Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/DVNi1c7cImPJBzUDwu6RT5PzHvI.mft
File: DVNi1c7cImPJBzUDwu6RT5PzHvI.mft (raw, json)
Hash identifier: 84/jZ9gIusHLprjAgwEYxyot4ObNHUZooTpVNGspwoY=
Subject key identifier: F1:C5:1C:5E:6B:11:DE:89:B9:06:F0:57:CF:10:62:C9:EE:A0:17:15
Authority key identifier: 0D:53:62:D5:CE:DC:22:63:C9:07:35:03:C2:EE:91:4F:93:F3:1E:F2
Certificate issuer: /CN=0d5362d5cedc2263c9073503c2ee914f93f31ef2
Certificate serial: 019F85D6CA45E10FEAA1B9E13C88B0D0107A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DVNi1c7cImPJBzUDwu6RT5PzHvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/DVNi1c7cImPJBzUDwu6RT5PzHvI.mft
Manifest number: 3A
Signing time: Tue 21 Jul 2026 18:01:13 +0000
Manifest this update: Tue 21 Jul 2026 18:01:13 +0000
Manifest next update: Wed 22 Jul 2026 18:01:13 +0000
Files and hashes: 1: 3vLigIAmr0enEPBVbFd-Efg6QLM.roa (hash: z47OAtBU59ox9Fv71R6UjtJxoV/Msptr2wMI8Rk4Vlc=)
2: DVNi1c7cImPJBzUDwu6RT5PzHvI.crl (hash: JmKlqhnYyx1uSFoREXV5PMUsTQirFOcilSJsAIqK+SQ=)
3: w82F-_2KUo6780OReWbrcXFgOCI.roa (hash: 2sFKVV9OfbJAOCqpzaEbs0k2EluCBWR6KS26tdOE0SQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/DVNi1c7cImPJBzUDwu6RT5PzHvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/DVNi1c7cImPJBzUDwu6RT5PzHvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DVNi1c7cImPJBzUDwu6RT5PzHvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:ca:45:e1:0f:ea:a1:b9:e1:3c:88:b0:d0:10:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d5362d5cedc2263c9073503c2ee914f93f31ef2
Validity
Not Before: Jul 21 18:01:13 2026 GMT
Not After : Jul 22 18:01:13 2026 GMT
Subject: CN=f1c51c5e6b11de89b906f057cf1062c9eea01715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f5:dc:9f:21:dc:41:56:39:ea:c6:94:f3:bf:
bc:05:ef:cf:3f:34:b2:b3:88:b2:48:db:f5:6b:f6:
d2:f6:c6:00:79:f0:eb:2a:19:03:40:31:68:ca:37:
41:ee:88:c6:7a:8c:ed:ca:18:03:f1:8a:b2:f4:65:
b0:7f:22:88:0b:bb:2a:cb:9b:4f:c2:90:25:85:33:
68:5c:bc:eb:02:4a:5f:b6:76:d4:a5:4f:92:89:78:
4d:3d:06:e9:39:06:72:ce:d5:19:03:96:38:0e:50:
b3:5a:aa:ed:85:75:82:3e:6a:25:8c:27:ad:0a:6a:
9b:72:84:10:cb:75:dd:8c:a1:6c:d1:47:e2:11:51:
4c:df:c9:f4:03:42:01:13:0d:5b:17:b8:76:e0:5d:
4d:84:40:ca:4e:5c:e5:8f:98:37:84:8a:d7:9b:d0:
21:70:32:3c:50:b7:8d:1c:0e:f8:01:37:59:3a:e6:
f2:60:0c:42:89:f7:6b:76:90:51:9c:17:37:4b:43:
03:9b:f5:63:d3:f2:78:9d:8d:31:b8:b6:07:88:0f:
3b:8f:fc:76:2c:b7:18:97:2a:cd:7d:91:4c:de:f8:
2f:7b:ea:87:02:c2:73:f7:b9:99:67:f0:cd:03:b7:
d2:17:03:fb:fa:52:23:58:0e:8f:ee:51:95:be:47:
cf:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C5:1C:5E:6B:11:DE:89:B9:06:F0:57:CF:10:62:C9:EE:A0:17:15
X509v3 Authority Key Identifier:
keyid:0D:53:62:D5:CE:DC:22:63:C9:07:35:03:C2:EE:91:4F:93:F3:1E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DVNi1c7cImPJBzUDwu6RT5PzHvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/DVNi1c7cImPJBzUDwu6RT5PzHvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/DVNi1c7cImPJBzUDwu6RT5PzHvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:45:89:08:e2:70:bb:66:7f:80:87:0b:2d:a7:d5:2a:9a:76:
d4:df:e6:94:81:0b:9d:04:41:33:f5:af:c6:0d:e4:d8:61:d3:
c2:e3:c6:52:be:9a:29:9d:1d:02:cb:da:e2:90:50:73:15:16:
97:84:92:04:6e:b3:54:93:ee:41:5b:0d:41:52:b8:d2:ca:fc:
14:70:fa:d9:44:c1:c5:60:05:5c:a8:a3:89:5a:a3:59:24:2b:
fd:87:5a:72:51:2a:4f:bd:13:13:2c:1a:9e:4a:4f:9f:55:68:
dc:34:a9:a3:66:ed:76:36:3d:3a:49:3c:e2:77:27:90:af:f8:
1b:1e:ec:2b:b6:21:41:76:e4:72:b0:f8:2c:6d:6d:53:89:f8:
2e:c4:99:13:a2:4e:fd:e8:9c:1c:9c:70:ed:7c:74:f8:4d:33:
b0:d2:88:76:38:1a:f0:9e:24:65:71:91:3b:eb:a8:b8:22:30:
0d:67:00:c2:2a:24:86:b2:58:d4:37:95:04:1a:8f:cf:41:5f:
9f:89:3d:be:93:d1:ff:85:74:a0:79:25:f9:51:10:94:79:ec:
eb:67:17:10:60:01:50:96:8f:81:ef:67:50:66:37:5f:c9:86:
b7:0c:e6:85:e1:56:41:3a:0b:00:b0:15:c5:85:d5:cd:cd:b2:
51:ba:87:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:08:24 2026 by rpki-client