Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/DHFpyJaYxQX6GgVMyOc_tGNNsxo.mft
File: DHFpyJaYxQX6GgVMyOc_tGNNsxo.mft (raw, json)
Hash identifier: GLLd1zX3In15Fpz/LXcUZSUU7NQLKdL8HEfetGOT0sM=
Subject key identifier: 87:42:12:78:1E:CF:69:98:A2:51:5B:F1:4B:2A:0F:7A:E4:BB:C2:7A
Authority key identifier: 0C:71:69:C8:96:98:C5:05:FA:1A:05:4C:C8:E7:3F:B4:63:4D:B3:1A
Certificate issuer: /CN=0c7169c89698c505fa1a054cc8e73fb4634db31a
Certificate serial: 019F9090BC5564EF28F8EF63FCDC9FC81925
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DHFpyJaYxQX6GgVMyOc_tGNNsxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/DHFpyJaYxQX6GgVMyOc_tGNNsxo.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 20:00:32 +0000
Manifest this update: Thu 23 Jul 2026 20:00:32 +0000
Manifest next update: Fri 24 Jul 2026 20:00:32 +0000
Files and hashes: 1: DHFpyJaYxQX6GgVMyOc_tGNNsxo.crl (hash: 3MRQoQKLIeN6hmc3MtyHbhQTGAzqSIeNSuHQe11Eids=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/DHFpyJaYxQX6GgVMyOc_tGNNsxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/DHFpyJaYxQX6GgVMyOc_tGNNsxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DHFpyJaYxQX6GgVMyOc_tGNNsxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:bc:55:64:ef:28:f8:ef:63:fc:dc:9f:c8:19:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c7169c89698c505fa1a054cc8e73fb4634db31a
Validity
Not Before: Jul 23 20:00:32 2026 GMT
Not After : Jul 24 20:00:32 2026 GMT
Subject: CN=874212781ecf6998a2515bf14b2a0f7ae4bbc27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:dd:4d:5c:03:65:fa:42:7b:9f:78:78:cc:97:
a4:65:38:76:fc:06:bb:c3:c6:d1:23:ed:e0:58:9f:
36:4a:b3:c3:3b:be:00:4a:4c:3d:2b:3b:6a:1a:87:
4c:c1:55:88:1e:65:c1:68:5a:36:ba:bf:61:0d:04:
21:2f:6f:47:fe:06:50:90:e2:15:f9:ce:67:ea:38:
bb:a4:2e:f2:0f:7b:6f:1a:5b:3f:31:71:69:4c:68:
c8:43:8a:90:65:1b:8b:fa:a9:c9:3e:1b:00:f8:25:
98:98:1d:c0:0b:17:e4:60:7c:26:93:9e:a3:f4:64:
d8:55:36:8a:38:8c:7e:9c:05:44:39:5c:4d:06:93:
e4:c4:e3:2d:03:84:9c:4e:b6:1d:c2:87:1e:12:33:
7d:17:6f:16:65:f9:df:13:eb:3f:0f:14:6d:31:7c:
95:e3:e8:fc:cb:2c:e4:3f:62:1a:de:42:95:ef:f2:
7e:cc:9b:1c:cf:35:64:c8:98:e1:67:d2:03:f4:29:
70:7e:c3:ce:4b:fb:3e:80:5d:a6:50:18:1e:e2:3c:
aa:a4:87:64:2b:64:ed:50:2d:fa:f3:d1:7c:80:ae:
b3:00:94:2e:85:29:6c:05:8f:c7:dd:da:86:e8:3b:
c6:3d:92:21:55:5b:c9:c6:53:0c:78:7e:2f:d5:b5:
a2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:42:12:78:1E:CF:69:98:A2:51:5B:F1:4B:2A:0F:7A:E4:BB:C2:7A
X509v3 Authority Key Identifier:
keyid:0C:71:69:C8:96:98:C5:05:FA:1A:05:4C:C8:E7:3F:B4:63:4D:B3:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHFpyJaYxQX6GgVMyOc_tGNNsxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/DHFpyJaYxQX6GgVMyOc_tGNNsxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/DHFpyJaYxQX6GgVMyOc_tGNNsxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:3c:40:2c:ca:af:56:da:5f:d5:79:21:8a:73:b4:07:fb:50:
1a:89:46:08:c1:2a:9c:04:d3:d1:61:91:9f:d4:21:06:c7:fe:
87:6f:c4:50:81:e5:12:43:60:14:a0:9b:74:ee:65:cf:a0:4b:
62:c9:13:4c:aa:7c:c7:c0:c2:e4:99:0c:f8:42:a5:f0:81:e5:
b5:af:25:ce:c5:77:7a:4b:38:57:1e:0e:8f:67:d1:ad:bf:99:
22:45:14:5b:63:b3:dc:c7:85:af:fa:a3:9f:d7:d5:3c:18:6e:
be:88:ee:0c:5b:06:18:16:34:c9:39:03:73:a9:49:12:48:78:
73:33:a6:51:36:62:3a:50:a4:79:72:b5:79:af:63:74:df:e4:
a7:90:da:90:cd:19:00:0e:41:ba:fc:58:15:cc:85:37:4d:3c:
7b:94:fe:f7:ac:fc:81:45:16:db:e9:62:bd:22:c5:53:6c:58:
86:b5:59:c3:25:fa:f3:93:7d:3e:2e:9c:0c:1b:cf:1c:bf:f5:
51:b2:98:4c:da:26:28:13:ff:d5:c1:e9:26:db:60:35:45:1a:
ba:49:05:00:9e:00:db:e8:b8:9c:9c:96:f4:1d:80:97:b2:7a:
47:23:5d:5f:e9:7d:7c:56:a2:79:29:21:3c:11:4c:04:21:60:
3a:60:57:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:26:42 2026 by rpki-client