Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
File: 65fOljUzDxRxFMZG72qTR9aJFjs.mft (raw, json)
Hash identifier: 3UFaqN5PaFuUdbMJZQNfiYfYTqbq+CH1ktrcB6IFp9M=
Subject key identifier: 0E:B4:DA:AA:DA:A2:F0:4A:CA:78:47:75:39:94:28:F6:0E:75:BE:75
Authority key identifier: EB:97:CE:96:35:33:0F:14:71:14:C6:46:EF:6A:93:47:D6:89:16:3B
Certificate issuer: /CN=eb97ce9635330f147114c646ef6a9347d689163b
Certificate serial: 019F8FEBB9A6CE9D4B145AD59D068E43FE26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
Manifest number: 1954
Signing time: Thu 23 Jul 2026 17:00:18 +0000
Manifest this update: Thu 23 Jul 2026 17:00:18 +0000
Manifest next update: Fri 24 Jul 2026 17:00:18 +0000
Files and hashes: 1: 65fOljUzDxRxFMZG72qTR9aJFjs.crl (hash: iXTfHRFaUB4TnROecziBXrM4D6dBmYiR2veJEs1KNB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:b9:a6:ce:9d:4b:14:5a:d5:9d:06:8e:43:fe:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb97ce9635330f147114c646ef6a9347d689163b
Validity
Not Before: Jul 23 17:00:18 2026 GMT
Not After : Jul 24 17:00:18 2026 GMT
Subject: CN=0eb4daaadaa2f04aca784775399428f60e75be75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:17:4f:f9:ba:8a:31:f8:a8:68:aa:55:b4:7b:
0b:d2:c3:47:78:43:7f:2b:fb:87:e9:e4:3b:df:10:
62:b4:a1:ba:bf:3b:87:8c:6b:d8:9a:9d:a3:53:f7:
7d:d0:21:d0:59:b7:21:d1:fe:9d:13:e8:33:d7:08:
7e:ce:26:98:f0:61:42:5c:7a:1c:eb:4c:00:0c:3d:
cd:08:08:51:e0:30:a1:2e:24:32:a5:3d:76:95:1e:
83:26:51:7d:db:1d:ea:f3:c3:29:f6:bf:e7:2c:21:
77:cf:b6:03:1c:5c:d9:f7:9a:bf:a2:ed:c8:d1:56:
4f:dd:af:fb:5f:50:03:f5:36:15:50:1c:36:51:e7:
db:fc:62:de:d4:ec:6b:41:7e:74:6d:3b:ec:52:6c:
ef:d7:26:2d:cc:7b:f6:30:58:d8:59:b1:20:c9:1e:
c6:8b:8a:55:15:64:35:ec:cc:ea:6f:60:4a:95:2b:
14:38:29:0c:b1:e1:94:a1:10:56:c7:5d:79:ce:1e:
1b:aa:e2:2f:b6:a5:32:d4:e3:99:f1:fa:55:71:70:
f5:d0:29:d7:30:30:c0:68:67:b6:3a:bb:f6:5b:53:
6e:cd:8c:4b:b0:1e:5b:ab:3f:7d:9d:53:6e:22:f1:
7f:21:42:c0:29:e4:31:4e:2e:2b:b4:07:c7:eb:65:
e2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B4:DA:AA:DA:A2:F0:4A:CA:78:47:75:39:94:28:F6:0E:75:BE:75
X509v3 Authority Key Identifier:
keyid:EB:97:CE:96:35:33:0F:14:71:14:C6:46:EF:6A:93:47:D6:89:16:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:90:f8:77:8b:ba:99:6a:7a:3a:7d:85:f4:b2:be:9c:d6:c5:
0b:85:6b:40:86:5b:78:6e:ec:32:79:3f:9c:97:2a:6e:59:9b:
1b:40:5b:1e:20:88:80:3b:4b:55:d6:fd:4e:fc:d7:79:4e:bb:
64:e6:f1:a4:f1:76:f5:d1:8c:38:e4:2d:c4:c5:fc:aa:f9:f5:
1d:bb:21:6f:54:f7:db:18:fa:5a:67:f3:fb:52:9b:eb:74:f3:
ea:88:2a:84:d2:ef:1a:84:35:c6:96:9c:75:bc:72:c6:f2:1c:
cd:4a:74:c8:26:f8:55:75:79:d9:a3:87:2b:58:87:76:46:3e:
12:7d:d2:96:09:31:dd:7f:78:d8:7b:6f:12:d2:b0:4c:12:81:
39:8c:5b:9d:b0:59:53:8b:ee:7d:71:0c:07:a9:df:ae:e6:24:
7e:7f:57:36:12:8d:c7:b1:bc:c9:ea:1c:f5:e9:26:bd:2e:7d:
6e:15:65:c5:15:8f:92:19:68:eb:9a:24:06:cd:6b:9e:d6:b0:
c1:6f:67:4b:71:a6:52:77:47:fc:1d:7e:f8:91:57:15:fb:96:
89:9d:ea:96:e9:84:64:a0:56:58:ba:4a:e3:df:d3:18:35:fb:
c9:5e:ef:20:5f:25:ca:75:d5:c5:4b:ef:af:2e:86:51:e7:d2:
0d:66:2e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:01:08 2026 by rpki-client