Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9773dc-d8e8-480d-98f2-c00cbc1492bf/1/0phnd6RO0JQPKaeVx19Fpi9EuzM.mft
File: 0phnd6RO0JQPKaeVx19Fpi9EuzM.mft (raw, json)
Hash identifier: fuLoUaLbPLD5cSn4v7FuyLQLZglPFeK6gwznrWZ9JJQ=
Subject key identifier: 07:90:E0:4C:DC:85:81:6B:49:E6:83:8C:6F:95:94:59:1C:E3:30:B4
Authority key identifier: D2:98:67:77:A4:4E:D0:94:0F:29:A7:95:C7:5F:45:A6:2F:44:BB:33
Certificate issuer: /CN=d2986777a44ed0940f29a795c75f45a62f44bb33
Certificate serial: 019F8F1007C32BF4B8A101E9F475166893F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0phnd6RO0JQPKaeVx19Fpi9EuzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9773dc-d8e8-480d-98f2-c00cbc1492bf/1/0phnd6RO0JQPKaeVx19Fpi9EuzM.mft
Manifest number: 09AF
Signing time: Thu 23 Jul 2026 13:00:20 +0000
Manifest this update: Thu 23 Jul 2026 13:00:20 +0000
Manifest next update: Fri 24 Jul 2026 13:00:20 +0000
Files and hashes: 1: 0phnd6RO0JQPKaeVx19Fpi9EuzM.crl (hash: mVbT/WrXlUgmRfpGKykgeTfQojH0ZVZBVx5e1+L0Tw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/9773dc-d8e8-480d-98f2-c00cbc1492bf/1/0phnd6RO0JQPKaeVx19Fpi9EuzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/9773dc-d8e8-480d-98f2-c00cbc1492bf/1/0phnd6RO0JQPKaeVx19Fpi9EuzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0phnd6RO0JQPKaeVx19Fpi9EuzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:07:c3:2b:f4:b8:a1:01:e9:f4:75:16:68:93:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2986777a44ed0940f29a795c75f45a62f44bb33
Validity
Not Before: Jul 23 13:00:20 2026 GMT
Not After : Jul 24 13:00:20 2026 GMT
Subject: CN=0790e04cdc85816b49e6838c6f9594591ce330b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3e:f9:70:a2:aa:03:66:e7:08:97:b9:20:2b:
1d:49:3d:22:6e:5c:a0:c1:5c:b6:0e:c9:8f:7c:11:
97:d3:f5:71:20:20:62:19:c1:e0:22:7a:df:43:2d:
0b:cc:95:f8:f3:28:2d:60:6c:08:17:10:51:c0:05:
d8:e1:ab:dc:d7:b4:db:7b:99:b6:1b:6c:3c:a7:93:
f4:a4:25:f8:40:44:a1:e6:9a:a1:04:c0:62:2c:ed:
44:fa:6d:0d:b4:fc:2b:f2:67:3c:61:f0:47:f7:27:
eb:e8:8b:ff:e4:ee:8b:0d:6f:91:cb:41:20:6c:a1:
cf:43:c5:a1:f2:38:30:11:1f:5a:ef:ea:b3:fa:c8:
e7:6d:5b:8a:90:08:bf:57:d0:cc:09:80:0a:d0:bf:
35:d0:c9:9a:a2:8a:49:cf:24:20:fb:63:2c:c6:a8:
f4:72:04:f9:7c:e2:de:2d:65:dd:aa:c3:f5:a8:93:
87:12:27:a7:d2:0e:fc:0f:55:df:e2:ac:b9:40:26:
b6:eb:17:80:73:1f:c2:07:21:5f:ec:ff:2d:ad:cd:
eb:82:3d:4c:f5:45:ea:a0:48:32:59:f1:4b:ed:a9:
5c:c2:3f:8e:d9:b2:d5:2c:d8:1e:92:25:15:27:45:
ec:57:13:41:13:2b:6c:bd:cf:fb:72:79:d4:bf:c2:
8b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:90:E0:4C:DC:85:81:6B:49:E6:83:8C:6F:95:94:59:1C:E3:30:B4
X509v3 Authority Key Identifier:
keyid:D2:98:67:77:A4:4E:D0:94:0F:29:A7:95:C7:5F:45:A6:2F:44:BB:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0phnd6RO0JQPKaeVx19Fpi9EuzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9773dc-d8e8-480d-98f2-c00cbc1492bf/1/0phnd6RO0JQPKaeVx19Fpi9EuzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9773dc-d8e8-480d-98f2-c00cbc1492bf/1/0phnd6RO0JQPKaeVx19Fpi9EuzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:7c:8a:4f:95:23:bf:9f:e9:33:7f:b5:9b:0d:db:9c:e4:75:
9d:74:99:e7:a6:81:98:2d:af:5d:32:ea:83:1c:be:b2:8c:0c:
4f:0f:7c:84:72:aa:01:2c:79:c7:3b:46:ec:fe:4e:1b:ab:92:
05:fa:4f:c8:45:0d:8a:ef:81:43:b0:87:58:d4:7f:58:12:e7:
d8:7d:68:bd:2f:4b:f8:4a:43:2a:fe:4f:ce:84:c0:2e:05:e7:
ab:fe:c2:d3:ae:9e:d9:94:0c:be:23:d3:9e:ab:98:14:97:e6:
bc:b2:78:1a:b8:ff:0f:cc:71:1c:86:31:63:75:2a:db:50:82:
e0:f4:ba:be:ce:99:a9:2c:f3:df:03:c9:a5:63:28:1b:3c:0d:
08:b4:f5:e9:09:d8:c9:5e:33:2e:90:da:14:41:54:11:28:2f:
a3:1f:2b:1d:62:fc:3f:6f:fd:d6:34:98:22:2e:fe:18:27:0b:
bd:89:f7:a6:20:4f:a3:7a:8a:20:2d:23:81:42:e6:97:c6:49:
63:a2:7c:df:41:7d:29:1a:92:d4:77:24:4b:9f:33:a8:df:c8:
f9:b0:d1:59:e8:e6:e3:da:dc:b6:c3:f1:84:56:77:06:5a:f3:
3a:bd:95:5e:14:58:3f:43:7e:6c:29:bb:85:4b:12:23:d4:96:
27:06:6d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:51:35 2026 by rpki-client