Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
File: d73XXy78JE-GoyGxUOYpNqFAKds.mft (raw, json)
Hash identifier: 5cU8aJkBKimzfOJMXM5OlJZcIZJoAejfdiKcPMPvxIk=
Subject key identifier: 2B:7C:CF:B2:E6:57:BF:CA:12:3E:5E:B4:CE:DB:37:DA:D5:93:4E:DB
Authority key identifier: 77:BD:D7:5F:2E:FC:24:4F:86:A3:21:B1:50:E6:29:36:A1:40:29:DB
Certificate issuer: /CN=77bdd75f2efc244f86a321b150e62936a14029db
Certificate serial: 019F374E3902F5599854CEEBA4C70BBF7170
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
Manifest number: 1998
Signing time: Mon 06 Jul 2026 12:01:40 +0000
Manifest this update: Mon 06 Jul 2026 12:01:40 +0000
Manifest next update: Tue 07 Jul 2026 12:01:40 +0000
Files and hashes: 1: UeHrvynok458nbOMxnfDo2XoOCg.roa (hash: mBftsmERWzpGKsnXFmodVRrKomChx92ReubqAs5GrrQ=)
2: d73XXy78JE-GoyGxUOYpNqFAKds.crl (hash: xrlPvuw1MrkoFz+hluyqK158OktfGur8l/cVXGtnQjk=)
3: jMDauzNgql38unoatB3JO5Ml3iQ.roa (hash: Bmlq4o2YkAwlEIUrRalLb7yAT8WXu+XhxwnwkhpOnOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 12:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:4e:39:02:f5:59:98:54:ce:eb:a4:c7:0b:bf:71:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bdd75f2efc244f86a321b150e62936a14029db
Validity
Not Before: Jul 6 12:01:40 2026 GMT
Not After : Jul 7 12:01:40 2026 GMT
Subject: CN=2b7ccfb2e657bfca123e5eb4cedb37dad5934edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d2:d8:7a:e4:cb:4b:8e:82:ea:81:e5:88:b6:
25:04:a3:c6:a5:3f:cf:80:ab:92:e5:f1:a9:7c:af:
36:17:ab:6f:2d:b5:83:30:90:19:a7:53:e7:38:b5:
5a:bf:b1:5a:16:eb:10:07:43:d0:14:ac:4c:6f:5b:
ee:16:97:5f:c8:ba:9c:c0:37:84:23:90:d2:56:4f:
24:14:86:b7:d9:b7:2c:96:87:fd:8f:62:8d:93:ce:
ba:f8:36:0b:ae:60:b6:3d:7a:86:d9:49:34:d8:a0:
eb:00:d2:57:a8:5b:10:1f:62:33:41:33:6b:8b:34:
89:27:7b:cf:09:24:5f:55:88:0f:5e:aa:67:7f:aa:
1e:fd:56:c4:79:49:62:73:6f:3a:d0:9b:7f:a1:21:
7c:3e:09:73:c9:07:32:fe:b0:7a:b1:f2:b1:2a:77:
cc:cb:9d:1e:7c:a9:5f:f1:36:6d:0b:72:89:f3:cb:
c9:72:f6:bb:d6:3d:04:b7:44:8f:cf:7e:c1:c8:53:
79:3f:77:28:dc:88:9a:ac:ac:aa:cf:2f:12:61:14:
80:f3:2d:a4:c2:6f:1f:dc:39:3a:84:f9:62:84:1b:
f5:be:c7:8a:8a:12:42:f3:c9:58:40:a2:33:3d:b5:
84:d7:33:7d:26:7d:14:c8:91:50:ce:02:71:2c:11:
45:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7C:CF:B2:E6:57:BF:CA:12:3E:5E:B4:CE:DB:37:DA:D5:93:4E:DB
X509v3 Authority Key Identifier:
keyid:77:BD:D7:5F:2E:FC:24:4F:86:A3:21:B1:50:E6:29:36:A1:40:29:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:38:70:d6:66:1e:39:83:f5:94:33:ba:17:ce:f2:2c:1d:f2:
75:b6:09:57:c8:01:da:1e:79:cf:18:50:17:bb:c7:1c:f7:b5:
d6:19:8e:45:07:68:a1:95:6f:b5:c9:99:49:46:b1:b8:77:9a:
b9:d4:65:5f:c3:7c:30:54:88:2a:2c:79:2a:10:82:4a:50:64:
cf:90:37:1c:a9:ff:9d:a0:a8:88:a7:39:a8:e4:cb:4c:da:5f:
77:1e:f4:47:35:85:1b:79:ab:77:bd:2d:6f:a5:43:7d:b5:06:
2c:9c:29:50:ab:ef:e4:c9:40:25:89:c6:18:81:96:d8:41:ea:
5d:32:f9:86:5d:99:3d:de:da:a9:9a:b6:36:4b:47:40:17:02:
43:04:c5:f2:3f:c5:71:5d:2d:ee:83:e6:9d:62:41:af:ce:d8:
09:dc:14:36:a9:fd:d0:cf:dd:79:11:2d:f9:71:66:ed:46:90:
94:2c:24:d8:dc:5b:de:0b:21:5f:a8:fa:08:ff:24:2e:37:38:
ee:1a:ac:25:11:81:2b:8f:f8:98:68:2b:26:92:ed:65:9c:63:
99:30:3c:5e:36:08:9a:f4:5c:cd:c3:1e:f5:72:c9:93:4a:47:
13:88:ef:60:d2:e2:a3:99:82:a7:99:ce:a5:3e:c9:b4:e9:72:
7b:a5:69:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:15:12 2026 by rpki-client