Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
File: D2vaHb-nfHTacoBe7lQY0_DMU50.mft (raw, json)
Hash identifier: SOZFyVAExYAWPbWphc/PK4qO2EayxPbPUqKw3SxSM3g=
Subject key identifier: 98:A0:F3:4D:BA:C5:A5:22:FB:9B:48:EC:6B:A6:E0:49:08:48:8E:68
Authority key identifier: 0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D
Certificate issuer: /CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d
Certificate serial: 019F905A39DB76D8DD652CAAC683898434B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
Manifest number: 16E9
Signing time: Thu 23 Jul 2026 19:00:59 +0000
Manifest this update: Thu 23 Jul 2026 19:00:59 +0000
Manifest next update: Fri 24 Jul 2026 19:00:59 +0000
Files and hashes: 1: D2vaHb-nfHTacoBe7lQY0_DMU50.crl (hash: MX/MDLa2niTy+W+2CEvqTUtjpBGpxAQ/wA0wWI0p1H4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:39:db:76:d8:dd:65:2c:aa:c6:83:89:84:34:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d
Validity
Not Before: Jul 23 19:00:59 2026 GMT
Not After : Jul 24 19:00:59 2026 GMT
Subject: CN=98a0f34dbac5a522fb9b48ec6ba6e04908488e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fa:7e:46:16:88:bf:79:43:26:a5:87:a2:08:
ba:a3:84:79:ac:12:9a:6c:15:ef:8d:9f:18:38:30:
27:8b:52:85:53:45:37:5c:7e:d4:47:a7:51:53:09:
c8:12:9c:f0:84:0a:2d:85:24:36:d5:21:e2:14:35:
7b:51:41:19:88:b2:ae:47:44:62:97:92:0c:0f:fa:
13:49:58:b8:f0:11:d1:eb:cb:20:a9:f7:64:06:36:
82:de:5e:6f:72:b7:e3:49:3f:3d:d3:f7:b9:a6:5d:
39:d5:9b:da:1e:af:6a:33:2d:73:38:c4:54:fa:5c:
fb:ce:e6:73:08:46:2e:be:90:33:27:73:09:cb:48:
3a:9d:46:3d:e5:98:5a:e6:a6:44:38:80:54:4b:70:
ea:30:e1:52:af:b5:54:b4:d0:f9:e4:d6:75:ac:d4:
45:47:e7:b4:9d:6f:7d:da:c7:1b:85:a2:cf:c3:07:
fa:78:17:ad:9e:87:43:3b:06:ab:91:aa:26:d1:90:
33:9b:11:30:6a:c5:ac:14:9b:80:89:36:f6:00:31:
73:91:9d:ea:4c:f0:08:cb:91:0c:88:e4:31:85:3b:
bf:c2:17:74:de:fd:cb:94:4f:6c:4a:22:59:2f:40:
9d:07:c5:22:15:c4:e3:a9:6f:53:50:2f:f9:f9:6b:
17:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A0:F3:4D:BA:C5:A5:22:FB:9B:48:EC:6B:A6:E0:49:08:48:8E:68
X509v3 Authority Key Identifier:
keyid:0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:47:cf:d7:14:b1:fa:e3:0a:3a:c0:4d:a4:8a:2c:18:00:60:
90:d2:a0:5a:de:b4:38:9b:5e:21:c7:87:cb:a9:b6:50:65:f1:
63:e9:11:26:03:5b:7e:ac:16:6d:f6:80:7f:c7:a5:90:1f:1e:
b2:c9:99:e9:f9:36:0d:16:1e:0c:94:be:d0:84:58:b3:f3:68:
df:44:da:04:85:e7:b2:e1:7d:0b:6a:50:75:46:82:58:fe:90:
c2:41:49:81:21:3c:02:8e:45:69:c7:13:f4:bd:74:87:d2:33:
3d:72:a6:ff:2c:d5:f0:07:39:c8:0c:52:f5:6d:dd:8c:7f:bb:
73:e0:97:c7:ad:4e:4a:f7:b5:3a:d2:b5:03:5f:c2:0d:f9:fd:
45:5b:69:2c:1e:d7:8b:02:4e:36:ac:78:e7:69:c5:1e:65:d8:
8f:b4:05:cc:ba:95:b8:7f:aa:94:d3:15:d0:b0:ad:2a:79:31:
36:a9:e0:d7:4b:f8:a6:1c:d8:fc:af:5f:25:fe:93:a5:39:54:
3b:1b:ac:e3:45:e4:8b:94:29:35:0e:90:15:9e:c0:1c:f9:cf:
37:3c:8b:2c:3c:82:03:56:d8:bc:52:8a:ba:9f:87:2c:b0:7f:
17:2e:3e:bf:ef:6f:5e:79:5e:a7:05:69:68:fe:03:7b:bc:d0:
cd:ef:ca:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:09:08 2026 by rpki-client