Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
File: dh55HzroOuiyY-PNtoKjR1tXB98.mft (raw, json)
Hash identifier: drUYmHuASGMIQ0keMG3VdolnSgqdwcucQtLVbJGnOLc=
Subject key identifier: B3:38:2A:78:3A:84:9F:D5:72:79:00:57:39:60:60:AD:47:5D:6C:3A
Authority key identifier: 76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
Certificate issuer: /CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
Certificate serial: 019FA1844D6406B6D4E7867F1F243A3BB92D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
Manifest number: 19CE
Signing time: Mon 27 Jul 2026 03:00:30 +0000
Manifest this update: Mon 27 Jul 2026 03:00:30 +0000
Manifest next update: Tue 28 Jul 2026 03:00:30 +0000
Files and hashes: 1: HeTj1rlCLTtvBYW1onGZ7LauPQY.roa (hash: weFl57AveWg1aEff8nmfajyotthwbCTL0U0EBzxk8Zk=)
2: dh55HzroOuiyY-PNtoKjR1tXB98.crl (hash: MZ9EcIt6GXCdNh0s5k1vsbKLocYbWeza9Ec6Hzpo1sQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:4d:64:06:b6:d4:e7:86:7f:1f:24:3a:3b:b9:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
Validity
Not Before: Jul 27 03:00:30 2026 GMT
Not After : Jul 28 03:00:30 2026 GMT
Subject: CN=b3382a783a849fd572790057396060ad475d6c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fc:ee:99:b9:9b:f7:7b:53:d7:2e:47:cc:bc:
71:3b:ae:2a:f5:da:bc:14:39:a6:e0:e8:5a:81:38:
2b:9f:5b:ad:97:71:a6:db:b9:0f:ad:c2:e2:46:65:
41:e0:84:19:22:7a:87:0a:f8:64:cc:e1:5e:53:20:
16:1e:32:29:4f:5a:73:e7:ef:0d:f1:60:18:44:7f:
39:70:cb:d1:19:81:6f:54:51:fb:aa:8a:4c:29:71:
4c:ef:d4:34:8b:df:fc:a0:e2:18:24:34:d9:43:b9:
bd:25:71:c4:c7:f2:92:3f:7e:aa:fb:c3:15:94:e2:
18:de:b9:6f:68:a2:44:a6:07:de:e5:9a:9d:67:ed:
12:1c:03:07:e3:6a:cf:ed:12:bd:c0:6d:84:21:53:
e8:e8:c0:07:e0:f8:29:fa:39:ac:e7:a9:be:dc:28:
bd:6f:6a:07:6c:e1:7d:3d:ab:3b:04:7c:18:cd:0a:
11:dd:a0:e4:9d:1d:50:23:a1:ca:fe:7e:5c:7f:33:
98:9b:02:c9:e3:34:f8:d9:78:df:a1:cc:61:57:ff:
8a:6b:6c:50:d3:6d:16:a8:47:d8:01:b6:df:a8:9d:
54:18:f9:31:32:ad:12:68:99:79:45:15:7a:43:26:
fb:4d:3f:b5:c5:ce:6c:c8:8d:7e:e3:94:0b:dc:d5:
33:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:38:2A:78:3A:84:9F:D5:72:79:00:57:39:60:60:AD:47:5D:6C:3A
X509v3 Authority Key Identifier:
keyid:76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:af:f6:81:52:63:3c:67:ea:69:21:c1:88:eb:b7:8f:86:ad:
25:c8:af:f8:fa:00:d2:f2:34:f7:5b:c9:15:6c:fb:c7:85:3a:
7d:da:2b:be:32:8a:8f:7c:a2:ce:c0:2a:dc:8d:f0:3f:5d:57:
86:28:5f:c2:df:df:92:ae:20:d9:53:bd:84:3c:6a:6e:ef:c2:
af:d0:e7:59:f2:0c:2d:81:30:d3:ba:d6:f1:3b:33:ff:26:68:
03:ca:7c:2e:2c:96:11:eb:ac:43:66:50:70:05:07:ca:4e:af:
77:f8:33:3f:66:84:ca:b4:04:c5:8d:5e:6c:c6:41:b7:b9:2c:
73:dd:87:ef:f9:e2:3d:a2:73:64:10:f0:d1:f3:26:ec:c7:d0:
2f:86:63:12:59:61:0c:97:7b:d9:15:41:d2:18:bd:ac:14:01:
7f:92:c4:98:e7:38:49:02:e1:49:e5:df:16:a7:73:0c:9d:fc:
07:36:fa:9e:03:56:c0:81:ec:a8:7c:41:4c:b1:83:b9:ac:f2:
c6:c1:7e:c1:ba:73:d2:52:7a:bd:9b:d2:78:23:92:e2:86:da:
4e:eb:c9:76:80:a7:e3:7b:80:39:9b:b5:85:c1:db:ed:d3:4a:
2a:f8:ca:ca:22:b3:e3:ba:31:0c:9d:66:00:c3:c1:9b:3c:3d:
86:93:49:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:52:49 2026 by rpki-client