Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
File: D81k6vJZSCLz-aLrzRnbm3-nDZo.mft (raw, json)
Hash identifier: CNewNcKgdduMbtg0VbhBk5KYnc9vk5HACWJts7tBieU=
Subject key identifier: A4:C1:77:04:32:BA:65:9B:19:8B:F3:09:8D:4B:57:C9:40:29:2C:3E
Authority key identifier: 0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A
Certificate issuer: /CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a
Certificate serial: 019F92ED149FBCC70847DF8352B3B67F1A6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
Manifest number: 05D0
Signing time: Fri 24 Jul 2026 07:00:38 +0000
Manifest this update: Fri 24 Jul 2026 07:00:38 +0000
Manifest next update: Sat 25 Jul 2026 07:00:38 +0000
Files and hashes: 1: 1HQ2oYdrkzbGmcEGuOKgDpKVA-A.roa (hash: +R86VJ/9zKCCo9on3dPLqNmwVLLy9nPRqGdyKqWuego=)
2: D81k6vJZSCLz-aLrzRnbm3-nDZo.crl (hash: 1tmRMnNnY3M69GFj/bnxjh60rMXgqlltxm9YviuRyRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:14:9f:bc:c7:08:47:df:83:52:b3:b6:7f:1a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a
Validity
Not Before: Jul 24 07:00:38 2026 GMT
Not After : Jul 25 07:00:38 2026 GMT
Subject: CN=a4c1770432ba659b198bf3098d4b57c940292c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:70:99:1f:c7:3c:2d:4a:eb:c8:40:df:39:52:
79:31:25:c8:45:26:70:73:f4:45:c3:e5:f8:92:81:
2a:ae:36:46:1e:ac:de:4a:75:14:a9:0b:84:00:55:
8e:59:91:ac:92:5a:69:e5:19:ae:0a:7b:34:4f:89:
ce:f3:16:68:06:fe:27:a9:53:f2:9b:dc:de:94:04:
38:ee:90:b7:40:40:27:d3:a1:40:5d:57:86:14:90:
13:9b:26:db:d8:77:c7:db:49:7d:71:25:ab:d7:09:
80:f8:a6:41:43:e7:dd:e7:b8:ff:0a:4e:c5:bd:81:
bb:ce:d8:f9:53:59:97:85:25:3b:97:31:a6:99:92:
37:fe:87:df:ab:c6:1d:7e:cb:73:30:19:4a:73:0c:
59:c5:c9:d1:a6:83:fb:95:76:82:ab:99:8a:8d:97:
a6:52:cd:ed:9a:97:59:50:6d:5c:dd:72:27:24:65:
6c:4d:3d:fb:39:db:b2:c4:0d:23:2d:56:0f:a0:86:
9e:cd:25:55:91:26:fa:75:4a:b2:73:f1:e5:2a:a9:
12:8b:93:76:9e:41:dd:92:9d:c5:ac:1b:dd:0c:4a:
f0:73:1a:5e:08:52:fa:e5:63:75:cd:e3:24:c4:14:
4c:29:c3:28:ec:ed:9b:c8:71:94:6c:f0:4a:32:a6:
90:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C1:77:04:32:BA:65:9B:19:8B:F3:09:8D:4B:57:C9:40:29:2C:3E
X509v3 Authority Key Identifier:
keyid:0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:10:9c:c8:53:f9:07:a4:42:57:4e:8f:d2:e8:3c:7f:99:c7:
b6:80:a1:ea:f7:70:a4:d5:2c:bb:a7:8f:9c:16:23:88:0e:4e:
29:6b:77:b0:bc:c6:e6:e4:f9:cf:3b:c5:8e:a3:ca:c9:2b:a2:
c6:ed:cf:ed:eb:37:ec:f3:d9:1d:39:a0:d5:33:09:f4:9a:a2:
72:51:2f:98:dc:28:2a:c9:64:5d:08:c5:2a:b1:8f:d6:c6:da:
55:35:ec:c4:a2:2f:db:a4:23:e3:ce:a0:c4:84:b2:06:5a:6c:
e1:fe:97:b1:ea:9c:93:30:86:57:3b:75:e4:58:0b:38:f7:9f:
c3:0a:c1:84:5a:da:15:81:6a:cf:d1:99:ad:79:44:67:3c:2e:
b0:db:6c:6e:6d:ad:3c:5f:17:6c:cc:d2:a4:74:a3:32:01:95:
a1:00:22:2e:8f:ba:5c:64:df:fe:cd:11:dd:83:6d:6a:3e:4a:
4f:50:6b:83:13:06:76:d4:93:35:47:b6:19:dd:d1:e6:a7:34:
f8:23:83:1e:a6:01:fa:6d:eb:f8:ed:3d:d8:c4:7d:bc:f2:a2:
fd:97:64:de:6f:7a:91:82:61:9e:54:3c:67:32:bc:02:70:88:
9a:40:cc:ce:83:23:ea:f1:53:68:a8:7c:41:b0:20:6a:05:2d:
b4:bf:20:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:34:35 2026 by rpki-client