Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
File: D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft (raw, json)
Hash identifier: YveKOfbmx+rR3NJ4/Tmc4pXNmmMnk6hD3MCTPdZuy/A=
Subject key identifier: 32:3C:44:63:6F:74:3A:10:88:FE:D3:16:DB:29:3F:F1:F2:3A:4B:51
Authority key identifier: 0F:49:C4:9A:75:CF:6E:24:8C:9B:51:C7:05:4D:B2:F8:D9:DC:ED:CB
Certificate issuer: /CN=0f49c49a75cf6e248c9b51c7054db2f8d9dcedcb
Certificate serial: 019F92B5FC02FF86A92E376183C7698CE6CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
Manifest number: 0ED2
Signing time: Fri 24 Jul 2026 06:00:27 +0000
Manifest this update: Fri 24 Jul 2026 06:00:27 +0000
Manifest next update: Sat 25 Jul 2026 06:00:27 +0000
Files and hashes: 1: D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl (hash: RU1+JPhSC1DyhZYY7W27jsRSuhuH30TPd+VkRBzBO30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b5:fc:02:ff:86:a9:2e:37:61:83:c7:69:8c:e6:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f49c49a75cf6e248c9b51c7054db2f8d9dcedcb
Validity
Not Before: Jul 24 06:00:27 2026 GMT
Not After : Jul 25 06:00:27 2026 GMT
Subject: CN=323c44636f743a1088fed316db293ff1f23a4b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4f:49:c4:1b:d0:1d:65:c8:ff:78:f8:84:4a:
62:fc:2e:1e:ca:e6:64:d3:ec:31:15:c4:f5:73:6d:
00:0f:44:69:10:6a:90:1a:c5:d0:ef:d8:9f:b9:bf:
dd:15:f8:6a:09:c4:00:90:e3:a8:dc:af:0f:20:fd:
b1:18:6a:65:2a:6f:ea:a8:da:67:25:8a:e3:a8:91:
d4:c2:95:1c:46:e1:9b:53:38:c5:e2:27:a1:a3:ad:
69:6d:8f:92:e0:b5:47:69:37:06:96:cd:6b:e2:49:
44:7d:e2:14:20:4a:0c:49:bb:8f:05:89:d8:b1:65:
29:af:b1:d9:76:e7:a4:31:52:05:98:7b:ff:9e:29:
7c:00:e2:a2:0a:6c:b3:ad:93:ba:ee:45:12:89:32:
fa:03:9b:03:d7:d2:a1:2d:45:f8:43:59:1e:bc:7f:
85:c0:5a:c7:84:a7:67:cb:21:ac:08:04:5d:39:6c:
4a:35:59:f2:93:03:4f:e9:5c:bf:25:96:cd:f1:9c:
0c:c9:ee:fe:31:19:c2:fd:16:73:54:8c:6a:58:f0:
1e:d0:47:ed:ec:c3:e1:3e:f3:04:d5:e6:a2:51:13:
56:23:31:34:9f:ce:ea:ce:67:4f:3e:10:00:33:2c:
94:68:83:f7:9f:ad:0e:d0:d0:3c:47:68:87:3a:c7:
84:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3C:44:63:6F:74:3A:10:88:FE:D3:16:DB:29:3F:F1:F2:3A:4B:51
X509v3 Authority Key Identifier:
keyid:0F:49:C4:9A:75:CF:6E:24:8C:9B:51:C7:05:4D:B2:F8:D9:DC:ED:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ce:dc:6c:21:a4:22:82:18:7a:14:06:b6:9d:3a:c7:bc:8c:
aa:a3:82:c9:c5:f5:1e:ac:8c:1b:58:4c:02:75:60:de:d9:49:
b9:7b:80:d2:c2:43:2a:97:ef:13:88:71:bc:0e:7e:e3:86:57:
fe:05:cc:bb:aa:b3:82:8d:e0:1f:b6:06:4b:f4:6a:1b:de:74:
96:7c:e8:05:f1:7c:40:df:8b:b4:7c:81:ae:e6:52:00:80:7c:
22:35:84:0e:03:77:eb:af:eb:86:7b:94:55:fb:c7:a2:7e:96:
dc:9d:ba:49:95:44:2a:72:b7:a1:6e:cf:9b:85:31:ad:3c:ea:
20:b4:8b:a6:20:7f:04:2a:a9:3c:a7:62:46:ec:1f:84:f6:d2:
db:ac:a4:af:0c:a7:68:e5:22:22:e9:e0:1a:5e:2b:a3:62:70:
83:70:4c:f3:2a:cf:50:cb:d4:6f:92:47:56:fd:3c:a5:88:c3:
f9:8b:66:c7:8e:20:e5:e2:35:db:51:d4:78:4b:65:ad:be:51:
98:1c:c8:d1:a2:4f:48:0b:a5:17:80:ba:d2:19:23:0e:bc:71:
32:67:22:ec:67:5f:e7:92:2e:5e:ad:af:52:af:fa:6a:7e:16:
de:81:d7:e9:51:0e:9a:2c:49:a1:2a:7c:dc:40:3e:a8:67:7c:
47:71:a9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:42:34 2026 by rpki-client