Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
File: dBc29lciH8E0MWMjsHQFhanBsgw.mft (raw, json)
Hash identifier: LdcTcc/m3D3e7Fc6wG7ZUnKb2ci+DHCk5XntOGOj6L4=
Subject key identifier: C4:9C:C8:97:28:40:2C:0B:FF:89:0C:C8:51:40:7B:C3:6C:6A:30:9D
Authority key identifier: 74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
Certificate issuer: /CN=741736f657221fc134316323b0740585a9c1b20c
Certificate serial: 019FA0DFDE3CE0392CA8F96E82A74AD97174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
Manifest number: 19D1
Signing time: Mon 27 Jul 2026 00:00:53 +0000
Manifest this update: Mon 27 Jul 2026 00:00:53 +0000
Manifest next update: Tue 28 Jul 2026 00:00:53 +0000
Files and hashes: 1: 3D6ST7VPwU1ruJHTqcORchHTAiE.roa (hash: NASIK7MkKYD9o//4ZODXB3XY9C+uWrjRQevxzYiJxB0=)
2: FsryNOkpTRhYXYiVpfSErxkdF5I.roa (hash: 7TnmsucFlZLELXfMUZN9SGlpQMX8+cF0eWaXdVfCFOM=)
3: dBc29lciH8E0MWMjsHQFhanBsgw.crl (hash: ujlIqqvdn2emVTXK4VNktWsQkq2yEEZWc7LToA74XHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:df:de:3c:e0:39:2c:a8:f9:6e:82:a7:4a:d9:71:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741736f657221fc134316323b0740585a9c1b20c
Validity
Not Before: Jul 27 00:00:53 2026 GMT
Not After : Jul 28 00:00:53 2026 GMT
Subject: CN=c49cc89728402c0bff890cc851407bc36c6a309d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:09:bb:e4:20:80:f9:27:85:72:e4:09:2a:e1:
f6:45:25:57:37:30:ae:0d:c4:e3:9b:0a:f0:6b:af:
45:da:4c:7e:96:a3:e3:b2:16:11:00:2e:49:13:62:
09:ee:51:76:33:60:76:92:91:d1:09:2b:b0:90:22:
ef:27:1c:86:74:d7:08:e8:2f:be:d1:d2:10:75:b4:
65:55:9a:7f:36:08:32:72:fa:7f:1e:fd:e7:07:fa:
0d:db:a9:c6:f3:1a:be:9f:78:31:2a:6d:e7:29:2b:
c8:6e:18:fe:78:6c:c2:8c:92:29:bc:b9:e0:bc:64:
b9:c2:22:23:63:68:28:fa:01:6a:cc:16:ac:8f:c8:
20:7b:a9:6f:e9:0d:9c:31:f4:9e:a4:3e:8c:9a:93:
d6:90:ea:32:85:61:97:f5:17:00:f8:4e:73:58:5c:
ae:9f:f1:1d:3f:a7:5d:23:74:4b:a6:c0:68:f0:34:
42:e8:cc:19:8e:94:9a:66:06:db:77:11:a6:ef:73:
2b:61:99:78:36:20:1e:d3:08:b6:28:49:ca:bb:bc:
51:bf:f8:ee:cd:39:9a:a8:3b:a1:06:3e:23:b9:08:
19:e2:e5:58:97:ca:bd:84:9b:60:aa:66:94:cf:8a:
a6:c7:a3:7c:c8:ed:f9:ab:17:02:b5:01:3e:0b:2a:
d7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9C:C8:97:28:40:2C:0B:FF:89:0C:C8:51:40:7B:C3:6C:6A:30:9D
X509v3 Authority Key Identifier:
keyid:74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ff:6d:eb:b3:9c:15:c9:99:66:6c:57:b4:a6:a7:b6:0f:a0:
92:51:0f:28:d0:72:b0:2f:c5:32:c3:de:41:2b:3b:1b:4d:3f:
f2:fc:2c:37:b8:9a:3e:a8:2d:57:a8:6d:ee:50:e8:9d:8e:6b:
4f:ca:4c:30:d7:90:b3:a4:08:e2:0f:7d:af:c9:5c:63:28:d4:
11:68:77:bc:0c:1a:53:fa:89:58:30:6c:60:c1:b0:85:91:72:
3c:60:fd:cb:14:46:f9:c9:fb:2f:56:f0:5a:b2:c5:a2:1e:ee:
1c:81:35:99:c8:8c:55:22:28:f8:c2:14:5a:21:05:00:ba:4d:
0a:f1:f3:e2:6d:5d:68:5b:65:fc:24:6d:1f:67:4e:59:7d:ce:
8d:fe:46:b6:99:11:0f:06:f8:7b:71:8a:08:5d:71:68:e4:e7:
95:c8:bf:d1:2b:a9:0d:85:c7:6a:02:15:32:9b:14:4e:b2:42:
c5:bd:09:9b:2b:bc:b2:45:47:05:95:fa:1d:be:2a:45:66:8b:
ac:9d:7a:d3:3e:89:5c:1b:69:a8:18:95:83:74:32:03:ef:74:
1e:3d:f1:fc:d0:78:8e:98:28:84:ab:cf:eb:48:01:de:92:38:
35:ce:f9:95:58:5b:01:7b:33:62:7d:93:2d:52:ff:14:13:64:
f5:f3:de:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:48:17 2026 by rpki-client