Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
File: 0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft (raw, json)
Hash identifier: UDuaBWsKTddvK3rezjGakcaHy9WRReKCFGsQXHMyKiY=
Subject key identifier: 9B:75:76:B2:23:63:40:22:3E:DE:C2:BC:81:88:2A:78:3C:A4:9F:89
Authority key identifier: D2:17:97:85:86:BF:F3:A6:77:7D:55:A9:A9:63:58:41:51:6D:43:B4
Certificate issuer: /CN=d217978586bff3a6777d55a9a9635841516d43b4
Certificate serial: 019F9400057E06D9CE4DF6882D8320BEC810
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
Manifest number: 0F5B
Signing time: Fri 24 Jul 2026 12:00:57 +0000
Manifest this update: Fri 24 Jul 2026 12:00:57 +0000
Manifest next update: Sat 25 Jul 2026 12:00:57 +0000
Files and hashes: 1: 0heXhYa_86Z3fVWpqWNYQVFtQ7Q.crl (hash: 3zfi8hIQBZLRTWUqHjKGUyV79JrywvjoESni94doP/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:00:05:7e:06:d9:ce:4d:f6:88:2d:83:20:be:c8:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217978586bff3a6777d55a9a9635841516d43b4
Validity
Not Before: Jul 24 12:00:57 2026 GMT
Not After : Jul 25 12:00:57 2026 GMT
Subject: CN=9b7576b2236340223edec2bc81882a783ca49f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f3:fa:c1:34:37:54:68:36:2b:c4:4e:44:fc:
6f:37:0d:ab:9f:95:f3:d0:20:bd:eb:58:23:35:00:
fe:84:b4:15:1a:84:0f:be:b3:84:77:d6:d9:9b:de:
54:f9:a1:6d:32:e6:2b:05:d0:6d:94:74:3e:d5:32:
e3:26:62:31:59:03:d0:88:86:bf:07:ee:1c:2d:a7:
03:c6:84:e6:14:4c:15:f7:94:45:17:3a:2b:f0:7a:
8b:58:d5:16:fa:a8:c2:8b:95:d4:62:45:4d:33:a0:
f2:87:0f:89:71:47:c6:74:91:3e:c4:0f:7a:98:b0:
db:e9:52:42:33:53:59:01:13:a2:05:93:20:4f:2b:
2b:e3:df:32:e8:2d:3d:67:33:b3:a3:34:af:81:15:
22:8e:6e:ee:c0:31:d3:29:24:57:bb:60:27:0d:7c:
7a:2a:04:41:d5:dc:01:81:06:03:56:b6:bb:ec:d3:
f2:b8:b1:90:31:58:3f:15:bb:0e:1d:fd:ac:58:6d:
fd:04:be:12:0b:46:57:29:5b:7d:b7:3a:c5:07:9d:
8a:4c:2a:97:7b:df:b4:40:7c:4a:bc:52:cf:f3:51:
4b:97:e8:91:df:3b:65:75:4d:0b:b8:3d:b8:57:71:
b4:30:5c:ab:9a:b4:a1:7d:7d:c4:6a:fe:44:2c:d8:
5e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:75:76:B2:23:63:40:22:3E:DE:C2:BC:81:88:2A:78:3C:A4:9F:89
X509v3 Authority Key Identifier:
keyid:D2:17:97:85:86:BF:F3:A6:77:7D:55:A9:A9:63:58:41:51:6D:43:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:4a:3a:1e:dd:4a:f5:3a:8a:d4:ef:41:2e:80:4a:97:86:90:
93:84:95:55:51:18:09:2b:85:91:9f:98:9b:2e:2e:4c:29:dc:
94:63:d4:fc:bb:50:68:f1:eb:86:04:53:c7:21:71:7a:65:cb:
e1:31:97:29:9b:70:a7:c4:23:1c:44:3b:06:0d:8f:87:c9:57:
b5:f9:d7:58:02:47:74:b5:60:01:7d:29:73:21:6f:08:6b:bd:
d8:81:79:cd:ab:2e:3f:fc:a2:a2:2c:91:84:92:a7:39:cf:f8:
78:c4:98:e5:82:b5:9d:8f:a4:a2:ec:a4:90:07:75:20:dc:03:
e3:66:f5:20:27:d3:9b:4a:2a:ce:f0:6c:ce:d5:17:7c:93:1a:
45:fb:52:51:46:52:5b:18:a7:f1:f4:85:2d:d6:0a:62:06:e9:
ac:f5:62:4b:59:79:35:62:bd:95:d9:b4:36:a0:f5:19:a1:58:
7a:48:5b:28:6e:7a:fc:d7:18:83:da:16:b6:30:86:0b:bb:ba:
04:c7:71:5d:00:9c:7f:9a:89:69:cf:06:8f:d3:21:f6:40:0a:
17:99:28:16:6e:0f:d8:cf:9a:db:c2:f4:b9:2d:59:b1:66:4b:
c2:b9:55:d9:1a:4a:73:36:59:fe:3a:d6:18:de:9f:82:53:14:
89:0b:40:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:22:09 2026 by rpki-client