Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
File: dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft (raw, json)
Hash identifier: MKtuqQnAmG+ep/EDeWnXRcqRU0WdfR+j3ozHhsmsipg=
Subject key identifier: B6:77:AB:44:8C:18:FF:93:7B:D9:8E:59:43:3A:B8:97:06:10:1B:A8
Authority key identifier: 76:51:76:2D:E3:D3:F1:9C:ED:D4:38:B0:3C:F2:39:86:CE:91:72:7F
Certificate issuer: /CN=7651762de3d3f19cedd438b03cf23986ce91727f
Certificate serial: 019F18D6AC6A3658178767F0789A113DCD1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
Manifest number: 198B
Signing time: Tue 30 Jun 2026 14:02:29 +0000
Manifest this update: Tue 30 Jun 2026 14:02:29 +0000
Manifest next update: Wed 01 Jul 2026 14:02:29 +0000
Files and hashes: 1: EHRNG-kpACtEs0ZEWLFTcfb4Kpk.roa (hash: 93XpsB5VKJuRYZMCsqmi8z6M3Wzn065njgcQk7yvI2A=)
2: dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl (hash: ICmZf5ZAVY6uM21DcHSyYogI5R6yaQnck9vVZVtBHbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:ac:6a:36:58:17:87:67:f0:78:9a:11:3d:cd:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7651762de3d3f19cedd438b03cf23986ce91727f
Validity
Not Before: Jun 30 14:02:29 2026 GMT
Not After : Jul 1 14:02:29 2026 GMT
Subject: CN=b677ab448c18ff937bd98e59433ab89706101ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:be:11:a2:b7:8d:c4:aa:68:60:de:7f:f0:c5:
33:e8:68:e9:9c:22:76:ef:44:ea:ad:89:72:3f:6f:
5b:62:f5:36:cc:8d:5e:5d:31:63:a0:90:24:f0:a1:
48:fd:6d:04:08:56:d8:3e:ac:03:1e:f3:c3:d7:de:
3e:7a:9f:c9:8c:ee:a1:27:46:ac:b6:39:67:a3:a4:
51:8b:74:7b:40:dc:7b:e8:a1:13:7e:4c:5c:08:e0:
1c:11:56:77:24:28:17:75:a6:93:15:47:32:fd:d4:
df:25:d5:07:17:90:1d:67:d8:70:be:0f:7a:57:bd:
79:6e:77:31:d1:ec:6e:de:c6:4d:f7:3a:b2:a6:2e:
9f:9e:9b:15:cb:2f:f1:2a:55:1b:fa:57:a7:68:cb:
59:f1:f2:13:0c:a5:bc:67:fe:11:5c:93:89:5d:63:
d8:bb:4c:50:09:7e:fc:28:d9:23:79:59:47:ef:47:
24:e4:a1:70:36:b0:bf:fa:9d:d7:90:38:3f:a9:89:
10:cb:95:9e:f8:80:8d:a0:df:09:f5:c6:4d:68:fb:
f6:ae:76:2c:f1:0c:d7:f8:3a:c7:59:f0:4e:1e:f0:
63:d5:c1:13:06:de:18:d0:d4:fb:f7:06:b9:f6:70:
ed:59:a9:ca:17:08:6d:b5:82:d1:cc:89:5e:94:d4:
b6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:77:AB:44:8C:18:FF:93:7B:D9:8E:59:43:3A:B8:97:06:10:1B:A8
X509v3 Authority Key Identifier:
keyid:76:51:76:2D:E3:D3:F1:9C:ED:D4:38:B0:3C:F2:39:86:CE:91:72:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ba:da:68:6c:51:be:b0:ef:97:30:1d:4f:0e:e5:5e:ae:b2:
e2:9f:de:ab:e9:94:12:83:35:87:b7:c0:c0:61:1c:e1:22:e7:
74:75:3f:44:a9:3d:b3:a1:11:89:90:52:93:79:1c:fc:cd:b2:
c5:7d:0a:66:96:e2:b3:49:7c:55:75:5a:78:36:3e:7c:14:4d:
d8:1c:00:51:41:64:19:51:39:50:5f:a8:30:d1:d3:76:f2:54:
57:92:a0:fb:c8:55:f7:43:b8:04:bd:29:47:11:98:fe:72:26:
87:0a:17:af:d2:04:88:fa:2b:8d:8a:ef:6d:a9:96:41:2c:21:
11:ef:45:d4:e0:ef:fe:4f:7f:1e:a5:17:7b:c7:4a:4a:57:94:
c0:a3:5c:bb:ba:7a:ed:25:29:b2:55:60:1c:3c:40:96:04:c6:
99:5c:fc:bc:8c:1c:7b:e6:9a:c9:23:ee:f4:27:78:ba:d4:f5:
b4:67:6b:95:f1:10:7c:11:85:4a:de:b6:89:50:6b:d6:3e:e3:
80:80:24:d1:8b:60:e0:43:ee:51:c7:b9:c3:a2:7d:a8:a7:a9:
cc:01:d0:eb:7b:98:d7:a8:32:9f:5c:5c:b0:d3:4a:72:e7:03:
9e:9f:ae:f4:c6:c6:3b:87:13:9b:6a:b1:8c:f6:b0:09:3f:ae:
15:3f:80:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:33:59 2026 by rpki-client