Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
File: dCsbXAdcPTvfo1JdR2sbKGfCoso.mft (raw, json)
Hash identifier: KNOMizc3Ij/UgYxtwgHGyeXd4zLHP5jDq7DjueJus+o=
Subject key identifier: BA:7C:44:82:BD:4B:0F:56:5E:26:8B:D7:87:30:08:9B:03:51:9D:11
Authority key identifier: 74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA
Certificate issuer: /CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
Certificate serial: 019F1D2104245F38A033FCB1DCE258C50AFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
Manifest number: 16C2
Signing time: Wed 01 Jul 2026 10:02:10 +0000
Manifest this update: Wed 01 Jul 2026 10:02:10 +0000
Manifest next update: Thu 02 Jul 2026 10:02:10 +0000
Files and hashes: 1: dCsbXAdcPTvfo1JdR2sbKGfCoso.crl (hash: +XlULp19Oz+0Po1Wg1L3aIPXwBYO96mUWFlZAuqoUZ4=)
2: h8XV-KgY396KZBJ7Bi9YlZn3ShM.roa (hash: fluQLEMS1tYgpv9diRyw7o5a3GxgE3HkE4V51yJi7a8=)
3: oo1W6F0elMF6_CiE6UvVXxLai4o.roa (hash: t1F5I9ggDgCDZTVdA+hfkYMiN/rTAkrjwkTHtKs69BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 Jul 2026 10:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:21:04:24:5f:38:a0:33:fc:b1:dc:e2:58:c5:0a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
Validity
Not Before: Jul 1 10:02:10 2026 GMT
Not After : Jul 2 10:02:10 2026 GMT
Subject: CN=ba7c4482bd4b0f565e268bd78730089b03519d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0d:00:fd:b3:6f:e7:44:9d:ff:c4:cb:4d:d7:
3b:e0:3d:ac:6f:94:c2:ba:3c:db:28:20:09:37:df:
29:f6:3a:6e:27:86:12:e9:e0:7c:38:c5:b9:4a:4f:
2f:5e:a0:ce:b6:cc:74:1e:16:b8:22:e1:2f:2a:7a:
92:88:8f:ea:68:bb:98:6d:fd:c7:58:ac:0d:dd:66:
58:49:44:50:e4:5e:84:68:0f:d4:9f:04:41:d8:0f:
3b:ca:1e:d3:c5:c3:8e:fc:fe:25:95:f4:82:c9:24:
33:07:78:f5:18:0e:19:b2:1d:a0:54:91:e5:3f:91:
c5:5a:ec:ba:8a:7d:63:54:b6:c6:49:54:f7:41:60:
21:e1:64:fc:7e:96:9c:2f:88:d8:a5:f8:12:37:8d:
28:96:4b:f8:3c:01:12:df:22:7d:f9:7d:ab:8e:6f:
1b:50:d7:fc:8f:28:75:69:a0:62:fc:71:36:4f:d4:
26:b4:2f:86:36:65:7a:cd:1e:7e:41:df:a1:6b:cc:
6d:77:6f:8c:91:45:e1:97:31:53:e2:1a:89:25:40:
ef:ff:d9:bb:da:ac:2e:7b:90:93:ac:9a:04:97:c6:
00:cb:da:5a:9b:95:19:e7:69:3d:f8:e6:d1:2f:39:
ae:65:f1:7a:f4:fb:99:56:40:0e:24:c5:70:32:07:
86:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7C:44:82:BD:4B:0F:56:5E:26:8B:D7:87:30:08:9B:03:51:9D:11
X509v3 Authority Key Identifier:
keyid:74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:47:0e:eb:26:d9:94:1b:b6:61:5b:42:b8:15:45:9c:14:6f:
f0:92:14:8d:47:c1:f1:c0:7c:72:0a:6b:ed:cf:73:01:83:bb:
eb:51:0e:06:d8:a1:e1:08:dd:98:57:c3:af:46:18:21:48:97:
f2:9c:0f:71:a6:a1:70:fc:19:ba:bb:b6:1f:63:91:74:9e:2c:
0d:05:77:bb:40:a4:cd:34:8e:d9:d3:c5:19:9a:04:be:4b:63:
64:bb:81:10:31:11:75:9d:b1:ed:8e:c1:2a:cc:30:d8:12:be:
a0:ad:88:b0:47:7f:20:89:0b:c0:35:c9:f8:1f:ef:44:5a:a3:
0f:ed:bd:2a:5f:1d:9e:a5:07:db:a1:3c:b0:ce:3d:1a:b7:75:
eb:d9:63:e3:d7:48:b9:65:53:ce:47:57:6a:40:eb:03:af:79:
89:b8:97:43:7f:92:ad:50:2a:0b:ad:30:cc:1a:98:5e:ad:18:
cb:41:56:56:fd:bf:e2:bb:37:e7:b1:c8:34:ff:c5:37:8d:e7:
b5:05:c9:e2:b3:ea:b8:09:3a:c3:90:48:86:87:84:1b:79:64:
20:f7:7c:09:10:66:fb:09:74:81:94:0c:24:fb:75:d4:a7:57:
f3:f4:ec:bd:e0:28:e2:2d:f9:52:96:18:6a:b8:85:01:5c:92:
be:05:23:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 18:41:43 2026 by rpki-client