Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft
File: dBmPcCK5VgUB20SK9gMB-ihekjY.mft (raw, json)
Hash identifier: S+auca5Eem4AVTmRB9IinPNfX9YDh3bwTyY4w84teRg=
Subject key identifier: DC:66:E1:05:23:68:C7:95:E4:2E:24:9D:6B:78:FB:B0:7A:12:E9:B4
Authority key identifier: 74:19:8F:70:22:B9:56:05:01:DB:44:8A:F6:03:01:FA:28:5E:92:36
Certificate issuer: /CN=74198f7022b9560501db448af60301fa285e9236
Certificate serial: 019FA4BC84AAB10E220E16C338F5A8EDF2F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft
Manifest number: 19D5
Signing time: Mon 27 Jul 2026 18:00:45 +0000
Manifest this update: Mon 27 Jul 2026 18:00:45 +0000
Manifest next update: Tue 28 Jul 2026 18:00:45 +0000
Files and hashes: 1: dBmPcCK5VgUB20SK9gMB-ihekjY.crl (hash: JwTvH3HfrTlQTxTt5jhgbMkYWyRdONV1cbIuwBEubFU=)
2: x-8swSoHWXn2gEZTtgRDy-vs_DM.roa (hash: ylAYgviMfyC3A9eoEgIb+VgNLg1iORRgtmKdI3QPLJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:bc:84:aa:b1:0e:22:0e:16:c3:38:f5:a8:ed:f2:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74198f7022b9560501db448af60301fa285e9236
Validity
Not Before: Jul 27 18:00:45 2026 GMT
Not After : Jul 28 18:00:45 2026 GMT
Subject: CN=dc66e1052368c795e42e249d6b78fbb07a12e9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4e:9b:d5:09:5a:94:ff:2d:9b:e0:56:30:ac:
0a:63:7f:b1:f3:37:55:9a:0d:1b:92:e5:6b:f7:85:
61:f3:4d:b7:da:be:a0:b7:6b:8a:b8:8c:15:a6:79:
02:ad:55:8f:2f:dc:59:63:d5:7a:1a:3b:3b:40:5b:
3b:bb:9f:be:fb:74:03:76:96:77:f0:f0:9b:93:b9:
88:60:5c:00:2c:36:f4:c2:36:65:9d:65:70:d1:57:
53:f3:c1:6e:dd:13:8d:af:10:11:4c:ae:a2:33:04:
9e:6c:97:f5:bd:71:5a:5c:4e:da:74:e2:9f:3b:65:
f9:d6:d0:aa:00:5b:dd:07:d0:0c:f5:fd:ab:3c:20:
ab:48:be:bc:89:b4:fc:eb:5b:64:bb:21:8e:48:a9:
25:df:ce:7a:68:d1:57:eb:5b:3e:dd:bf:ff:c4:fa:
4d:9c:00:51:fe:46:57:99:6b:bd:dc:95:32:f5:c0:
43:b0:de:70:bb:e2:d0:cb:99:52:7c:c3:18:7e:67:
05:14:c2:f7:85:d7:b6:91:89:0c:f4:3f:d3:d5:3e:
39:fc:91:5a:cb:30:56:e0:5a:4f:1f:e1:88:5f:02:
6c:ac:61:02:ad:f9:0a:c4:b5:e8:c6:41:29:15:79:
3f:18:fc:b7:4a:fd:2d:bc:f1:65:76:8b:4a:ce:7e:
57:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:66:E1:05:23:68:C7:95:E4:2E:24:9D:6B:78:FB:B0:7A:12:E9:B4
X509v3 Authority Key Identifier:
keyid:74:19:8F:70:22:B9:56:05:01:DB:44:8A:F6:03:01:FA:28:5E:92:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:19:7c:68:0f:75:69:d6:b9:0c:88:07:fc:95:6b:38:86:4a:
69:98:94:a7:88:50:44:10:02:f5:fe:fc:60:a5:b5:e8:f0:4d:
dc:9f:e2:0d:42:d5:fb:23:e5:f0:e8:85:b5:b0:94:bf:a7:bf:
79:1b:11:c4:2c:4f:50:69:41:c0:4c:0b:4b:c0:77:5c:71:1a:
fb:a3:65:7c:41:49:39:dd:eb:86:17:3c:c9:4b:4f:4f:94:51:
c2:5c:0d:e1:13:68:7c:27:6d:ca:a2:6b:01:96:4f:f3:dc:60:
50:bf:aa:7c:61:dd:67:46:7d:86:b0:8d:cb:ea:f6:8b:06:74:
48:a2:d9:5e:1a:74:32:22:3a:34:a0:5b:ec:ad:d7:19:7a:5d:
c3:a7:79:63:78:0c:ae:6b:44:ea:07:0f:7d:99:bf:25:22:57:
61:af:0c:51:49:93:2e:e5:ba:8b:fd:f4:07:9a:d5:4a:4c:69:
29:0e:8a:b9:d3:07:12:ea:09:8a:93:83:8c:19:f5:f5:f8:5d:
91:f0:cb:aa:0a:7f:2c:01:c3:74:17:54:73:f8:cb:1b:86:b5:
61:0d:11:c1:93:ef:33:f9:52:ba:64:37:b7:1d:f6:23:69:f1:
20:21:74:bd:67:0d:f9:c0:9d:e3:d3:61:f1:34:16:db:84:38:
d9:2f:d2:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+kvISqsQ4iDhbDOPWo7fLzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MTk4ZjcwMjJiOTU2MDUwMWRiNDQ4YWY2MDMwMWZhMjg1
ZTkyMzYwHhcNMjYwNzI3MTgwMDQ1WhcNMjYwNzI4MTgwMDQ1WjAzMTEwLwYDVQQD
EyhkYzY2ZTEwNTIzNjhjNzk1ZTQyZTI0OWQ2Yjc4ZmJiMDdhMTJlOWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp06b1QlalP8tm+BWMKwKY3+x8zdV
mg0bkuVr94Vh80232r6gt2uKuIwVpnkCrVWPL9xZY9V6Gjs7QFs7u5+++3QDdpZ3
8PCbk7mIYFwALDb0wjZlnWVw0VdT88Fu3RONrxARTK6iMwSebJf1vXFaXE7adOKf
O2X51tCqAFvdB9AM9f2rPCCrSL68ibT861tkuyGOSKkl3856aNFX61s+3b//xPpN
nABR/kZXmWu93JUy9cBDsN5wu+LQy5lSfMMYfmcFFML3hde2kYkM9D/T1T45/JFa
yzBW4FpPH+GIXwJsrGECrfkKxLXoxkEpFXk/GPy3Sv0tvPFldotKzn5XqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxm4QUjaMeV5C4knWt4+7B6Eum0MB8GA1UdIwQY
MBaAFHQZj3AiuVYFAdtEivYDAfooXpI2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEJtUGNDSzVWZ1VCMjBTSzlnTUItaWhla2pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8xYmU1ZTEtNTZiNC00YzY2LWJlYWIt
NmYxNjM5NjZhZjhiLzEvZEJtUGNDSzVWZ1VCMjBTSzlnTUItaWhla2pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8xYmU1ZTEtNTZiNC00YzY2LWJlYWItNmYxNjM5NjZhZjhi
LzEvZEJtUGNDSzVWZ1VCMjBTSzlnTUItaWhla2pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJxl8aA91
ada5DIgH/JVrOIZKaZiUp4hQRBAC9f78YKW16PBN3J/iDULV+yPl8OiFtbCUv6e/
eRsRxCxPUGlBwEwLS8B3XHEa+6NlfEFJOd3rhhc8yUtPT5RRwlwN4RNofCdtyqJr
AZZP89xgUL+qfGHdZ0Z9hrCNy+r2iwZ0SKLZXhp0MiI6NKBb7K3XGXpdw6d5Y3gM
rmtE6gcPfZm/JSJXYa8MUUmTLuW6i/30B5rVSkxpKQ6KudMHEuoJipODjBn19fhd
kfDLqgp/LAHDdBdUc/jLG4a1YQ0RwZPvM/lSumQ3tx32I2nxICF0vWcN+cCd49Nh
8TQW24Q42S/Siw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 21:32:16 2026 by rpki-client