Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
File: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft (raw, json)
Hash identifier: 0lxOkCQDnahO5KtJNTlupArXXabWAE5UbrAq05Ri8K8=
Subject key identifier: 9B:71:9B:BD:24:1D:F1:EF:5B:45:D1:33:58:1D:12:3C:D0:55:37:8A
Authority key identifier: D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
Certificate issuer: /CN=d031655023bd141731d56fb8453ff0514f728865
Certificate serial: 019F8F7FACF551CA33E0F1B5EE0675810CEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
Manifest number: 167C
Signing time: Thu 23 Jul 2026 15:02:16 +0000
Manifest this update: Thu 23 Jul 2026 15:02:16 +0000
Manifest next update: Fri 24 Jul 2026 15:02:16 +0000
Files and hashes: 1: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl (hash: OXNKnmjWwD7tRqRVpwPWcgzvsTe5Zx8DM6gbuRX/Mn0=)
2: 3AB4ABWLvkMBLhXbVPQ47Et_IPE.roa (hash: 7TTeY9RzcNuOB9ePCi+NTRAM5DwBMiMi62WzvEoHHl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:ac:f5:51:ca:33:e0:f1:b5:ee:06:75:81:0c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d031655023bd141731d56fb8453ff0514f728865
Validity
Not Before: Jul 23 15:02:16 2026 GMT
Not After : Jul 24 15:02:16 2026 GMT
Subject: CN=9b719bbd241df1ef5b45d133581d123cd055378a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:91:32:a3:e2:b5:a4:d3:47:37:d6:ba:49:26:
d0:d6:2a:d7:40:02:ee:07:a6:2a:20:ae:23:20:36:
81:44:c1:ba:22:d3:64:cb:d8:cc:ff:8e:08:e4:7b:
95:7a:17:f8:9a:21:05:89:df:0d:f4:0b:06:fa:60:
a1:73:b5:5e:8f:14:f3:09:94:5e:44:de:74:55:0b:
50:05:bf:31:2b:cb:a9:35:2e:94:7a:9f:69:db:35:
c5:0d:43:3a:3e:33:1f:79:1f:aa:fc:27:6d:55:29:
0e:d0:fe:e4:96:59:27:0e:98:93:8f:c8:4b:a5:be:
ce:d4:1e:b1:f0:4f:50:e3:5c:78:ee:63:7e:a5:15:
83:14:93:42:5a:44:e8:87:0a:ad:78:25:df:c3:20:
71:63:0b:0b:97:01:6e:5c:0a:2e:1d:af:a8:9a:f4:
b3:6e:94:98:7c:4b:65:01:0e:75:fb:db:6d:0d:d8:
c4:68:46:ba:51:f0:63:96:e8:8c:0e:5c:e3:76:b3:
d9:50:b2:2c:0c:92:24:2f:f9:3a:1d:28:b7:c8:8d:
3f:68:35:a7:34:f7:07:d4:e3:c9:34:4a:3a:34:11:
17:31:4c:3e:36:64:a2:db:42:97:81:ba:2c:e7:95:
ac:6d:05:55:c0:54:28:e9:ad:e0:6d:98:85:47:1a:
63:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:71:9B:BD:24:1D:F1:EF:5B:45:D1:33:58:1D:12:3C:D0:55:37:8A
X509v3 Authority Key Identifier:
keyid:D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:af:00:3d:fa:dd:05:1f:1d:be:92:b7:4c:32:79:77:8c:b6:
b0:82:7b:dc:09:50:01:a8:ed:5c:85:ae:c1:8c:31:2f:6b:e0:
7c:de:83:cb:8d:f2:7e:57:72:5f:54:ce:0a:ef:c3:83:6e:2e:
b8:c4:74:e5:60:bf:a2:e4:45:13:4d:c9:89:00:59:ae:0f:13:
79:dc:6c:45:65:2a:d8:ca:d7:b1:81:09:db:ac:90:2e:09:f6:
fb:73:3c:19:af:7b:13:66:1f:f9:7c:d7:b2:65:56:b0:c6:7d:
44:6c:9b:17:cd:a0:f6:ed:ea:37:3c:6f:eb:46:fc:f8:20:56:
e0:74:ba:92:19:77:db:e8:15:7c:2c:d3:28:66:c5:85:31:fa:
8d:f3:ba:ea:6f:f4:fe:15:96:2a:87:65:ac:99:0d:b5:0d:8f:
4c:85:7e:38:bb:d1:60:10:5e:e1:80:4f:30:a9:fd:f5:2c:21:
fd:60:10:0d:70:76:de:bf:17:cb:93:5f:c6:be:c7:67:a6:fc:
15:03:04:7b:63:36:5b:bc:59:c5:e8:fd:eb:8a:0c:1e:ef:55:
a9:58:81:47:cf:40:bd:14:3a:5e:3b:ed:6d:79:63:11:ef:9b:
20:91:65:fb:7a:ad:5d:48:79:55:6f:c2:80:39:54:b6:f5:0d:
fd:d1:3a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:02:58 2026 by rpki-client