Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
File: DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft (raw, json)
Hash identifier: DHd7HnmwPcG6I6BFCEM60/V2gg3io/MD+lHe6sKZyok=
Subject key identifier: 37:E9:9E:6A:61:C8:40:B4:8A:AE:38:54:45:71:E7:FB:27:1F:F3:65
Authority key identifier: 0D:F6:E6:33:06:7C:06:6A:E9:BE:F1:D3:77:1C:C3:00:E4:B4:D1:A7
Certificate issuer: /CN=0df6e633067c066ae9bef1d3771cc300e4b4d1a7
Certificate serial: 019F189DFD8C736F3F5E07AF2487B0115D93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
Manifest number: 198C
Signing time: Tue 30 Jun 2026 13:00:34 +0000
Manifest this update: Tue 30 Jun 2026 13:00:34 +0000
Manifest next update: Wed 01 Jul 2026 13:00:34 +0000
Files and hashes: 1: DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl (hash: ca2Lbbe9xPqz2WYBPZ11dxLVhCSXULC9wUNpV740Xnc=)
2: O42Gic4dc360gIgddLeLvJAb0gg.roa (hash: cQ+n7ZgZ26eThRiniwC6AUO7/0CEDaEl6tna9PIT/9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9d:fd:8c:73:6f:3f:5e:07:af:24:87:b0:11:5d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df6e633067c066ae9bef1d3771cc300e4b4d1a7
Validity
Not Before: Jun 30 13:00:34 2026 GMT
Not After : Jul 1 13:00:34 2026 GMT
Subject: CN=37e99e6a61c840b48aae38544571e7fb271ff365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:65:35:de:6f:1b:dc:ae:76:94:de:02:eb:3f:
e7:f8:05:cd:83:d0:57:0b:cf:40:c1:98:26:54:a7:
a6:e4:c7:d7:ba:5e:aa:5b:24:e9:ff:16:99:cc:e0:
d8:f6:18:49:ab:3b:4d:51:aa:38:9c:b4:70:ac:4c:
98:33:0b:4c:40:0f:3c:08:98:fd:f0:d2:c5:49:0b:
c6:55:67:9f:ca:e7:df:03:15:34:18:a4:24:1c:0a:
de:0c:67:8b:07:ec:5f:00:43:8f:c9:7c:98:ce:c1:
8b:f7:21:ac:94:b8:66:9f:a6:b0:62:f3:26:65:ea:
94:13:fa:10:b9:f5:98:fa:d0:03:86:d7:d4:84:e1:
83:44:37:cf:3b:66:66:9d:1b:3a:a1:57:52:79:cd:
58:f4:8d:db:35:17:5b:8e:7a:fd:ab:4b:4b:b1:ea:
7d:3c:be:63:ef:c5:ed:6f:61:c3:19:4a:00:e4:8e:
b1:7d:56:9f:37:48:57:49:a8:5b:96:b1:64:26:71:
64:9d:c4:44:64:c4:9b:d3:0e:5a:5c:5b:77:a4:a3:
50:ad:12:31:d1:ee:1d:52:8a:99:f4:a2:34:80:ce:
ec:60:55:67:23:c7:d3:c8:d4:6d:73:d4:21:e7:df:
74:d6:d6:24:1e:b6:9f:c2:03:12:1e:22:7b:6b:71:
1c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E9:9E:6A:61:C8:40:B4:8A:AE:38:54:45:71:E7:FB:27:1F:F3:65
X509v3 Authority Key Identifier:
keyid:0D:F6:E6:33:06:7C:06:6A:E9:BE:F1:D3:77:1C:C3:00:E4:B4:D1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f1:ed:98:a9:1a:a3:53:12:41:9f:1d:11:4e:d3:42:66:82:
3c:55:c8:04:88:73:53:a2:40:94:54:2c:a2:30:43:ab:ff:78:
d2:1f:95:dd:3a:ce:56:29:72:2c:17:06:80:76:98:17:b0:07:
bd:1e:dd:73:db:78:a5:13:ab:67:94:8d:35:46:ef:c2:04:5a:
df:13:fa:f0:e6:2e:3e:a6:ac:ac:47:d0:0c:42:3f:c4:4e:f5:
01:a6:0e:78:81:a8:fb:db:0d:90:12:a2:78:84:77:3f:83:c8:
5d:0e:cb:f6:fd:85:cc:7b:46:83:66:07:ff:ef:a5:00:19:91:
a7:4d:b2:c9:04:2a:e7:34:86:05:26:cc:ff:78:ae:24:70:bc:
c4:c6:ce:7d:2a:a7:be:b6:09:84:31:10:aa:27:fd:e2:e4:be:
97:bc:91:9e:da:bd:e0:82:65:9d:6b:d9:6e:ff:cb:c8:f3:0e:
eb:78:e4:4b:4e:d4:34:03:37:e5:06:57:47:a6:ea:40:b2:48:
ea:f7:48:de:f0:7c:2f:34:b2:43:c0:14:fc:75:ca:34:1d:64:
19:2d:91:7e:88:71:ea:1a:56:ee:ab:df:44:f6:2e:74:8d:14:
a3:ff:c3:be:22:70:2d:52:d6:98:64:22:fd:09:e5:65:fb:7b:
8d:be:c1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:11:31 2026 by rpki-client