Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/09e0cc-362e-4629-8063-332493c989c7/1/D-iOP9BlXUyaV3sxYiDe-DF3VbE.mft
File: D-iOP9BlXUyaV3sxYiDe-DF3VbE.mft (raw, json)
Hash identifier: OSqQb9fawsAb9ZVYlHrogmV7eXNhQr151aYVUqkl0n8=
Subject key identifier: C6:BF:E4:57:2A:45:94:7A:47:43:87:F9:E6:DF:E9:26:C4:CB:CB:64
Authority key identifier: 0F:E8:8E:3F:D0:65:5D:4C:9A:57:7B:31:62:20:DE:F8:31:77:55:B1
Certificate issuer: /CN=0fe88e3fd0655d4c9a577b316220def8317755b1
Certificate serial: 019F90C7DF7C1D1C4136437E18CF83636740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-iOP9BlXUyaV3sxYiDe-DF3VbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/09e0cc-362e-4629-8063-332493c989c7/1/D-iOP9BlXUyaV3sxYiDe-DF3VbE.mft
Manifest number: 88
Signing time: Thu 23 Jul 2026 21:00:45 +0000
Manifest this update: Thu 23 Jul 2026 21:00:45 +0000
Manifest next update: Fri 24 Jul 2026 21:00:45 +0000
Files and hashes: 1: D-iOP9BlXUyaV3sxYiDe-DF3VbE.crl (hash: e7b9Ho9qmYhi4MzF26AiCCDgjHqlWPRm0ymeE58AAnc=)
2: VRhw_fRM9jAzC_jp7EXs7OxLil0.roa (hash: AB9hVmBjo6ZhGYEOgtx/yX50Or9Lly3jgJBDfkouOC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/09e0cc-362e-4629-8063-332493c989c7/1/D-iOP9BlXUyaV3sxYiDe-DF3VbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/09e0cc-362e-4629-8063-332493c989c7/1/D-iOP9BlXUyaV3sxYiDe-DF3VbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-iOP9BlXUyaV3sxYiDe-DF3VbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:df:7c:1d:1c:41:36:43:7e:18:cf:83:63:67:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe88e3fd0655d4c9a577b316220def8317755b1
Validity
Not Before: Jul 23 21:00:45 2026 GMT
Not After : Jul 24 21:00:45 2026 GMT
Subject: CN=c6bfe4572a45947a474387f9e6dfe926c4cbcb64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ff:b7:db:57:09:dc:79:68:88:0f:5e:f4:f8:
3c:b7:ff:e3:af:99:0f:ec:ac:ee:85:85:6d:77:36:
ca:1d:de:64:d3:4d:68:3c:0f:e4:f2:10:c7:dc:2c:
43:4e:06:ef:6f:ec:81:e0:27:f6:f9:6c:e9:69:c7:
53:0a:69:1b:b6:4b:02:da:7f:02:80:99:1c:03:aa:
22:af:c2:c2:88:3e:e6:73:5d:42:3f:83:31:77:ec:
be:d4:c9:3a:bc:cc:fc:89:68:22:dd:59:56:db:1b:
5f:58:e5:af:e6:0d:de:d4:b1:5f:93:b2:ce:e6:68:
c8:7f:71:14:b6:98:aa:3b:0f:eb:0e:da:a5:ac:29:
96:d3:09:fd:14:f9:0e:ff:1c:93:d3:e0:fa:02:9a:
a6:99:b4:15:2d:fe:4c:01:b3:c2:82:5d:cc:d8:62:
8f:31:5d:1b:35:6c:af:a8:4d:11:da:bc:48:7d:86:
ca:25:9d:b2:df:3f:a8:f5:dd:97:a5:c6:82:be:de:
e9:78:4b:9e:88:97:11:91:2b:52:73:9a:b1:80:4f:
ff:ff:93:c8:d3:27:e1:96:ae:0b:e4:c5:3f:25:86:
5f:18:dd:66:31:95:a9:ea:1f:12:ff:ef:bb:50:03:
1d:ea:bc:5e:5e:18:51:48:28:9d:55:46:24:3f:aa:
5c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:BF:E4:57:2A:45:94:7A:47:43:87:F9:E6:DF:E9:26:C4:CB:CB:64
X509v3 Authority Key Identifier:
keyid:0F:E8:8E:3F:D0:65:5D:4C:9A:57:7B:31:62:20:DE:F8:31:77:55:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-iOP9BlXUyaV3sxYiDe-DF3VbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/09e0cc-362e-4629-8063-332493c989c7/1/D-iOP9BlXUyaV3sxYiDe-DF3VbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/09e0cc-362e-4629-8063-332493c989c7/1/D-iOP9BlXUyaV3sxYiDe-DF3VbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:c6:97:0c:3b:76:f4:54:dc:4d:2a:46:c4:c0:cc:ff:df:25:
3b:02:84:44:54:4f:ef:fa:ea:9e:4d:e5:d5:df:47:7a:5f:35:
0d:96:a7:64:a2:6c:4b:c6:3c:12:ef:ae:26:b1:60:93:cb:57:
a5:16:31:45:e0:78:70:2c:2c:26:2b:95:21:d3:15:41:80:a7:
ce:51:3b:2f:d4:f4:04:94:1d:03:b1:4d:cc:ba:21:26:38:11:
df:ee:e3:f2:f4:47:1a:cc:28:b4:3c:66:63:a0:a9:1c:46:df:
45:03:bb:d3:17:13:d3:f8:5d:ae:01:27:9b:c8:60:18:9a:03:
3e:f5:6c:1f:af:b8:18:b0:0d:bf:e4:40:09:54:de:03:b7:26:
57:4f:e0:6e:ed:97:72:5b:a1:7b:fb:09:9f:3a:38:e5:74:bf:
e5:a7:bb:61:86:e7:af:32:d1:6e:a7:a0:eb:cc:f5:a6:c2:99:
51:7a:be:b2:d1:05:a8:7f:5a:46:9c:c7:7d:8a:e1:9f:02:49:
a6:c6:99:8c:e6:16:53:1f:45:d2:f4:2e:7f:22:5a:00:6d:d3:
ef:8d:07:91:f7:3b:72:67:37:14:fb:68:b9:89:d6:18:7f:bf:
a6:e8:e4:d5:c0:60:d5:05:2a:ac:c9:6a:56:8b:c8:c1:24:83:
35:75:e7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:04:00 2026 by rpki-client