Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.mft
File: D1PmC9pkZYSIzqajMPBcd0nVucY.mft (raw, json)
Hash identifier: 27WFcwvqxadg4uUoOSUOYnykYu29DhKsngdvzCOgSEs=
Subject key identifier: 9A:BC:C3:5A:B8:B4:C4:14:CE:0A:D5:3E:9E:0D:56:F6:1D:B7:A3:9D
Authority key identifier: 0F:53:E6:0B:DA:64:65:84:88:CE:A6:A3:30:F0:5C:77:49:D5:B9:C6
Certificate issuer: /CN=0f53e60bda64658488cea6a330f05c7749d5b9c6
Certificate serial: 019F9059FBE6F66475ECA335675897DFE796
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1PmC9pkZYSIzqajMPBcd0nVucY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.mft
Manifest number: EB
Signing time: Thu 23 Jul 2026 19:00:43 +0000
Manifest this update: Thu 23 Jul 2026 19:00:43 +0000
Manifest next update: Fri 24 Jul 2026 19:00:43 +0000
Files and hashes: 1: D1PmC9pkZYSIzqajMPBcd0nVucY.crl (hash: dmkHmkcz9oCznDKrxRaCioG7qFl1e12qhA9FZVhpXws=)
2: _tT1XC7nkQRWgQdxKibbMXrzVoc.roa (hash: zg0b/n4wXZx1538KhR67xdLnhn+vJRWK90TV+fz8uiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1PmC9pkZYSIzqajMPBcd0nVucY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:fb:e6:f6:64:75:ec:a3:35:67:58:97:df:e7:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f53e60bda64658488cea6a330f05c7749d5b9c6
Validity
Not Before: Jul 23 19:00:43 2026 GMT
Not After : Jul 24 19:00:43 2026 GMT
Subject: CN=9abcc35ab8b4c414ce0ad53e9e0d56f61db7a39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3f:f7:f3:7f:fd:71:8b:1f:c0:85:af:79:2f:
63:16:21:34:b0:39:bb:dc:3b:ba:06:02:61:ce:77:
d4:ef:d6:fe:cf:e3:b6:c3:1f:8b:11:0f:dd:ec:6f:
e0:30:2f:01:48:2d:9b:5a:bb:38:d4:2d:ff:8c:a1:
f0:d7:79:a5:9f:0b:f2:94:35:8c:f8:87:69:eb:8f:
ad:4a:0b:6c:24:40:13:9d:ff:9f:7e:d1:f5:29:32:
1d:8c:99:7c:12:2e:39:9c:e1:9d:b2:3e:11:63:f2:
2b:b2:45:b4:96:e2:a9:2c:b4:06:da:dd:69:54:42:
e9:bf:32:8e:b1:c1:20:78:5d:9b:db:4d:20:e4:1f:
9e:9a:b1:1a:c9:17:fa:92:8b:de:e6:ec:77:0e:3c:
9d:fe:ae:70:75:43:bc:9e:4f:ba:06:f2:9a:29:89:
15:16:a0:cb:a1:a6:81:f2:4b:e7:63:1a:01:c7:21:
1d:f0:24:d2:73:df:b4:61:53:20:f7:42:fb:b6:52:
54:b8:41:c4:3b:f7:31:a9:09:13:8b:21:b8:24:ae:
f9:48:1e:18:c0:c2:62:5a:5b:9a:42:91:47:10:76:
47:f3:ac:af:06:a2:16:24:1b:8e:7b:c0:67:94:d8:
52:8f:5a:ab:b1:e0:34:8f:15:74:3a:c6:df:d1:1b:
72:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BC:C3:5A:B8:B4:C4:14:CE:0A:D5:3E:9E:0D:56:F6:1D:B7:A3:9D
X509v3 Authority Key Identifier:
keyid:0F:53:E6:0B:DA:64:65:84:88:CE:A6:A3:30:F0:5C:77:49:D5:B9:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1PmC9pkZYSIzqajMPBcd0nVucY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:d5:05:ba:58:4e:51:7c:9f:15:01:bd:d5:48:56:f5:72:fd:
0b:98:85:4e:9e:35:2b:4b:c9:d5:db:f7:2b:2b:d6:36:07:83:
10:e7:7d:a5:23:2a:2b:0a:c4:3d:2b:f6:bc:32:44:c8:f6:c6:
73:9d:2c:fa:d0:b0:ea:a3:6e:21:b5:eb:fc:fc:08:74:4c:18:
f1:8e:8f:5e:cd:cb:5d:06:14:3b:42:fc:49:76:2b:6c:6b:c7:
a3:b9:67:c4:07:32:03:43:93:88:50:a1:f8:ea:a9:2a:7c:23:
9e:2f:a7:28:5b:2b:51:6d:51:ad:36:87:aa:57:42:2b:30:d0:
61:cf:f9:4b:3f:e4:33:f5:83:fb:84:d5:db:32:e8:f9:09:09:
04:15:0d:ae:f2:42:9f:c4:b6:9b:4f:83:a9:f8:af:22:ea:24:
f6:45:a2:3e:5d:72:12:a8:9e:f6:b4:f6:4b:52:13:eb:eb:97:
f9:85:c7:e9:05:c2:e1:90:7c:88:32:df:52:3a:fd:9f:bb:14:
ea:45:ec:2a:13:c3:48:91:93:91:d0:10:09:d5:26:ab:a3:ed:
f2:d8:ae:eb:9d:9f:cf:51:35:6e:42:34:54:bb:c1:f7:19:70:
cc:50:66:1e:17:ae:76:fa:04:11:2c:42:16:1a:71:74:76:c3:
fe:5d:81:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:36:09 2026 by rpki-client