Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft
File: Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft (raw, json)
Hash identifier: l7gTjmgobhzC9R/XQoJFrBD+u575kewx0Qm9Z8l32CA=
Subject key identifier: 87:EA:1A:A3:B7:76:C1:2D:06:00:D4:8E:15:87:71:49:BE:AE:19:AE
Authority key identifier: 0E:CB:EF:E2:0E:18:86:6B:8A:49:0C:95:EE:45:99:26:43:BE:D6:9D
Certificate issuer: /CN=0ecbefe20e18866b8a490c95ee45992643bed69d
Certificate serial: 019F9DDEEF0711FFC9CF36FAB2721D94B4BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft
Manifest number: 187C
Signing time: Sun 26 Jul 2026 10:01:00 +0000
Manifest this update: Sun 26 Jul 2026 10:01:00 +0000
Manifest next update: Mon 27 Jul 2026 10:01:00 +0000
Files and hashes: 1: Dsvv4g4YhmuKSQyV7kWZJkO-1p0.crl (hash: tPlN7GBeXlEC78nOHm4Tl7oPxffZy93Qx+IHQWFVmQ8=)
2: vOLYbuZI2HiAQAMspaYJozGTYd4.roa (hash: 2GBF+iOAjgmkpYWuKiOs1PlAzGgzPUynmOp5R9AhrOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 05:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9d:de:ef:07:11:ff:c9:cf:36:fa:b2:72:1d:94:b4:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ecbefe20e18866b8a490c95ee45992643bed69d
Validity
Not Before: Jul 26 10:01:00 2026 GMT
Not After : Jul 27 10:01:00 2026 GMT
Subject: CN=87ea1aa3b776c12d0600d48e15877149beae19ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c4:cc:41:a2:dd:b1:c2:e2:63:aa:81:8a:6c:
cf:93:12:79:a1:e5:e4:f7:b1:bc:ff:1a:9c:c6:de:
48:a7:30:81:19:3a:7f:93:2f:02:dc:8a:d1:10:90:
f5:79:95:bd:b2:e7:1e:04:da:ba:f0:54:66:76:30:
4f:a2:05:6e:05:a6:75:ac:15:6b:6b:ed:b8:90:bc:
77:96:7b:7c:55:1b:26:9e:24:fe:e9:04:1a:3c:8c:
7e:2f:7c:3a:87:43:9b:2e:a5:d9:a7:82:b1:e5:e5:
05:79:54:9b:21:16:52:c1:5e:a0:d0:f9:09:98:cc:
24:84:95:fd:8e:38:79:47:a6:c4:db:b3:b5:b5:2d:
12:10:7e:cf:15:49:cd:7e:f4:2d:34:16:bc:c9:68:
32:de:f3:2c:3d:27:b9:6b:ac:5e:3b:31:c1:95:9d:
7e:bd:70:cd:6a:23:ea:61:6e:2c:13:3f:5f:13:2f:
2e:f8:1d:ee:14:37:74:b1:e7:01:6a:c4:6c:8c:4f:
bf:dd:7d:49:2f:c4:68:ce:e9:c1:32:09:91:20:21:
47:14:6a:83:86:0e:f6:2d:fc:a0:f4:b1:f3:e6:80:
a5:2c:c9:cd:88:86:8d:23:52:9a:88:16:bb:a5:07:
c2:3d:33:19:f4:58:3d:51:23:65:e2:1d:2c:bf:2d:
ac:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:EA:1A:A3:B7:76:C1:2D:06:00:D4:8E:15:87:71:49:BE:AE:19:AE
X509v3 Authority Key Identifier:
keyid:0E:CB:EF:E2:0E:18:86:6B:8A:49:0C:95:EE:45:99:26:43:BE:D6:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:5b:be:ef:97:53:9c:41:1b:48:df:62:2b:a4:a3:cb:e5:80:
77:9e:57:b6:b5:fd:80:6f:7e:c1:a2:94:c0:3e:15:b5:cb:1d:
ea:1c:bf:70:23:cb:71:ae:1d:1d:1f:76:a5:5a:e6:e0:a4:e7:
e7:31:ca:ab:c8:cb:b8:79:9e:d5:b8:a7:f5:b6:ba:a9:72:0a:
26:6e:06:da:0c:97:8b:fb:bf:6c:cb:d8:ac:d0:43:61:86:6d:
f4:8f:8b:e6:83:7b:e1:f7:47:85:0b:3f:bd:cc:9e:ac:24:e5:
86:d0:ce:53:0c:cb:1e:53:d8:55:ed:65:2d:f9:f3:0d:c0:53:
85:d3:21:92:51:f5:3a:39:83:7c:83:b6:78:f2:f6:b9:b9:2b:
fc:a0:8d:ba:5e:59:80:a8:39:13:d5:1d:9b:74:e2:56:b7:c2:
17:a9:cf:2e:de:52:fa:03:f8:45:25:1d:fc:23:5f:70:be:79:
ea:cb:aa:fa:e9:58:36:43:bc:29:78:70:64:d8:66:eb:6c:88:
31:81:a7:40:7b:29:3f:e2:bc:3c:2b:79:b3:7c:25:36:c1:80:
91:12:8d:cf:e5:6e:1b:84:41:e8:51:90:4e:35:27:de:a3:5a:
99:8d:be:f8:63:1b:e8:dd:7d:bc:fd:1b:b8:2a:5b:d0:ab:81:
9d:f0:94:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 11:57:32 2026 by rpki-client