Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
File: D4jGhrHhIvzcFlwCN6D149mQvwE.mft (raw, json)
Hash identifier: jvYtLJWhALFZ1M2LvlCCIyThXAU2i59mEHpGNbI25dM=
Subject key identifier: 67:FF:57:DC:9C:B8:71:DC:56:68:24:4E:F9:0A:05:61:1C:B1:9A:BA
Authority key identifier: 0F:88:C6:86:B1:E1:22:FC:DC:16:5C:02:37:A0:F5:E3:D9:90:BF:01
Certificate issuer: /CN=0f88c686b1e122fcdc165c0237a0f5e3d990bf01
Certificate serial: 019F92ED03B44194AAC4FFF5C723317A8EC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4jGhrHhIvzcFlwCN6D149mQvwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
Manifest number: 0F74
Signing time: Fri 24 Jul 2026 07:00:34 +0000
Manifest this update: Fri 24 Jul 2026 07:00:34 +0000
Manifest next update: Sat 25 Jul 2026 07:00:34 +0000
Files and hashes: 1: D4jGhrHhIvzcFlwCN6D149mQvwE.crl (hash: +BsYi0HEXwgt6NwOzGjwhrzMiDfSIOa5wPwT6ud39kA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D4jGhrHhIvzcFlwCN6D149mQvwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:03:b4:41:94:aa:c4:ff:f5:c7:23:31:7a:8e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f88c686b1e122fcdc165c0237a0f5e3d990bf01
Validity
Not Before: Jul 24 07:00:34 2026 GMT
Not After : Jul 25 07:00:34 2026 GMT
Subject: CN=67ff57dc9cb871dc5668244ef90a05611cb19aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ef:03:48:af:03:ef:5c:5e:94:a2:93:76:16:
dd:8d:c9:e0:6f:01:af:33:2c:17:6d:4d:06:81:27:
5a:eb:0f:6d:a9:8a:10:47:f9:1d:ce:dc:b4:93:2e:
a2:41:05:df:c8:c1:39:aa:ab:18:6a:e0:d2:df:68:
85:ed:5e:d3:33:9c:78:42:79:cc:38:f9:6b:91:0c:
5e:9b:db:6c:ad:d5:da:68:cf:1a:fe:a3:29:1e:92:
cd:ef:a3:74:0e:44:ef:d5:c1:5a:cb:1f:f5:75:79:
a5:08:93:fe:a9:43:28:4e:95:29:1d:a1:71:76:0e:
52:14:47:bb:5f:7d:16:e3:4c:cd:93:e4:bd:fa:a8:
50:c0:25:d2:43:e5:96:15:c9:92:55:9e:fe:a5:85:
c4:23:1f:4a:ed:2f:31:2e:3d:59:21:36:a8:40:59:
5a:e4:00:61:14:10:e4:e6:64:4a:cf:4a:ab:dc:85:
6b:57:15:ed:9c:2c:d9:1b:18:16:cf:5a:1e:3c:0a:
75:5b:a7:f6:d4:c7:2b:6d:44:ce:0f:78:ac:45:db:
84:e5:0f:06:74:b8:4c:eb:18:fc:52:28:c1:e0:63:
8b:26:1f:1f:07:5d:21:d5:18:e4:21:8c:db:c5:ec:
c3:5b:d5:58:d6:90:da:0e:b3:d8:2e:4c:90:c1:9a:
c1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FF:57:DC:9C:B8:71:DC:56:68:24:4E:F9:0A:05:61:1C:B1:9A:BA
X509v3 Authority Key Identifier:
keyid:0F:88:C6:86:B1:E1:22:FC:DC:16:5C:02:37:A0:F5:E3:D9:90:BF:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4jGhrHhIvzcFlwCN6D149mQvwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:cb:cc:14:98:50:74:a4:e5:d8:76:d2:f0:4c:5f:6d:b2:ad:
fb:99:c3:55:55:47:76:91:c3:e0:f7:79:5a:b4:f2:0c:4b:3e:
4f:23:0e:27:09:94:20:c7:18:8f:9c:6b:19:ab:46:54:55:e8:
69:71:81:c7:e5:74:36:28:60:3b:2c:74:cb:f2:6e:3d:58:2c:
5b:03:30:38:84:0d:ab:19:2b:f5:63:4d:e4:8c:c2:dc:88:ac:
be:66:04:7b:ae:3d:cf:26:5e:49:68:ef:84:e1:c3:2c:b3:09:
b5:d8:5c:ec:af:c4:74:a1:73:24:28:b5:47:d0:a6:77:a6:38:
d1:67:1e:2d:2d:88:8b:f1:69:a3:4c:1e:bb:08:a2:7f:6c:dc:
ea:07:93:61:04:f2:4e:7b:2b:46:ac:7f:0a:9c:3e:d4:37:28:
7b:6a:41:d4:3e:ba:0d:f6:87:d6:36:68:ef:e2:99:fa:e0:1f:
df:72:f0:04:73:ae:fa:6f:f3:61:c8:fb:64:4b:ab:31:7b:a4:
ad:04:0c:fd:36:1a:72:22:1a:ab:2d:9a:3f:7d:38:85:95:ea:
8c:4c:f8:bf:d2:06:d1:72:89:4e:9c:f8:3f:9f:73:e7:98:11:
82:af:0f:44:d7:26:e4:db:d9:6c:4d:d8:c9:2e:00:79:bb:33:
5f:73:6f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:51:38 2026 by rpki-client