Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
File: D5JWkWA5A-8kSFy0vzXigweGe4M.mft (raw, json)
Hash identifier: nmcXNeAhu3lOnNZ4SbcaUgsX/EQMq3BcSwBtxaN3TjQ=
Subject key identifier: 36:8F:92:95:BA:62:C6:5D:2C:B7:1E:44:99:FD:C5:2C:72:0D:A2:28
Authority key identifier: 0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83
Certificate issuer: /CN=0f925691603903ef24485cb4bf35e28307867b83
Certificate serial: 019F8FB50549A03E1110BE4249C145A22938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
Manifest number: 07D4
Signing time: Thu 23 Jul 2026 16:00:33 +0000
Manifest this update: Thu 23 Jul 2026 16:00:33 +0000
Manifest next update: Fri 24 Jul 2026 16:00:33 +0000
Files and hashes: 1: 80qBnu2XnhFRiBmZiF038oU110Q.roa (hash: LIRyJNKQ/3u7PO7ipf6wdyHbe0bKIPQwJsid3/CO5Lg=)
2: D5JWkWA5A-8kSFy0vzXigweGe4M.crl (hash: VHO5idEM5FPIyd1pyEEXttpJ9IZsH+g8+HzivWo2Z3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:05:49:a0:3e:11:10:be:42:49:c1:45:a2:29:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f925691603903ef24485cb4bf35e28307867b83
Validity
Not Before: Jul 23 16:00:33 2026 GMT
Not After : Jul 24 16:00:33 2026 GMT
Subject: CN=368f9295ba62c65d2cb71e4499fdc52c720da228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:53:b9:66:db:70:2c:1e:68:3f:55:18:4c:99:
1e:32:6f:7d:a4:39:43:13:32:6e:6c:09:d2:39:ac:
34:e0:ba:18:03:8f:55:5d:dc:ad:e7:cd:2e:b4:4d:
5b:82:10:45:a2:0f:75:f7:6d:68:21:0a:5e:28:c7:
2b:1b:70:59:ed:bc:a5:52:f6:ce:5a:f3:cc:ef:e7:
92:e9:a1:b6:97:00:22:83:6d:99:ff:3a:44:a8:6b:
2e:89:ac:fe:25:cd:ca:e6:79:84:68:bd:26:75:92:
6b:1b:64:35:a5:18:73:51:6d:ae:73:79:bb:62:be:
a8:8f:cf:98:3c:d4:43:48:f8:61:b4:b0:5b:c9:ef:
2f:f7:b0:10:99:3d:b1:b9:20:97:9c:83:b7:22:40:
ef:60:95:c4:a3:89:8a:79:43:68:16:23:19:8a:ea:
64:9a:db:e7:33:56:5e:f7:fa:01:e9:ee:58:cb:81:
5d:a3:26:eb:0d:54:49:ba:97:69:f0:e8:52:eb:70:
55:a6:36:eb:f2:24:21:8a:24:28:8e:f6:1b:4a:f8:
d0:ab:1b:dc:ea:8d:73:f1:9c:40:7b:92:6b:8f:da:
b5:b8:c2:dc:ce:30:e7:ff:47:81:3f:04:99:5e:27:
4e:f3:7e:f7:d0:ec:d2:c2:26:e2:4d:14:87:f5:eb:
55:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8F:92:95:BA:62:C6:5D:2C:B7:1E:44:99:FD:C5:2C:72:0D:A2:28
X509v3 Authority Key Identifier:
keyid:0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:15:b4:57:62:ac:11:2a:99:70:63:3d:f6:86:40:29:dc:12:
f0:6b:76:07:f6:4c:4f:91:cc:40:c5:93:e2:a0:71:d3:ba:3a:
15:86:a2:68:ef:c9:1b:8e:d7:f9:24:d8:2d:46:42:c5:c5:9a:
97:0b:78:27:f7:cd:3f:06:7f:21:81:74:4e:88:62:dc:f3:05:
73:31:80:e7:09:4f:fe:07:e9:9f:64:c8:79:2d:35:5d:90:14:
5e:7c:32:7d:d3:63:79:f6:43:c9:a8:4f:49:bf:ba:ff:b8:23:
c1:12:84:af:e3:c9:1b:d7:67:4c:0a:2d:8b:aa:5c:7d:e6:6d:
d6:f4:d1:52:32:a5:5f:da:07:22:9b:df:d5:85:f5:ca:01:d5:
8b:07:50:b4:06:cc:76:d5:5f:39:40:5c:05:ba:04:a0:57:ae:
63:24:02:0a:9d:34:d2:b9:78:b6:7d:03:89:57:80:9e:5d:89:
28:05:a0:d6:92:b9:91:b8:a2:c7:3c:7b:32:b8:71:3f:47:67:
33:97:38:08:b3:01:f3:87:a0:64:24:15:12:c5:3b:66:ef:09:
bd:f9:72:7c:27:12:ac:58:d7:49:c0:63:45:00:38:5a:17:e2:
d6:e8:d6:4e:eb:18:09:95:c9:49:86:ee:56:de:66:dc:1c:0f:
71:7b:85:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:52:23 2026 by rpki-client