Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
File: dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft (raw, json)
Hash identifier: qhgTH/K2eJwFp8trNxoihLdfrytRkqn670Wy6M5LA5o=
Subject key identifier: BE:13:52:DE:2A:E2:C3:68:99:9A:F1:04:08:C6:32:FB:D0:7E:97:7B
Authority key identifier: 74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
Certificate issuer: /CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Certificate serial: 019FA2CE072E80F7FA83F0B2C1701B033044
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
Manifest number: 1962
Signing time: Mon 27 Jul 2026 09:00:38 +0000
Manifest this update: Mon 27 Jul 2026 09:00:38 +0000
Manifest next update: Tue 28 Jul 2026 09:00:38 +0000
Files and hashes: 1: Fq9jYIALK48Q3aXTspZ-EOBUjAk.roa (hash: +W+cPf/LWfCqktynR8k96IJai5gjN2wCMM+/QBq3qWs=)
2: LfVminLL1XTSWFhWFnt35YabzGc.roa (hash: sYYNW+Zpe52/Yb5LHf4cYWyg31t2neiSAy7KvTU4FSg=)
3: dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl (hash: tYXTBseL7CSEerh20iV892Ec6ffF+374+VZe/ofeGNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:07:2e:80:f7:fa:83:f0:b2:c1:70:1b:03:30:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Validity
Not Before: Jul 27 09:00:38 2026 GMT
Not After : Jul 28 09:00:38 2026 GMT
Subject: CN=be1352de2ae2c368999af10408c632fbd07e977b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d7:37:3e:e0:31:9f:73:f7:07:e7:51:74:2d:
19:a0:7c:b0:33:b9:db:ce:2b:76:39:0c:65:32:0d:
fe:e3:44:b3:ed:6e:6c:43:73:c0:37:c8:92:33:12:
ec:98:09:73:b0:e1:ce:52:c5:2b:f1:4f:4e:97:35:
38:20:db:ac:10:99:fe:d0:73:ba:46:c6:e9:f2:f4:
11:06:1e:c0:80:0e:40:ba:21:4c:74:3b:7c:5e:d6:
21:bc:95:93:02:40:77:2d:2b:e9:d4:cd:bd:b9:2e:
6a:5f:5b:da:15:56:19:80:a2:5e:44:ed:b0:e0:1c:
8d:10:98:19:72:d9:9d:13:ab:f0:15:05:31:b7:75:
21:a5:99:1b:4c:9d:bf:30:81:88:f1:87:ce:c5:c5:
a6:26:7d:3a:86:ba:d2:e2:66:50:e5:12:6d:39:9b:
1a:39:73:71:32:49:a5:1e:81:65:f0:21:33:03:a2:
6d:c2:7f:ff:99:a1:e4:75:cc:54:f1:a9:d5:da:0c:
40:8e:d4:cc:b7:a2:65:30:13:20:55:8e:ab:18:d4:
34:bc:ea:1d:f7:4e:45:ca:4a:55:11:a9:dd:61:0a:
69:ff:39:6f:a7:78:21:5c:82:f4:2b:68:ec:01:e2:
29:5a:de:8a:3b:74:08:18:6d:68:f8:02:cb:c5:52:
d5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:13:52:DE:2A:E2:C3:68:99:9A:F1:04:08:C6:32:FB:D0:7E:97:7B
X509v3 Authority Key Identifier:
keyid:74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:03:cf:ec:0e:9e:9a:0b:c8:fc:1f:ee:2a:b1:dd:90:ea:ba:
2e:6d:1b:c4:19:42:01:af:1a:13:5e:de:20:5b:60:29:f0:b7:
0d:1e:e0:d8:40:7f:4f:57:0e:bc:24:d1:ac:08:71:38:40:79:
3e:b8:21:f9:6a:55:e1:b5:17:03:3c:dc:3e:17:4d:29:f1:cb:
8c:ba:bd:26:bc:0c:03:f8:b9:cd:30:cd:be:3d:03:2d:a0:1a:
96:24:f5:a6:8f:86:f3:b5:ee:72:da:fc:2d:d1:cd:10:65:91:
89:a8:34:02:7b:b8:9a:40:b6:46:a5:7f:74:1e:8f:8f:fe:b6:
c5:73:74:f3:3b:c0:74:e5:20:5f:da:89:70:5f:49:1f:6a:fe:
5a:25:b5:11:30:1c:4a:a1:b0:f4:b7:e4:3b:5b:1c:0c:0d:a9:
8b:c7:93:cc:1e:af:29:65:72:3d:0a:46:b8:6a:45:ba:82:cb:
46:53:0e:74:db:31:82:cf:1b:65:2b:b1:f1:92:ba:48:b6:f5:
c3:b6:85:b5:56:d1:86:5b:5e:80:48:0f:37:5d:59:7a:93:7b:
fa:29:06:ca:81:9e:51:c4:14:94:b6:bf:a8:6e:e7:33:4f:3a:
8b:65:91:3a:53:ce:db:71:4f:80:90:a5:e2:b3:ac:2c:49:25:
bc:a1:a2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:03:59 2026 by rpki-client