Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
File: 0ur89N6SC5zmRdbmlt8IqosFUZs.mft (raw, json)
Hash identifier: DXilLPRuYJMPV+MqC91dk7w5nF07RDXxd1rJvX9VY5c=
Subject key identifier: DC:18:F6:70:66:81:B7:AF:E7:B6:76:34:FF:07:FC:79:0A:5A:6C:BC
Authority key identifier: D2:EA:FC:F4:DE:92:0B:9C:E6:45:D6:E6:96:DF:08:AA:8B:05:51:9B
Certificate issuer: /CN=d2eafcf4de920b9ce645d6e696df08aa8b05519b
Certificate serial: 019F91DA7BCEB9322EB9472D8EF92623256C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
Manifest number: 16C8
Signing time: Fri 24 Jul 2026 02:00:42 +0000
Manifest this update: Fri 24 Jul 2026 02:00:42 +0000
Manifest next update: Sat 25 Jul 2026 02:00:42 +0000
Files and hashes: 1: 0ur89N6SC5zmRdbmlt8IqosFUZs.crl (hash: JKeJzrYyhWAUU8rJV+lJoFPeh/x6AbuIJmtyRb5FMIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:7b:ce:b9:32:2e:b9:47:2d:8e:f9:26:23:25:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2eafcf4de920b9ce645d6e696df08aa8b05519b
Validity
Not Before: Jul 24 02:00:42 2026 GMT
Not After : Jul 25 02:00:42 2026 GMT
Subject: CN=dc18f6706681b7afe7b67634ff07fc790a5a6cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:00:ab:0a:fc:7f:9c:f2:24:f0:1b:b4:5d:86:
d0:b7:4f:8d:71:26:83:5c:5c:5e:37:a0:7f:c3:8e:
49:09:5e:e0:a0:97:43:0a:22:59:cc:ee:7b:bf:db:
7a:d6:a1:17:01:e8:c9:53:e8:4c:72:5f:ed:3d:9b:
78:98:b0:d5:dc:8d:cb:86:0f:b0:8d:32:b2:66:0e:
15:a9:ec:e3:0c:f2:97:92:f7:a0:46:75:5a:ea:9b:
bf:87:3b:be:1b:a7:cf:54:58:bf:08:d7:48:e9:29:
d3:51:d0:62:73:53:07:1e:7d:82:9b:ec:70:12:56:
5e:17:4b:6d:24:57:9b:33:e4:14:71:9e:f0:01:0a:
d2:ed:78:df:0b:01:f4:14:25:3e:22:7c:40:bb:43:
be:61:77:30:5c:53:12:1b:0f:aa:1c:ed:55:bd:1f:
f0:49:be:f7:58:8a:b6:20:ae:07:e6:e9:63:9d:c0:
c6:38:35:ff:13:71:33:3c:83:90:df:46:8a:f0:f8:
56:13:94:90:e2:ef:3f:83:e4:77:ee:9f:e7:f5:70:
e8:ce:f6:7a:1e:98:4e:e7:e8:c6:59:fe:13:1e:55:
b1:0a:73:06:1c:38:39:e6:a9:d7:37:14:38:43:c2:
aa:e9:a7:81:4b:6f:26:2b:31:9a:60:49:8d:08:c3:
c7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:18:F6:70:66:81:B7:AF:E7:B6:76:34:FF:07:FC:79:0A:5A:6C:BC
X509v3 Authority Key Identifier:
keyid:D2:EA:FC:F4:DE:92:0B:9C:E6:45:D6:E6:96:DF:08:AA:8B:05:51:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:28:17:b4:d9:61:83:ef:ef:34:85:8a:b5:1c:24:44:a5:9c:
7b:4c:7f:ac:67:84:ed:2d:3f:83:1a:e0:dc:df:a4:13:85:9e:
39:0b:1e:91:9b:fe:5d:b7:11:a2:c7:53:d6:b1:09:fa:d1:31:
71:f3:1c:3a:e8:9b:2d:28:51:f7:3b:49:ba:10:f8:8c:53:4f:
51:42:14:f8:cf:1c:0a:d2:16:8e:d2:30:60:bb:b7:08:1b:96:
70:db:45:b5:12:dd:87:78:b5:aa:af:4b:62:51:00:4a:a1:b1:
4c:fe:c2:b2:8a:69:b7:19:b3:75:f5:67:22:53:0b:0c:57:c9:
a5:bf:43:8a:f7:7e:4f:9e:f2:da:a8:f5:cd:4a:69:43:76:6a:
7a:bd:ee:46:c5:93:90:42:96:df:00:f5:3d:11:b3:b8:d5:2f:
5c:88:ac:27:ba:aa:47:b0:20:4c:da:57:3d:33:17:75:ca:3f:
72:32:40:0f:93:83:85:43:b2:2c:35:78:3f:df:92:c8:e3:c2:
85:77:cc:54:3f:bf:ec:81:e5:ee:26:eb:48:42:11:e2:e5:eb:
b5:ec:60:14:1f:04:7d:f1:bc:63:bb:fc:75:a6:08:ec:f8:89:
3d:28:27:42:0c:91:59:f7:c7:d4:44:d5:1a:08:d9:e5:03:41:
a3:09:f9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:03:22 2026 by rpki-client