Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
File: D-cy5rJJCT55oaUHy82BlvAYF_o.mft (raw, json)
Hash identifier: lS0P4LMLjrYoHa/W1FnyikUbils8hq2UU4STJwY/208=
Subject key identifier: A1:85:EF:3C:AC:7F:DE:3D:BE:2A:5D:B2:1E:35:16:6F:A0:25:29:7D
Authority key identifier: 0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
Certificate issuer: /CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Certificate serial: 019F921113A59BA358BD354C60EAEE77BA83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
Manifest number: 145E
Signing time: Fri 24 Jul 2026 03:00:20 +0000
Manifest this update: Fri 24 Jul 2026 03:00:20 +0000
Manifest next update: Sat 25 Jul 2026 03:00:20 +0000
Files and hashes: 1: D-cy5rJJCT55oaUHy82BlvAYF_o.crl (hash: DQZtjMJD6poeu+FVbUL2v1AMCsh1bEM9rKvHRGsu5K0=)
2: KRcQChyIkdk17z-o88DTXwkNu_Y.roa (hash: k4ZBkPTraQNZ31kK5NnaOy56WVAVKO/c8Q/xt3FDIoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:13:a5:9b:a3:58:bd:35:4c:60:ea:ee:77:ba:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Validity
Not Before: Jul 24 03:00:20 2026 GMT
Not After : Jul 25 03:00:20 2026 GMT
Subject: CN=a185ef3cac7fde3dbe2a5db21e35166fa025297d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c4:b4:61:cd:12:79:76:3b:89:8e:db:47:55:
99:f9:3c:42:0d:64:1d:17:5f:10:5e:97:f6:8b:de:
53:4d:cc:cf:13:fc:ef:4a:be:72:89:73:f0:1a:89:
bf:82:3d:66:9d:fe:ef:57:a1:76:7c:0d:32:78:06:
91:9e:d4:d1:12:5d:8a:ab:dc:94:9c:4c:3d:a6:17:
d2:5b:de:6f:fe:d2:b3:0f:2b:16:13:24:ba:fb:35:
65:27:9c:c0:53:9b:71:51:f6:60:e9:05:e8:44:5a:
11:29:4f:57:90:3f:b0:4e:51:46:c8:8e:8a:65:c2:
9d:4d:e6:fa:e0:f8:26:c2:24:6f:e2:05:08:e7:88:
6f:8a:86:75:08:49:86:f3:0d:00:fd:61:c6:b8:48:
63:d0:a2:8c:d6:3c:03:d3:c7:d0:28:b0:e5:6e:35:
7d:c4:65:53:6e:81:85:64:57:b7:4b:0d:8c:90:43:
8b:e5:90:52:59:74:c7:28:80:31:29:d9:20:27:7c:
8f:a3:50:8e:e4:69:5e:b8:18:3b:06:8f:6f:e7:f1:
b6:4c:96:ba:a1:22:91:d2:1c:cd:02:26:1f:c9:3b:
5f:19:d1:04:1a:9e:92:bd:c0:b0:e0:49:fb:a4:44:
b3:3e:e4:62:07:b8:fb:1f:ab:44:0e:07:8f:51:d5:
c0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:85:EF:3C:AC:7F:DE:3D:BE:2A:5D:B2:1E:35:16:6F:A0:25:29:7D
X509v3 Authority Key Identifier:
keyid:0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:3d:45:3e:ae:87:0f:03:44:f9:15:4f:17:0a:73:78:ae:28:
59:b8:2a:01:0a:e8:55:a4:d2:bc:a0:0e:f4:34:63:c6:03:9c:
6f:f6:8a:d3:62:dc:42:01:9d:a2:8e:60:3e:77:19:17:15:ce:
d2:8d:a5:34:11:c8:a0:88:a6:26:c6:14:8e:b6:68:0c:49:55:
19:e1:45:14:87:bc:ab:bd:d9:e1:1f:c3:c5:24:e0:e8:9b:07:
dd:e9:01:a3:6a:5c:6f:1e:41:1b:9a:37:f7:23:4e:69:7f:8f:
ed:b9:72:54:2b:41:e2:2b:64:38:bb:ff:8d:ea:f0:55:2d:a9:
f3:79:8b:00:02:bb:de:74:41:91:2f:74:80:29:7e:ad:b6:69:
a3:9e:eb:b9:08:72:43:17:03:fa:38:d3:e1:24:87:c0:f9:94:
2b:ba:b0:0f:80:22:89:40:4b:9a:f0:9a:9a:76:0f:af:f2:fb:
f4:4c:85:d4:55:c4:1f:fd:a4:db:e1:9d:24:ec:d2:74:a1:7d:
5f:47:30:a4:43:87:2b:60:ca:d6:08:c2:db:b7:d1:04:32:9a:
c1:01:94:b2:d2:18:30:f7:88:2e:c7:aa:ba:14:33:1d:ce:1d:
dd:f5:91:e5:64:e3:78:00:6a:ee:ca:0d:f6:29:6e:9c:5f:2d:
85:d5:7a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:06:37 2026 by rpki-client