Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/af95fa-e280-4ee0-a487-baafe855f2b2/1/00aPL6qp053JwDKNMP0DFGbVD3I.mft
File: 00aPL6qp053JwDKNMP0DFGbVD3I.mft (raw, json)
Hash identifier: hVNARQC5i6YW0qCOriYPE30RJzvxW9PSYTzpu1aidgg=
Subject key identifier: DD:BF:EE:BD:6F:E5:D3:9B:DE:0B:E7:D1:A7:7D:B3:58:2A:4B:1E:F9
Authority key identifier: D3:46:8F:2F:AA:A9:D3:9D:C9:C0:32:8D:30:FD:03:14:66:D5:0F:72
Certificate issuer: /CN=d3468f2faaa9d39dc9c0328d30fd031466d50f72
Certificate serial: 019F90C787EC255AF47C24C56E2A81199710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00aPL6qp053JwDKNMP0DFGbVD3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/af95fa-e280-4ee0-a487-baafe855f2b2/1/00aPL6qp053JwDKNMP0DFGbVD3I.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 21:00:23 +0000
Manifest this update: Thu 23 Jul 2026 21:00:23 +0000
Manifest next update: Fri 24 Jul 2026 21:00:23 +0000
Files and hashes: 1: 00aPL6qp053JwDKNMP0DFGbVD3I.crl (hash: FeQr1/iZzpTax2BJsauhEcf4T5w4LvyWSMENqdSK7dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/af95fa-e280-4ee0-a487-baafe855f2b2/1/00aPL6qp053JwDKNMP0DFGbVD3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/af95fa-e280-4ee0-a487-baafe855f2b2/1/00aPL6qp053JwDKNMP0DFGbVD3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/00aPL6qp053JwDKNMP0DFGbVD3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:87:ec:25:5a:f4:7c:24:c5:6e:2a:81:19:97:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3468f2faaa9d39dc9c0328d30fd031466d50f72
Validity
Not Before: Jul 23 21:00:23 2026 GMT
Not After : Jul 24 21:00:23 2026 GMT
Subject: CN=ddbfeebd6fe5d39bde0be7d1a77db3582a4b1ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:aa:b8:6f:01:4f:3c:8d:db:9f:2c:68:57:3f:
8d:48:f5:70:76:a4:da:09:a2:22:95:de:28:2d:6a:
1a:1a:f5:e4:36:88:fd:38:07:ca:eb:7f:23:36:ca:
6d:22:a7:73:bf:95:c9:8f:3b:30:39:87:5e:65:80:
cb:d1:e4:25:b1:19:fb:81:b0:5c:d9:8d:08:0d:08:
43:05:77:d8:a0:e9:80:2f:20:f0:7d:92:f6:57:62:
09:4f:b5:41:9d:3c:2c:11:22:39:50:9b:99:df:02:
3b:e6:0f:fe:09:0e:dc:5f:bc:05:3a:a9:04:bb:6c:
79:46:c7:a7:f7:8f:de:7b:85:a5:d4:09:c6:5b:51:
6f:bc:2e:ef:60:4e:0b:8f:e7:2d:ff:5d:cd:03:be:
15:df:d2:85:04:64:d5:69:6c:6d:4a:fd:14:9f:57:
45:68:76:a9:d9:d5:be:a1:55:cc:ac:ba:c2:ab:1a:
ee:10:9a:f7:09:58:5f:e7:95:90:00:45:b5:1c:48:
8e:f3:1c:4a:9c:6e:4e:0e:43:f4:82:e3:1d:e5:84:
0b:7a:dd:e3:73:f8:47:d7:44:ad:db:a5:ad:8a:f2:
9c:94:f4:4b:14:e9:d6:b9:14:ab:08:6e:51:b3:90:
f7:4f:0a:5c:89:c2:4f:ff:9f:87:35:2e:cb:7a:cd:
e9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:BF:EE:BD:6F:E5:D3:9B:DE:0B:E7:D1:A7:7D:B3:58:2A:4B:1E:F9
X509v3 Authority Key Identifier:
keyid:D3:46:8F:2F:AA:A9:D3:9D:C9:C0:32:8D:30:FD:03:14:66:D5:0F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00aPL6qp053JwDKNMP0DFGbVD3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/af95fa-e280-4ee0-a487-baafe855f2b2/1/00aPL6qp053JwDKNMP0DFGbVD3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/af95fa-e280-4ee0-a487-baafe855f2b2/1/00aPL6qp053JwDKNMP0DFGbVD3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ba:32:2d:d8:d1:76:74:bb:41:3e:63:65:99:df:c0:ff:c2:
4a:10:ca:5a:ce:ee:af:3d:d1:d2:88:10:a6:7a:1f:78:89:a0:
cc:5a:71:79:7a:99:c7:af:a1:fb:da:02:95:17:1d:2f:e1:a2:
47:26:25:2c:2a:ae:21:f1:1b:d4:7e:b0:d9:e5:97:f2:48:3d:
76:74:8e:30:2b:84:f2:29:0e:4a:44:17:cf:79:c9:1c:48:f5:
d0:21:7f:16:b6:3d:a0:34:43:da:3b:67:0c:1a:9e:ba:e8:9d:
8c:07:8a:65:72:e0:50:17:96:aa:9b:3f:f3:56:13:b7:f7:a8:
22:d5:fd:0d:c8:de:ec:fb:62:37:d0:2f:77:0e:75:06:33:ba:
ac:0c:44:1b:02:07:2f:b8:cf:40:5d:6d:f8:45:c6:e7:88:07:
05:1d:ca:14:c4:4d:01:1f:1c:9e:1b:2b:0e:0a:8c:0c:cb:ac:
cd:94:de:24:8b:4b:ee:03:50:81:94:eb:06:44:f5:fb:b5:d5:
31:45:3c:56:09:1e:fe:bc:1b:e8:2e:31:8e:26:6c:a9:a9:89:
b8:60:0d:05:16:58:e6:9d:56:97:f7:19:21:dc:17:8c:08:df:
7d:81:6c:46:7c:78:0f:05:2a:9f:9f:61:08:a1:a7:ad:b2:f3:
45:76:67:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:44:56 2026 by rpki-client