Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft
File: dhrP1knI7q2FUZQngfoW9o29EPM.mft (raw, json)
Hash identifier: +fQpli63iu4UwkkBIyGv+8uqgY+DaOwSXPF99v0x/ec=
Subject key identifier: 9F:48:12:AB:6F:B0:43:0C:B6:63:A5:3B:31:71:4A:2A:A0:B3:04:8F
Authority key identifier: 76:1A:CF:D6:49:C8:EE:AD:85:51:94:27:81:FA:16:F6:8D:BD:10:F3
Certificate issuer: /CN=761acfd649c8eead8551942781fa16f68dbd10f3
Certificate serial: 019FA1F2A64E7F1DDC7BAEDB3DF2AF890953
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhrP1knI7q2FUZQngfoW9o29EPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft
Manifest number: 19D1
Signing time: Mon 27 Jul 2026 05:01:01 +0000
Manifest this update: Mon 27 Jul 2026 05:01:01 +0000
Manifest next update: Tue 28 Jul 2026 05:01:01 +0000
Files and hashes: 1: 4ZPiF2VO9a8aU0a0A0t3ypNdZ_4.roa (hash: T/Mc1/RVrNSXXxPaHTxn7Si+vyAXxTkGBmRnuF/YEqM=)
2: dhrP1knI7q2FUZQngfoW9o29EPM.crl (hash: IJ+tl6DVtVIaDa2RQcLNCVOjBJXHzZr8YazKYmAxGTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhrP1knI7q2FUZQngfoW9o29EPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:a6:4e:7f:1d:dc:7b:ae:db:3d:f2:af:89:09:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761acfd649c8eead8551942781fa16f68dbd10f3
Validity
Not Before: Jul 27 05:01:01 2026 GMT
Not After : Jul 28 05:01:01 2026 GMT
Subject: CN=9f4812ab6fb0430cb663a53b31714a2aa0b3048f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:87:91:c0:ff:6e:e5:ee:06:3c:dd:be:e8:d7:
85:b8:6d:92:87:31:bb:25:0c:0e:23:9d:68:3b:e3:
f7:90:c0:a0:8b:62:8a:03:79:02:62:3b:ca:42:36:
33:ae:44:4c:c9:0f:ee:50:a5:c0:fd:9d:92:ab:84:
f2:0a:59:ff:6c:3b:b3:61:d6:12:6c:e1:18:9a:f6:
49:37:d3:9c:8a:2c:dd:ec:d9:15:1f:54:2c:84:fa:
0d:79:6b:1d:0d:73:34:9b:f1:53:4d:1f:9d:23:51:
03:ad:5b:5f:fe:7e:60:c9:9f:00:33:02:33:a7:ea:
c3:80:e9:c1:57:ec:97:fa:fd:f9:99:31:64:74:c1:
21:88:87:af:6a:37:45:7c:5b:91:f7:f0:d2:c6:bf:
12:d5:d0:6c:a6:cc:57:57:ec:4d:10:cb:73:14:8a:
28:9b:1b:03:37:4f:31:fb:12:14:3c:67:cd:95:1a:
b4:95:0e:cb:57:65:8f:55:e5:f6:05:90:05:cd:ed:
9c:d3:fc:f7:0e:3c:46:64:15:f5:35:eb:61:00:26:
73:ac:71:ad:99:e2:f6:3c:1c:98:d6:74:d3:9f:f5:
a9:86:21:da:96:4f:8f:2d:bb:f9:51:16:21:22:ba:
1f:ab:b4:1a:67:e8:2b:34:9e:b8:74:7a:c5:4b:df:
0a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:48:12:AB:6F:B0:43:0C:B6:63:A5:3B:31:71:4A:2A:A0:B3:04:8F
X509v3 Authority Key Identifier:
keyid:76:1A:CF:D6:49:C8:EE:AD:85:51:94:27:81:FA:16:F6:8D:BD:10:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhrP1knI7q2FUZQngfoW9o29EPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:95:ec:a8:95:83:3a:24:99:43:17:73:6b:7b:85:7d:ef:65:
f6:68:5f:7a:a4:39:8a:65:44:02:af:ac:4c:b1:cd:8c:50:05:
0f:21:16:26:b6:54:2b:bf:d1:04:d5:9b:97:c9:40:ad:bd:d9:
c2:67:ef:6c:58:0b:f6:10:f3:82:7f:21:7f:f2:89:cc:96:41:
d9:8f:c1:70:79:fb:3b:98:3f:e7:cf:68:a3:65:89:5b:f1:fc:
73:8a:6b:25:ce:49:af:04:c9:fc:78:68:a1:e1:f5:50:36:50:
68:de:8f:9d:63:96:4d:45:ee:ba:96:c3:bd:41:e7:10:e7:ad:
c6:07:77:be:49:69:41:50:87:7d:da:40:8d:15:4a:f3:01:4f:
eb:f9:5a:b8:59:34:52:6b:a4:93:32:63:59:a1:6d:56:dc:65:
64:ce:93:a2:80:a2:f8:53:27:c3:36:f9:03:66:d4:34:2c:e8:
20:10:95:0d:d0:7f:a5:c3:8f:1d:78:60:35:57:06:0d:ea:aa:
7f:65:9c:ba:24:23:10:eb:e2:d6:6d:c7:b3:a8:3e:20:18:58:
38:7d:73:9a:68:a5:b5:b7:ac:57:f2:f1:2f:f7:c1:18:c9:95:
08:c5:89:63:c4:64:28:0d:aa:85:ef:47:34:b0:1f:20:a3:91:
c7:46:52:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+h8qZOfx3ce67bPfKviQlTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MWFjZmQ2NDljOGVlYWQ4NTUxOTQyNzgxZmExNmY2OGRi
ZDEwZjMwHhcNMjYwNzI3MDUwMTAxWhcNMjYwNzI4MDUwMTAxWjAzMTEwLwYDVQQD
Eyg5ZjQ4MTJhYjZmYjA0MzBjYjY2M2E1M2IzMTcxNGEyYWEwYjMwNDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4eRwP9u5e4GPN2+6NeFuG2ShzG7
JQwOI51oO+P3kMCgi2KKA3kCYjvKQjYzrkRMyQ/uUKXA/Z2Sq4TyCln/bDuzYdYS
bOEYmvZJN9Ociizd7NkVH1QshPoNeWsdDXM0m/FTTR+dI1EDrVtf/n5gyZ8AMwIz
p+rDgOnBV+yX+v35mTFkdMEhiIevajdFfFuR9/DSxr8S1dBspsxXV+xNEMtzFIoo
mxsDN08x+xIUPGfNlRq0lQ7LV2WPVeX2BZAFze2c0/z3DjxGZBX1NethACZzrHGt
meL2PByY1nTTn/WphiHalk+PLbv5URYhIrofq7QaZ+grNJ64dHrFS98KDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9IEqtvsEMMtmOlOzFxSiqgswSPMB8GA1UdIwQY
MBaAFHYaz9ZJyO6thVGUJ4H6FvaNvRDzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGhyUDFrbkk3cTJGVVpRbmdmb1c5bzI5RVBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC82ZjkyODMtYjRkNC00NGNkLWE2OWIt
YzczMjAxZGY5OTk1LzEvZGhyUDFrbkk3cTJGVVpRbmdmb1c5bzI5RVBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC82ZjkyODMtYjRkNC00NGNkLWE2OWItYzczMjAxZGY5OTk1
LzEvZGhyUDFrbkk3cTJGVVpRbmdmb1c5bzI5RVBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfJXsqJWD
OiSZQxdza3uFfe9l9mhfeqQ5imVEAq+sTLHNjFAFDyEWJrZUK7/RBNWbl8lArb3Z
wmfvbFgL9hDzgn8hf/KJzJZB2Y/BcHn7O5g/589oo2WJW/H8c4prJc5JrwTJ/Hho
oeH1UDZQaN6PnWOWTUXuupbDvUHnEOetxgd3vklpQVCHfdpAjRVK8wFP6/lauFk0
UmukkzJjWaFtVtxlZM6TooCi+FMnwzb5A2bUNCzoIBCVDdB/pcOPHXhgNVcGDeqq
f2WcuiQjEOvi1m3Hs6g+IBhYOH1zmmiltbesV/LxL/fBGMmVCMWJY8RkKA2qhe9H
NLAfIKORx0ZSfA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 07:19:42 2026 by rpki-client