
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
File: Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft (raw, json)
Hash identifier: rZiATBMQPe4vKrdRcw1z2fgq5OT5fl3wTXU3fkkfIkc=
Subject key identifier: C4:0D:79:9F:B3:9D:E7:6F:5D:2C:FC:37:2D:AE:06:BE:AC:AA:4E:E3
Authority key identifier: 0F:37:39:7D:8B:6C:87:3E:29:BE:6E:09:9D:E7:B7:46:EA:FD:0E:B4
Certificate issuer: /CN=0f37397d8b6c873e29be6e099de7b746eafd0eb4
Certificate serial: 019FA1163273C04A9BC056DB110632D93F12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
Manifest number: 19CC
Signing time: Mon 27 Jul 2026 01:00:14 +0000
Manifest this update: Mon 27 Jul 2026 01:00:14 +0000
Manifest next update: Tue 28 Jul 2026 01:00:14 +0000
Files and hashes: 1: Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl (hash: 2fFCbgATWMytsaXfRP4efPZPhbzmWLUNT0cuVuHlhjY=)
2: pUIM7v10t5OGFrSPmfiKdj44TIc.roa (hash: Oo445ykGaPumhWQXMGT+U7KwU/ygHDEsLqsafB1c140=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 01:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:32:73:c0:4a:9b:c0:56:db:11:06:32:d9:3f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f37397d8b6c873e29be6e099de7b746eafd0eb4
Validity
Not Before: Jul 27 01:00:14 2026 GMT
Not After : Jul 28 01:00:14 2026 GMT
Subject: CN=c40d799fb39de76f5d2cfc372dae06beacaa4ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5d:79:1f:05:66:80:91:9c:63:d0:da:6a:0c:
eb:73:c9:ac:71:52:09:07:d9:58:2e:c7:24:8b:f5:
4a:b1:ab:4e:97:f0:74:fb:e5:26:13:ec:22:ae:4b:
e1:b1:bf:af:8d:ea:89:00:8f:ce:e7:c1:6b:6a:f7:
69:13:a3:20:36:c0:39:65:c6:f2:64:70:5a:bc:eb:
c8:b2:75:22:27:07:2e:31:4b:d3:8d:9b:32:27:8b:
13:2a:5a:c0:b6:a8:42:dc:3f:1b:22:33:38:6a:16:
75:da:f4:45:13:b6:92:3b:64:1f:79:7b:ff:f1:46:
aa:8c:be:32:4b:cd:db:67:03:9a:8d:1d:40:92:aa:
be:59:80:66:f7:c4:ce:e3:01:1d:b2:eb:d8:9a:4f:
5d:c4:8f:1a:a0:24:f7:af:07:f9:00:a5:26:c0:fd:
99:8a:4b:82:eb:11:d6:38:ff:f7:b4:cb:8a:cc:51:
94:dc:9a:75:3e:2f:37:17:3e:4f:2a:38:6e:c8:1c:
05:7c:de:ae:10:ab:92:b8:95:c7:16:e1:cf:34:80:
4c:c3:47:c5:f4:d7:e3:97:96:f8:92:d4:80:22:8c:
22:f1:cc:d3:37:83:f2:bb:4c:47:8f:98:c6:41:2e:
b7:4d:f6:18:10:57:12:75:03:3c:6f:6b:c5:22:4a:
dd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0D:79:9F:B3:9D:E7:6F:5D:2C:FC:37:2D:AE:06:BE:AC:AA:4E:E3
X509v3 Authority Key Identifier:
keyid:0F:37:39:7D:8B:6C:87:3E:29:BE:6E:09:9D:E7:B7:46:EA:FD:0E:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a3:ec:0c:72:72:15:fb:cd:15:a6:fb:de:17:d9:6c:de:3a:
7c:e8:2c:36:0a:de:a9:ec:ef:ec:1f:82:de:02:2b:6c:92:32:
de:36:4a:08:d6:c4:d6:fb:17:c1:0e:c4:10:f2:bb:96:c4:c1:
94:73:e2:40:3d:c7:9a:3c:b2:36:39:18:44:1e:6c:6a:7c:24:
e5:72:a2:61:42:29:83:9e:30:ee:a4:63:c6:43:45:06:d6:ed:
bb:ca:7f:a7:16:b6:06:1c:21:b1:5b:55:47:8e:ff:07:ee:86:
bc:36:55:97:b8:2e:e9:e2:1a:81:2d:38:89:f1:0e:6e:63:67:
ff:76:ce:fa:f6:ce:ce:9f:70:2b:8f:43:32:3c:00:ce:e1:4b:
06:80:d4:7f:44:f8:31:56:10:fd:49:e3:b1:58:56:86:32:be:
f2:16:c5:30:46:c7:96:90:83:c0:35:6d:85:8b:60:ea:52:a9:
35:96:9b:5b:41:d4:52:6c:48:e4:66:4f:44:6a:96:a1:47:4a:
b4:4e:b5:9e:48:d8:63:a4:b6:e5:a4:b1:30:10:4f:23:45:42:
e4:cc:d5:46:0b:ce:4a:46:89:a4:f5:55:1a:0d:25:ea:29:a8:
06:17:14:3b:01:cc:d5:07:97:6b:6c:3b:94:86:3a:63:95:69:
c5:9c:fd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:37:45 2026 by rpki-client