Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft
File: 0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft (raw, json)
Hash identifier: JotpTQUykacm96y2gWxidadCVi1Oj1WkKps7zzrANsU=
Subject key identifier: 9C:35:BD:FA:C2:A7:2A:6F:64:83:6A:E0:A9:26:F8:32:DA:8D:CA:46
Authority key identifier: D1:DB:4A:7D:1E:6A:BF:FB:CD:A7:8B:FC:33:12:50:DD:16:BE:3D:E0
Certificate issuer: /CN=d1db4a7d1e6abffbcda78bfc331250dd16be3de0
Certificate serial: 019F935AEB4867ECE9103B73FE56C690178B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft
Manifest number: 1071
Signing time: Fri 24 Jul 2026 09:00:36 +0000
Manifest this update: Fri 24 Jul 2026 09:00:36 +0000
Manifest next update: Sat 25 Jul 2026 09:00:36 +0000
Files and hashes: 1: 0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.crl (hash: MREJyZ4b7eFtvvIxsrt+R2u6uLKc3mW7GNoxt7HbyXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:eb:48:67:ec:e9:10:3b:73:fe:56:c6:90:17:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1db4a7d1e6abffbcda78bfc331250dd16be3de0
Validity
Not Before: Jul 24 09:00:36 2026 GMT
Not After : Jul 25 09:00:36 2026 GMT
Subject: CN=9c35bdfac2a72a6f64836ae0a926f832da8dca46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:57:7a:91:b4:f9:f3:23:01:ba:72:1e:6d:61:
06:0d:22:93:c0:91:48:d3:43:f8:32:3e:dc:04:d9:
a4:fb:a2:df:f1:2f:12:2f:47:66:3c:9a:e4:b6:68:
ab:6a:3b:0a:75:07:b3:90:91:4a:35:53:99:53:32:
0f:82:ce:a0:bf:7b:79:4e:92:14:b3:e4:16:eb:27:
17:5f:b0:4a:66:46:df:29:ab:99:ab:96:e2:ba:16:
ec:a0:1c:db:6e:cd:90:e9:78:4b:eb:54:e9:d7:c4:
f3:ad:e9:dc:5b:68:9b:12:40:d3:6a:79:2c:e3:d7:
e2:57:c3:60:75:a4:1c:29:80:23:83:5b:4c:f8:4c:
f3:75:d4:ca:23:8c:78:fe:59:41:fc:5c:e8:76:ef:
2a:39:0b:f6:1f:c0:3f:45:69:39:9d:f9:f3:38:83:
45:fc:b0:73:f5:9a:98:69:d9:8f:d8:83:c2:8c:9a:
90:72:85:7d:cb:06:ed:71:1c:a8:e5:35:f6:dc:1f:
8f:de:ca:03:f8:18:fa:fc:7f:cd:a2:80:b6:0c:d0:
0a:c0:7e:19:88:21:72:f0:f9:01:fd:77:5f:45:e3:
38:60:cd:25:ed:99:a1:f6:9b:91:d2:66:87:c5:0f:
a5:ad:b2:96:73:f6:e0:1b:b7:47:3d:68:3e:44:03:
4c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:35:BD:FA:C2:A7:2A:6F:64:83:6A:E0:A9:26:F8:32:DA:8D:CA:46
X509v3 Authority Key Identifier:
keyid:D1:DB:4A:7D:1E:6A:BF:FB:CD:A7:8B:FC:33:12:50:DD:16:BE:3D:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:58:ef:68:b2:cd:a7:6d:bd:0b:c4:07:10:5d:2e:78:97:86:
73:b5:7e:ad:c8:1d:aa:91:1d:2e:d0:3b:cb:8a:90:d0:f0:1d:
e9:0a:8f:b8:fd:c2:2b:12:1d:34:ed:87:25:7d:ae:10:52:0e:
4f:7b:ba:a1:e1:a0:6d:e2:50:dd:4e:19:d0:a7:b4:f6:2d:56:
6d:9c:e3:fb:b6:9f:00:56:19:df:65:bf:47:1c:c9:75:d1:90:
67:76:4b:58:1d:9a:ad:f0:b1:0f:08:45:9d:97:f2:39:00:05:
a1:06:32:82:9a:ee:11:72:3c:42:c7:a2:c1:6b:d4:66:6a:34:
96:09:c2:f4:77:24:69:f7:d5:be:bc:8d:e7:08:a6:68:82:4d:
34:5d:87:2f:f5:14:11:49:dc:55:0d:bb:49:67:6b:38:ec:c1:
02:5f:a8:69:e6:8b:5a:18:c5:b9:e8:a7:9d:aa:a9:43:73:72:
bc:28:6a:d8:9d:98:cd:63:50:72:c7:1b:34:44:e9:2c:f8:a0:
36:30:0b:8b:a2:69:7f:0b:77:ac:9a:12:54:9b:cd:39:5f:da:
d7:3a:83:b4:ed:f7:a7:b5:3a:04:ff:45:4a:04:18:79:98:53:
4a:7e:b8:2b:97:20:04:06:18:29:ad:19:ad:79:28:1e:b0:f6:
a8:6c:d6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:11:18 2026 by rpki-client