Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
File: dPEFnCc8UO3PPc7fxYABUuyR26I.mft (raw, json)
Hash identifier: 8ugxF/6KCQS88qD0mHBs8hdQB7L408zddlsww7MXMeM=
Subject key identifier: 83:4A:86:ED:14:BE:F5:28:0C:7F:0F:16:4C:0E:C2:14:28:67:9D:C0
Authority key identifier: 74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
Certificate issuer: /CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Certificate serial: 019F9F967995023AB95223E302CCF2A507DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
Manifest number: 19CC
Signing time: Sun 26 Jul 2026 18:01:06 +0000
Manifest this update: Sun 26 Jul 2026 18:01:06 +0000
Manifest next update: Mon 27 Jul 2026 18:01:06 +0000
Files and hashes: 1: 4zHqkXwTdPpErUuwool8-zX-SB4.roa (hash: LHnM5v5Sz1IzlHeFp2joapwPeszU3VAj2kHXfdYdwu4=)
2: dPEFnCc8UO3PPc7fxYABUuyR26I.crl (hash: 2rug6iy6ymTac+gdRU/TIkLUkGf07AHhxvUbpVI6lhE=)
3: f_myMJMSIIWO9m-PmHiygg0XXSs.roa (hash: 3LE3GccOE6KqVlj9DZ+EFPId6e66LFjW7NsGN3ZdmPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:96:79:95:02:3a:b9:52:23:e3:02:cc:f2:a5:07:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Validity
Not Before: Jul 26 18:01:06 2026 GMT
Not After : Jul 27 18:01:06 2026 GMT
Subject: CN=834a86ed14bef5280c7f0f164c0ec21428679dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d1:09:d9:5f:e0:93:67:a7:d8:52:f7:06:e4:
ed:80:94:41:04:02:f3:39:b4:56:af:d7:79:d1:29:
1a:f8:e3:48:46:76:f0:5f:95:f1:a3:84:58:54:f0:
d3:7a:ca:2d:f6:86:1c:71:ab:d0:54:e8:6e:85:51:
2c:5e:8c:c4:e6:ae:0b:0e:21:75:9c:1d:02:d3:e2:
12:9c:28:47:6a:5f:d4:94:d8:a3:b1:0a:62:63:56:
ea:58:1a:4c:0a:95:85:c7:5a:09:d9:88:5c:52:de:
f3:dd:d0:38:77:64:09:fa:c1:90:d7:c7:ed:aa:dd:
89:93:70:cc:c3:29:90:8f:2c:14:d6:98:7b:ba:ef:
0c:e7:3a:a5:00:1c:6c:a0:57:65:12:66:95:4c:5e:
4d:8c:2b:63:45:55:e9:79:25:4c:c2:b8:83:f5:8f:
af:cc:9b:a4:78:58:8f:ed:a2:39:67:49:78:db:d6:
94:f2:a3:df:5b:c5:ff:07:17:fb:2e:55:8c:f5:df:
77:be:5f:85:2f:0e:55:64:fc:dd:5d:3f:f0:cf:23:
9f:90:a4:40:cd:c1:54:5b:00:5e:cd:fc:b3:6f:b5:
1d:00:fe:84:10:5c:aa:8b:73:30:42:1e:11:fc:9a:
68:51:29:dd:c6:f3:ca:48:61:0e:65:18:3b:9b:5f:
0e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4A:86:ED:14:BE:F5:28:0C:7F:0F:16:4C:0E:C2:14:28:67:9D:C0
X509v3 Authority Key Identifier:
keyid:74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:30:59:27:ef:f6:77:33:4e:11:93:78:43:9f:4f:1b:f1:f0:
cd:57:ce:9a:c6:ed:4a:2c:4c:1d:72:6c:c0:6f:b4:8d:f0:88:
a4:f0:45:b2:8a:0f:50:1e:4c:af:61:05:90:ef:66:70:9a:7a:
a9:95:7b:f5:04:9e:bd:bd:bf:a9:bc:e4:27:16:e5:69:91:c1:
28:75:f2:ad:f0:b7:28:5e:b4:e5:e9:5c:50:b6:10:ab:26:4c:
d9:44:76:67:97:b8:12:74:d8:b4:10:1f:49:6e:04:07:1e:02:
fa:0a:f3:e8:0e:bc:17:1e:bc:44:cb:52:37:27:b0:69:b1:24:
6a:0e:1a:51:8c:ba:18:1c:0b:7f:4d:7d:db:94:ee:b4:a0:50:
28:ea:29:20:74:83:68:4b:97:c5:1e:4a:d2:1e:c0:77:be:14:
35:54:c8:78:f3:b4:6a:8a:63:37:9d:32:ea:09:6b:ec:69:4a:
a2:70:6d:41:fc:0b:d1:ea:d5:c8:01:cd:38:38:57:a4:cc:6c:
a8:39:ae:ab:93:7a:ed:a0:12:24:94:21:8c:af:19:b7:ee:e7:
71:fa:4a:73:01:35:74:d8:38:7e:25:4e:45:35:f4:1c:50:af:
4c:a5:91:bf:cf:9f:02:d2:ae:f7:26:9a:27:b7:26:ff:3f:cd:
10:fe:15:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:00:12 2026 by rpki-client