:e1:
d9:ad:ba:58:3e:cd:54:1e:37:5e:18:c2:06:96:7f:5c:38:9c:
d2:7f:b2:a7:67:db:74:ca:a9:bb:30:e1:6c:2e:74:37:7d:2f:
17:aa:ce:c4:f4:e7:15:db:fc:b2:24:72:32:30:19:db:ea:a8:
6e:ec:72:10:7e:50:f5:98:17:ee:83:52:e1:f0:80:18:b1:68:
a2:c6:52:6e:b5:59:ed:d5:21:1e:5e:db:bc:c1:bb:2e:a6:e5:
34:0d:26:ea:24:23:c6:03:0f:7c:36:98:8a:f8:4c:64:27:fc:
a7:07:60:6e:a2:d6:bd:0d:c9:e9:27:fa:2f:56:1e:63:fc:b4:
f0:66:4f:e5:9a:84:49:93:1f:35:8e:21:40:96:d7:85:d8:ec:
6c:cf:8d:0b:34:8d:cb:78:5c:2c:5a:9c:e1:1b:df:f6:df:2c:
88:75:e6:a7:97:dc:e9:d9:78:d1:cf:7d:5b:6b:f6:b5:97:0b:
7e:0f:d4:0b:51:ab:a0:1c:d0:24:2c:26:8b:a3:70:e8:8c:fe:
ee:fc:88:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:19:20 2026 by rpki-client