Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/D57Y1txc8s3y4BOfJw7RJLRpFPU.mft
File: D57Y1txc8s3y4BOfJw7RJLRpFPU.mft (raw, json)
Hash identifier: S+uYx4lmVnNb1G2hX1UayQ6eQG/F8q1SGMMgeGjbNPI=
Subject key identifier: 04:B1:E3:2A:66:34:98:01:6A:CE:12:F5:E4:94:DE:5C:B6:CE:BA:09
Authority key identifier: 0F:9E:D8:D6:DC:5C:F2:CD:F2:E0:13:9F:27:0E:D1:24:B4:69:14:F5
Certificate issuer: /CN=0f9ed8d6dc5cf2cdf2e0139f270ed124b46914f5
Certificate serial: 019F8F7E67D4ABE2ADAC6FAFC1449162783D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D57Y1txc8s3y4BOfJw7RJLRpFPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/D57Y1txc8s3y4BOfJw7RJLRpFPU.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:00:53 +0000
Manifest this update: Thu 23 Jul 2026 15:00:53 +0000
Manifest next update: Fri 24 Jul 2026 15:00:53 +0000
Files and hashes: 1: D57Y1txc8s3y4BOfJw7RJLRpFPU.crl (hash: XFcJWSQTeUckZFRnTSrHxf2jb1FdVNssVKOO64Lwxp4=)
2: uOBm2HHtiL1ygzBZkyEvZ-yYHSQ.roa (hash: ZLfbp4P8xVbyALUzm93DM46ieUzkAqS9Mn1Fvu7mqJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/D57Y1txc8s3y4BOfJw7RJLRpFPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/D57Y1txc8s3y4BOfJw7RJLRpFPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/D57Y1txc8s3y4BOfJw7RJLRpFPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:67:d4:ab:e2:ad:ac:6f:af:c1:44:91:62:78:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9ed8d6dc5cf2cdf2e0139f270ed124b46914f5
Validity
Not Before: Jul 23 15:00:53 2026 GMT
Not After : Jul 24 15:00:53 2026 GMT
Subject: CN=04b1e32a663498016ace12f5e494de5cb6ceba09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0d:00:9e:05:40:c4:c0:8a:f2:86:46:21:ee:
7c:f9:97:2b:43:ec:af:8a:b3:dc:a1:4f:1f:00:d3:
23:30:5e:17:b3:bc:8d:4b:21:c0:78:9a:ed:e0:c9:
dc:ab:12:0a:dc:6b:21:85:4c:35:87:32:28:32:f1:
a4:6b:4c:8e:52:58:5a:0d:1e:80:91:a4:cc:ca:69:
2a:51:d5:22:16:e7:91:84:f2:f9:65:56:b0:f1:81:
3b:86:88:38:bb:06:16:66:a4:00:57:41:63:06:ac:
8e:84:0f:56:59:73:84:3a:1e:59:4d:8e:8a:cc:38:
cf:04:41:c8:1c:92:e0:5a:f9:a8:f2:cb:a6:02:75:
6f:56:8c:5d:f0:0c:0c:5e:54:ff:f6:77:90:a8:d5:
ec:5e:e9:44:39:c6:23:24:f8:51:d9:59:ee:ed:5b:
b9:4d:a0:24:b3:c1:6d:30:ae:95:d8:34:87:c7:5d:
c8:5b:7a:21:0f:cd:1b:fa:7b:f5:c5:28:03:db:e9:
a3:23:10:8a:ef:e3:9f:a6:26:44:c5:96:7e:30:77:
f8:fd:2e:05:bf:c9:84:f4:37:6b:2b:89:c7:3f:77:
e7:7e:6c:aa:1e:6f:23:d6:45:b6:90:4c:8f:bb:54:
0a:cb:6f:26:5d:fe:88:23:76:fe:9b:eb:45:b9:9d:
ba:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B1:E3:2A:66:34:98:01:6A:CE:12:F5:E4:94:DE:5C:B6:CE:BA:09
X509v3 Authority Key Identifier:
keyid:0F:9E:D8:D6:DC:5C:F2:CD:F2:E0:13:9F:27:0E:D1:24:B4:69:14:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D57Y1txc8s3y4BOfJw7RJLRpFPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/D57Y1txc8s3y4BOfJw7RJLRpFPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/D57Y1txc8s3y4BOfJw7RJLRpFPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:59:03:3d:53:50:d1:5e:20:9f:f6:12:cf:fe:5a:4d:cd:d0:
b9:ce:b8:47:39:cb:7d:2b:6d:d6:75:13:27:09:ad:15:29:f7:
bc:e4:02:6f:79:6c:5d:ad:e2:a1:ef:cd:67:e9:39:69:09:1d:
73:8c:03:71:a7:35:6c:21:bb:75:cf:60:91:0a:2f:9f:64:f1:
06:41:a6:62:64:72:87:59:f3:17:e9:aa:6a:fb:61:d3:df:95:
ad:ea:6f:c6:1d:8b:19:68:34:61:92:da:92:ec:7e:1b:76:55:
b6:20:ed:c7:cb:1a:d2:d6:94:5a:ae:ca:b6:00:17:53:00:0e:
cd:76:ad:25:bc:9b:b2:52:43:a4:e1:9c:50:e2:e1:51:ec:9a:
6c:56:d2:e4:a1:96:16:3a:4a:00:b1:a5:84:f8:d8:c3:ce:22:
db:5a:46:d7:ee:f2:9e:40:ce:ec:84:9a:e4:bd:b9:2f:ce:f6:
a7:b6:5b:08:36:b0:e8:df:c2:68:8d:4c:0b:43:1d:2b:eb:cd:
e1:81:b2:c2:21:82:5d:aa:1d:cd:be:30:db:fc:36:bc:2e:2f:
c2:70:e9:5f:6c:c6:53:73:be:fb:42:f4:8b:cb:e7:50:22:7f:
0c:96:84:f1:4c:55:47:0c:98:06:0b:be:0f:45:ae:1b:8c:9f:
41:09:8b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:05 2026 by rpki-client