Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
File: D7o0uxz-i22g8bKwUkBsPpFhvyM.mft (raw, json)
Hash identifier: 4IbOwDkLBz1YMdiZV8KWjM/HQRHVDsjd5dyHFCLUIS4=
Subject key identifier: 4F:8A:75:E1:50:B5:41:61:2F:C1:46:D0:0B:D6:64:26:34:61:8A:71
Authority key identifier: 0F:BA:34:BB:1C:FE:8B:6D:A0:F1:B2:B0:52:40:6C:3E:91:61:BF:23
Certificate issuer: /CN=0fba34bb1cfe8b6da0f1b2b052406c3e9161bf23
Certificate serial: 019F90FF6EDF33F4080F3EF9F66D25D239BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7o0uxz-i22g8bKwUkBsPpFhvyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
Manifest number: 19C2
Signing time: Thu 23 Jul 2026 22:01:26 +0000
Manifest this update: Thu 23 Jul 2026 22:01:26 +0000
Manifest next update: Fri 24 Jul 2026 22:01:26 +0000
Files and hashes: 1: D7o0uxz-i22g8bKwUkBsPpFhvyM.crl (hash: VcZYVWM1tLrdigk+t5b/LFggrVJvpx3bbO85F0oAbKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/D7o0uxz-i22g8bKwUkBsPpFhvyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:6e:df:33:f4:08:0f:3e:f9:f6:6d:25:d2:39:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fba34bb1cfe8b6da0f1b2b052406c3e9161bf23
Validity
Not Before: Jul 23 22:01:26 2026 GMT
Not After : Jul 24 22:01:26 2026 GMT
Subject: CN=4f8a75e150b541612fc146d00bd6642634618a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:11:33:2a:67:5f:b4:94:b6:04:31:39:8c:db:
36:bd:36:e2:1f:15:27:98:35:83:7b:78:8a:f5:aa:
fa:7c:8e:49:ec:c5:5c:5c:b9:a3:38:45:8c:b1:f1:
9b:cf:71:a0:31:b7:56:20:b2:d5:61:0c:4c:a0:79:
6d:2a:b5:d3:b2:0b:36:0d:07:9a:fb:39:16:5f:99:
0e:d8:47:f1:eb:ac:62:69:7a:9f:2a:39:82:f4:12:
a2:61:50:3e:15:97:5e:09:1f:c2:b1:55:bc:01:10:
25:e9:16:12:b3:92:3d:7e:48:c2:ab:c5:66:80:04:
7c:c0:30:11:0d:62:a8:32:dd:d8:e1:c1:2c:7a:17:
e6:b9:47:8c:ae:60:63:ab:df:53:12:70:4a:3c:06:
5a:08:98:e6:8f:52:fd:1a:30:bb:28:45:00:d8:9c:
f9:6a:98:4e:5e:38:fc:4a:24:2e:c2:d6:9c:3b:d0:
40:f1:a3:45:b5:f3:01:90:51:d2:01:8d:c7:6f:59:
70:c5:d3:11:ae:b3:1b:cc:4f:75:6a:55:a0:2b:ce:
68:9a:8b:3e:6c:5b:69:98:03:95:d9:51:e4:08:77:
4b:fd:c3:b8:d6:5a:ae:f8:2a:9a:3c:66:94:cf:f2:
d3:61:51:f6:84:a6:43:a5:a7:fb:f9:49:bc:87:ae:
72:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8A:75:E1:50:B5:41:61:2F:C1:46:D0:0B:D6:64:26:34:61:8A:71
X509v3 Authority Key Identifier:
keyid:0F:BA:34:BB:1C:FE:8B:6D:A0:F1:B2:B0:52:40:6C:3E:91:61:BF:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7o0uxz-i22g8bKwUkBsPpFhvyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:36:88:ef:2f:32:2e:50:84:8f:ce:9a:96:21:0e:0e:b6:93:
5b:c2:34:9b:a1:03:74:67:d3:3b:ef:8a:e6:a2:bd:01:46:f9:
33:56:23:94:7e:62:c8:a0:10:49:c1:84:50:5c:b9:ce:4d:b0:
5f:ec:58:ef:2d:c9:ef:b5:a6:22:26:47:9d:9c:3d:82:27:58:
da:80:12:5a:b4:0a:04:01:4b:3c:20:fc:66:e4:84:c0:6d:a4:
ad:6d:a3:b3:55:9d:bc:a4:c9:ec:72:bd:3c:08:41:d9:bb:cd:
db:f9:97:5b:dc:0a:c7:14:1d:16:7c:19:bf:a3:b7:20:85:96:
45:4b:d2:53:ce:b6:01:3e:51:39:38:b0:f6:96:a9:a4:47:47:
d5:85:5b:c1:d9:b4:55:96:60:c1:9f:ed:3e:50:ac:45:c9:98:
6d:87:5f:03:88:b3:37:1f:bf:4b:55:af:a9:5b:98:1d:de:2d:
ae:e2:ba:c1:c8:37:ce:c4:e7:2c:08:86:3a:ac:85:57:1b:08:
1d:17:5d:7c:b5:19:d3:a4:fe:67:ec:5b:8d:20:e2:9e:6e:ae:
c0:40:39:5a:63:67:57:97:19:bd:5a:8b:91:a4:6e:d9:a3:c1:
18:d6:90:1f:98:03:64:73:2a:9a:c9:9e:3d:aa:9f:1a:50:af:
1c:81:f3:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Q/27fM/QIDz759m0l0jm9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmYmEzNGJiMWNmZThiNmRhMGYxYjJiMDUyNDA2YzNlOTE2
MWJmMjMwHhcNMjYwNzIzMjIwMTI2WhcNMjYwNzI0MjIwMTI2WjAzMTEwLwYDVQQD
Eyg0ZjhhNzVlMTUwYjU0MTYxMmZjMTQ2ZDAwYmQ2NjQyNjM0NjE4YTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhEzKmdftJS2BDE5jNs2vTbiHxUn
mDWDe3iK9ar6fI5J7MVcXLmjOEWMsfGbz3GgMbdWILLVYQxMoHltKrXTsgs2DQea
+zkWX5kO2Efx66xiaXqfKjmC9BKiYVA+FZdeCR/CsVW8ARAl6RYSs5I9fkjCq8Vm
gAR8wDARDWKoMt3Y4cEsehfmuUeMrmBjq99TEnBKPAZaCJjmj1L9GjC7KEUA2Jz5
aphOXjj8SiQuwtacO9BA8aNFtfMBkFHSAY3Hb1lwxdMRrrMbzE91alWgK85omos+
bFtpmAOV2VHkCHdL/cO41lqu+CqaPGaUz/LTYVH2hKZDpaf7+Um8h65ynwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+KdeFQtUFhL8FG0AvWZCY0YYpxMB8GA1UdIwQY
MBaAFA+6NLsc/ottoPGysFJAbD6RYb8jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDdvMHV4ei1pMjJnOGJLd1VrQnNQcEZodnlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80NDBjYjEtYjZmNS00OGNmLTg4ODYt
ZTE0NGFiMTljNWQxLzEvRDdvMHV4ei1pMjJnOGJLd1VrQnNQcEZodnlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC80NDBjYjEtYjZmNS00OGNmLTg4ODYtZTE0NGFiMTljNWQx
LzEvRDdvMHV4ei1pMjJnOGJLd1VrQnNQcEZodnlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQzaI7y8y
LlCEj86aliEODraTW8I0m6EDdGfTO++K5qK9AUb5M1YjlH5iyKAQScGEUFy5zk2w
X+xY7y3J77WmIiZHnZw9gidY2oASWrQKBAFLPCD8ZuSEwG2krW2js1WdvKTJ7HK9
PAhB2bvN2/mXW9wKxxQdFnwZv6O3IIWWRUvSU862AT5ROTiw9pappEdH1YVbwdm0
VZZgwZ/tPlCsRcmYbYdfA4izNx+/S1WvqVuYHd4truK6wcg3zsTnLAiGOqyFVxsI
HRddfLUZ06T+Z+xbjSDinm6uwEA5WmNnV5cZvVqLkaRu2aPBGNaQH5gDZHMqmsme
PaqfGlCvHIHzhQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:49:23 2026 by rpki-client