Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
File: DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft (raw, json)
Hash identifier: Lsl5hQmFfJbvdF6z4zq5Gf275CLzK40rdrYPR8enDr8=
Subject key identifier: DE:4B:6E:E2:77:15:F9:FB:72:A8:17:44:23:E5:DD:A7:58:87:5B:B5
Authority key identifier: 0D:78:4B:D9:6A:44:BC:36:1D:13:34:4D:54:C8:BC:51:FF:67:A8:02
Certificate issuer: /CN=0d784bd96a44bc361d13344d54c8bc51ff67a802
Certificate serial: 019F93246963F4A1B745A4BE6E16DDC54E8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
Manifest number: 112B
Signing time: Fri 24 Jul 2026 08:01:04 +0000
Manifest this update: Fri 24 Jul 2026 08:01:04 +0000
Manifest next update: Sat 25 Jul 2026 08:01:04 +0000
Files and hashes: 1: DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl (hash: fWV63DaGWOQGpYkR88KBNORU0AlPQ41nWirfaiFbMcM=)
2: x5ebKc9_3qA7pEOC0_BnOS1B8oI.roa (hash: AqP1AEgenjD2KrPY+QLH5krFzTJA90JozOTpwzG6a5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:69:63:f4:a1:b7:45:a4:be:6e:16:dd:c5:4e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d784bd96a44bc361d13344d54c8bc51ff67a802
Validity
Not Before: Jul 24 08:01:04 2026 GMT
Not After : Jul 25 08:01:04 2026 GMT
Subject: CN=de4b6ee27715f9fb72a8174423e5dda758875bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:03:8d:50:85:09:be:34:34:a4:fa:b3:92:40:
05:af:de:1c:bf:5c:3f:63:a2:19:d1:f1:ca:25:84:
ce:ba:ba:78:87:25:1a:8a:7a:0e:01:cd:f5:8f:d8:
00:df:54:0c:a8:c1:1b:2a:e0:7b:c3:75:b5:3e:3d:
90:e4:37:f1:19:f8:3a:4d:bc:e3:10:53:f6:9f:4f:
ae:f2:8f:84:13:11:1e:f9:2b:ef:61:05:b1:5d:98:
eb:8d:c0:db:6b:57:97:2b:90:ba:91:09:89:23:43:
d4:32:56:4d:f2:b7:a5:07:03:25:4d:ba:4a:a6:39:
8d:64:b8:96:6a:b8:2a:fa:02:00:1d:8e:e5:07:ce:
5d:13:b0:a7:ae:2d:06:a4:3a:79:e0:4f:21:dd:62:
ae:12:e3:f9:4e:98:b2:2b:ba:b0:09:9b:ec:37:11:
0c:61:04:76:63:5d:2b:f2:c8:e6:21:6c:ea:f0:34:
12:a3:ab:6c:f5:47:23:17:a4:97:e7:3f:54:06:15:
26:03:1b:9d:ff:e4:50:f9:9b:65:a3:10:8b:aa:fb:
0f:ff:00:3d:6f:00:59:e1:99:60:3d:1e:c6:86:fc:
93:32:77:3a:04:91:42:4f:b2:24:24:16:1e:ac:7a:
c9:08:d4:bf:4d:49:22:a7:41:76:bb:9f:ec:58:29:
19:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:4B:6E:E2:77:15:F9:FB:72:A8:17:44:23:E5:DD:A7:58:87:5B:B5
X509v3 Authority Key Identifier:
keyid:0D:78:4B:D9:6A:44:BC:36:1D:13:34:4D:54:C8:BC:51:FF:67:A8:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:66:4e:a2:1c:ae:96:47:4a:a6:42:7b:37:2e:90:29:89:02:
e8:fa:23:7a:63:75:ea:b6:e7:97:55:12:6a:fd:cd:93:c2:5f:
3e:ba:ad:dc:c2:e9:8f:cd:9d:45:d2:15:4f:2a:0e:2f:9f:50:
8c:73:3f:2c:5f:22:e9:27:28:b7:0b:5e:25:bc:a1:01:31:6d:
94:de:68:51:c5:99:51:0e:65:51:bc:f5:df:82:89:12:a5:d3:
82:43:b8:e2:b4:33:91:d4:2a:c7:15:c3:e2:85:3c:44:37:69:
5e:5b:3e:3f:9b:29:23:cd:03:d1:9c:93:4e:54:32:11:b7:b3:
fd:9f:a6:a9:c0:60:b6:b0:46:9c:8b:af:46:b1:b4:85:54:7f:
4e:c0:2c:26:f7:0b:81:09:90:39:39:3a:3d:6c:95:05:f7:6f:
9b:8b:d8:d5:82:15:4f:bb:3f:0f:8f:d5:7d:df:3e:b1:43:72:
45:2d:0b:6a:72:ad:5a:df:a6:ea:ce:d3:70:e9:42:cb:e1:c1:
32:d3:61:5f:15:4f:43:0c:f8:ac:b4:39:f0:a5:92:07:51:bf:
dc:71:28:23:5e:46:69:6e:6b:fe:8a:6d:35:d6:72:97:39:a6:
fd:cb:eb:8b:27:dd:10:a8:16:4c:d0:d2:56:f9:ef:14:f2:89:
67:ba:44:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:02:32 2026 by rpki-client