Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
File: dFtsPJq97bluse8_f3-nAFdSLH8.mft (raw, json)
Hash identifier: RsC1lS33j08376DNFypRKCORHMtHQL8qfSD5E7pHkzQ=
Subject key identifier: 31:52:C2:3F:DB:D1:93:AC:E9:E5:98:E6:97:9C:00:CC:03:E0:89:93
Authority key identifier: 74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F
Certificate issuer: /CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f
Certificate serial: 019F9391D4EC7D88394E75C8123B0661D47E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
Manifest number: 0FC8
Signing time: Fri 24 Jul 2026 10:00:35 +0000
Manifest this update: Fri 24 Jul 2026 10:00:35 +0000
Manifest next update: Sat 25 Jul 2026 10:00:35 +0000
Files and hashes: 1: dFtsPJq97bluse8_f3-nAFdSLH8.crl (hash: 9w8TaY/gLOH7ZnyH2eohj14arj8hOJ6X8hrZM5GdLfQ=)
2: vj0F4FgcNslWI5L8V7Dw0mIMfn0.roa (hash: j/Kb2HDxy8LEtTBE0A03kW5/ZkhjPjh8YBluaGzICqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:d4:ec:7d:88:39:4e:75:c8:12:3b:06:61:d4:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f
Validity
Not Before: Jul 24 10:00:35 2026 GMT
Not After : Jul 25 10:00:35 2026 GMT
Subject: CN=3152c23fdbd193ace9e598e6979c00cc03e08993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:00:ac:e3:33:e1:f3:77:62:f9:7a:e6:dd:46:
2c:30:74:bc:77:20:e5:2c:96:a4:28:58:0c:41:3f:
e6:64:db:39:17:38:c4:55:09:b1:7f:15:dd:fe:bd:
7e:c8:4d:65:68:32:f1:89:d0:8d:6a:c6:3e:d7:4b:
5c:6c:de:38:43:de:c5:4d:a8:6b:ee:8f:43:55:4f:
cd:7b:8f:99:c2:d9:9c:1b:25:5c:4e:6e:0e:39:47:
f6:3d:03:e0:57:b4:5d:a1:ec:1b:fd:9e:9d:d2:35:
c1:d9:52:3b:ec:67:63:0c:15:99:fc:e1:f1:a8:0c:
02:1b:b7:fa:fd:2d:4b:ea:e6:1a:09:d3:29:2e:8e:
7a:7b:c0:a3:8c:fa:dc:e0:2a:6a:02:93:e2:49:2d:
f2:67:1f:70:5c:cc:42:b5:77:96:ba:4c:8a:89:94:
3e:9a:26:b3:9a:95:f3:63:f8:fa:f4:bb:42:5a:9a:
78:e1:c3:06:70:8f:14:cb:ce:10:be:21:03:e0:3d:
80:98:71:93:17:74:f3:b7:95:b4:12:c8:4d:9c:c3:
5e:a1:38:2c:19:df:1b:26:51:51:fe:f5:ed:0a:f9:
f1:5d:64:c0:07:4d:dc:9d:12:0a:48:28:d2:29:7f:
db:a7:7a:ce:d8:30:46:9c:a6:0c:56:d0:69:a1:90:
ed:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:52:C2:3F:DB:D1:93:AC:E9:E5:98:E6:97:9C:00:CC:03:E0:89:93
X509v3 Authority Key Identifier:
keyid:74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:1d:27:e7:4c:bf:dc:1f:e1:1f:2c:df:95:c7:17:74:d6:98:
e3:57:ee:45:3a:d1:d6:c6:9c:a9:5a:94:99:b4:e6:59:28:51:
53:9b:85:cc:dd:00:76:df:4d:74:22:a9:c2:e4:f3:4c:5c:78:
51:cd:76:93:55:80:14:0c:1b:99:ae:67:0c:24:0b:ec:67:b3:
55:7e:c2:89:e2:7f:58:4c:d2:44:f5:19:f2:7d:cd:93:fe:a5:
f7:ea:3f:57:80:85:5a:f1:03:b8:0b:9d:7e:bb:99:4c:90:89:
b3:da:41:62:e9:bc:0b:7c:f3:ca:4d:01:2b:15:8d:f9:e4:0d:
55:bc:85:be:01:9a:f0:db:80:7d:2b:d1:6a:2f:28:09:4e:80:
11:7d:9c:0d:3f:c5:0c:18:ff:d8:1f:1e:54:45:f2:05:97:38:
5d:10:0d:4a:df:1f:07:d3:ad:d7:ad:b7:51:fc:f6:ae:fb:29:
b8:ee:42:e0:79:ae:91:4a:68:00:9e:bf:d3:4b:a2:b2:eb:a7:
ed:1c:ec:28:e6:d3:67:1e:89:95:fa:ed:81:be:1a:20:82:64:
21:26:7d:92:98:19:b8:cc:8f:df:53:a4:7a:f5:a2:92:a4:e3:
84:af:74:eb:02:dd:11:67:4e:ab:7c:01:ca:3d:22:b5:78:99:
b4:df:aa:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:53:08 2026 by rpki-client