Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
File: D48Gw1SUYI2azOsHCkzRarlf9qY.mft (raw, json)
Hash identifier: JV3F+8HdluXSwe3+AGuTVN/Yrvh7WnhaKkgwDwjiQqs=
Subject key identifier: D1:AD:14:F8:BD:DA:D9:A5:82:AA:BF:DC:04:EF:CE:69:C8:A3:E7:78
Authority key identifier: 0F:8F:06:C3:54:94:60:8D:9A:CC:EB:07:0A:4C:D1:6A:B9:5F:F6:A6
Certificate issuer: /CN=0f8f06c35494608d9acceb070a4cd16ab95ff6a6
Certificate serial: 019F8F46F7068881BD0D5D0FA849DC0E47A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D48Gw1SUYI2azOsHCkzRarlf9qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
Manifest number: 05CC
Signing time: Thu 23 Jul 2026 14:00:20 +0000
Manifest this update: Thu 23 Jul 2026 14:00:20 +0000
Manifest next update: Fri 24 Jul 2026 14:00:20 +0000
Files and hashes: 1: D48Gw1SUYI2azOsHCkzRarlf9qY.crl (hash: tpj5Txir+Rw0YugWSfXk1XHzm7KHMxCTdEkWShGwPaw=)
2: SCHRZY-CfI024Dm7CtHiKFlNshk.asa (hash: CoaKu2xsdb1vUBMm0shIAq9E8fWITwH9g7k1dI56T6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D48Gw1SUYI2azOsHCkzRarlf9qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:46:f7:06:88:81:bd:0d:5d:0f:a8:49:dc:0e:47:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f8f06c35494608d9acceb070a4cd16ab95ff6a6
Validity
Not Before: Jul 23 14:00:20 2026 GMT
Not After : Jul 24 14:00:20 2026 GMT
Subject: CN=d1ad14f8bddad9a582aabfdc04efce69c8a3e778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1a:c8:f2:80:38:3e:a8:87:fc:fc:64:eb:ab:
ac:a5:44:c3:c2:38:92:ca:0f:1b:86:65:cf:0b:95:
b9:ae:f0:b7:e5:e6:3d:4a:0d:de:dc:3d:29:2c:01:
8f:0b:4b:45:9a:c2:03:e6:9a:c2:ff:d8:39:48:f0:
a4:a4:fb:a0:58:a9:78:ed:74:e3:09:b9:9b:25:d1:
c8:16:e1:7f:9f:97:4a:ca:91:0b:9d:a8:84:e1:0d:
45:a9:bd:bf:2a:44:1a:b5:03:f0:f7:1c:a5:20:49:
44:8d:bd:e4:24:73:b9:f6:39:72:c6:92:23:85:cc:
56:ad:42:27:b1:d0:b3:97:73:d2:87:62:ca:d0:d1:
f5:8e:f3:46:27:e4:7c:cb:4b:ee:3d:aa:f9:df:e4:
68:c8:29:f1:1b:4d:89:bd:93:bc:da:36:33:22:38:
67:21:74:82:3f:1c:9e:61:f8:95:99:ed:fc:98:70:
da:55:66:3a:24:8a:fb:4e:1b:cb:3e:4c:df:27:10:
11:1c:3c:89:76:7d:2c:ae:1c:47:42:0c:d0:a9:a0:
cd:4e:da:de:fc:3d:88:10:07:51:6c:06:62:fc:56:
7b:ba:74:fb:c6:84:ec:69:05:93:ea:0a:cf:e9:ab:
ea:fc:20:2b:77:17:5e:f0:98:02:c7:a3:fc:6b:a0:
76:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AD:14:F8:BD:DA:D9:A5:82:AA:BF:DC:04:EF:CE:69:C8:A3:E7:78
X509v3 Authority Key Identifier:
keyid:0F:8F:06:C3:54:94:60:8D:9A:CC:EB:07:0A:4C:D1:6A:B9:5F:F6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D48Gw1SUYI2azOsHCkzRarlf9qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:8a:7a:94:33:11:a5:b4:44:23:ba:ae:8f:80:22:10:d8:e9:
87:d7:4e:95:35:c7:58:ab:8a:e2:f1:93:16:6a:09:4c:ab:26:
d0:e5:4f:2d:1b:8f:f3:75:d0:8e:c5:dc:21:45:bc:13:38:7e:
90:b7:07:cf:7d:dd:53:30:9d:ff:8e:16:0f:92:61:96:45:05:
a4:7a:90:2b:eb:1c:3a:3f:74:3f:a8:a7:a4:7c:24:14:3d:f1:
01:f0:35:7d:ed:5a:6d:44:60:37:db:31:c2:ef:cd:18:93:34:
a6:be:b6:0b:70:b8:0a:06:8c:95:33:9c:ad:af:ad:ee:61:0f:
af:c7:97:e3:4c:52:ed:c9:12:fe:ca:55:ff:17:1d:9e:f0:4c:
72:a8:bb:3e:16:3f:22:8c:83:c6:a7:16:b1:2c:4f:10:29:f3:
bb:c9:01:15:de:3b:ba:74:58:0e:e4:04:55:80:25:36:4c:99:
0f:52:d3:fb:91:6e:4d:82:8f:01:04:b6:eb:27:30:7e:4f:70:
df:c2:fd:bf:e9:f6:01:a9:7d:3d:41:38:e6:f3:af:2a:be:57:
19:e5:aa:10:14:c6:9b:b1:6a:c3:fb:05:7e:65:28:78:96:82:
99:d1:a0:cf:fd:f7:3a:ae:16:c3:6c:a5:75:d0:b3:c8:31:be:
ef:d8:c3:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PRvcGiIG9DV0PqEncDkenMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmOGYwNmMzNTQ5NDYwOGQ5YWNjZWIwNzBhNGNkMTZhYjk1
ZmY2YTYwHhcNMjYwNzIzMTQwMDIwWhcNMjYwNzI0MTQwMDIwWjAzMTEwLwYDVQQD
EyhkMWFkMTRmOGJkZGFkOWE1ODJhYWJmZGMwNGVmY2U2OWM4YTNlNzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhrI8oA4PqiH/Pxk66uspUTDwjiS
yg8bhmXPC5W5rvC35eY9Sg3e3D0pLAGPC0tFmsID5prC/9g5SPCkpPugWKl47XTj
CbmbJdHIFuF/n5dKypELnaiE4Q1Fqb2/KkQatQPw9xylIElEjb3kJHO59jlyxpIj
hcxWrUInsdCzl3PSh2LK0NH1jvNGJ+R8y0vuPar53+RoyCnxG02JvZO82jYzIjhn
IXSCPxyeYfiVme38mHDaVWY6JIr7ThvLPkzfJxARHDyJdn0srhxHQgzQqaDNTtre
/D2IEAdRbAZi/FZ7unT7xoTsaQWT6grP6avq/CArdxde8JgCx6P8a6B2IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNGtFPi92tmlgqq/3ATvzmnIo+d4MB8GA1UdIwQY
MBaAFA+PBsNUlGCNmszrBwpM0Wq5X/amMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDQ4R3cxU1VZSTJhek9zSENrelJhcmxmOXFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9iMDkyMTgtODllNy00ODU5LWIzMmMt
NjBlOWI3ZGM1NTBiLzEvRDQ4R3cxU1VZSTJhek9zSENrelJhcmxmOXFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9iMDkyMTgtODllNy00ODU5LWIzMmMtNjBlOWI3ZGM1NTBi
LzEvRDQ4R3cxU1VZSTJhek9zSENrelJhcmxmOXFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfYp6lDMR
pbREI7quj4AiENjph9dOlTXHWKuK4vGTFmoJTKsm0OVPLRuP83XQjsXcIUW8Ezh+
kLcHz33dUzCd/44WD5JhlkUFpHqQK+scOj90P6inpHwkFD3xAfA1fe1abURgN9sx
wu/NGJM0pr62C3C4CgaMlTOcra+t7mEPr8eX40xS7ckS/spV/xcdnvBMcqi7PhY/
IoyDxqcWsSxPECnzu8kBFd47unRYDuQEVYAlNkyZD1LT+5FuTYKPAQS26ycwfk9w
38L9v+n2Aal9PUE45vOvKr5XGeWqEBTGm7Fqw/sFfmUoeJaCmdGgz/33Oq4Ww2yl
ddCzyDG+79jD0A==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:20 2026 by rpki-client