Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
File: D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft (raw, json)
Hash identifier: IYOgXHopaOMHepjPtabZcw6/egIyjqouUH7zwo4anqU=
Subject key identifier: 4E:0C:E4:45:C8:7D:CA:5B:9B:0F:5E:CB:46:EB:EF:5B:E2:E9:D5:BF
Authority key identifier: 0F:79:76:05:20:B7:C1:5C:2E:42:60:30:82:72:B8:49:F8:8E:D6:77
Certificate issuer: /CN=0f79760520b7c15c2e4260308272b849f88ed677
Certificate serial: 019F9135E25950C8B07D7DAC2990FA698B96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
Manifest number: 19C5
Signing time: Thu 23 Jul 2026 23:00:55 +0000
Manifest this update: Thu 23 Jul 2026 23:00:55 +0000
Manifest next update: Fri 24 Jul 2026 23:00:55 +0000
Files and hashes: 1: D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl (hash: OAEJyU+IDeEBE5Mrx71L3IXkt/Q7+eZM1s05hQfs5PA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:e2:59:50:c8:b0:7d:7d:ac:29:90:fa:69:8b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f79760520b7c15c2e4260308272b849f88ed677
Validity
Not Before: Jul 23 23:00:55 2026 GMT
Not After : Jul 24 23:00:55 2026 GMT
Subject: CN=4e0ce445c87dca5b9b0f5ecb46ebef5be2e9d5bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b9:c9:8f:f2:fc:ea:e6:2a:ae:59:2f:5b:b6:
58:0c:a4:31:c8:f4:fb:a1:ad:93:c4:28:b9:59:55:
d2:5e:03:8b:eb:3e:8d:fa:7c:60:08:5e:89:32:9d:
6e:da:22:3d:43:92:48:bc:d0:ff:0b:ee:43:9a:fe:
bd:92:5b:a7:e6:cd:72:ee:20:80:45:c6:f5:25:a2:
d4:d9:db:24:ec:f1:63:69:bb:91:76:e9:ed:13:55:
90:50:3a:98:ed:8b:b2:44:8a:46:36:a8:15:3e:85:
4c:41:0f:59:72:59:99:23:5b:7f:68:cc:c0:6a:1e:
59:67:43:18:32:0c:be:d2:7c:24:ac:88:95:2c:5a:
06:c7:7b:77:46:04:2b:82:99:1d:cd:70:0c:d4:db:
3a:ac:69:99:ea:22:5a:38:f3:33:3b:6d:4b:94:c3:
5d:97:e0:7a:74:1c:4b:bc:67:cc:80:ac:69:a3:6a:
48:d9:09:66:df:28:2e:0a:68:91:3a:77:5d:dc:68:
84:16:3e:41:fc:8c:45:dc:e9:a8:86:a3:77:b6:56:
d0:f2:c3:e2:50:64:38:cf:a2:bd:e5:82:5f:dc:13:
5b:cb:56:1d:96:ab:e9:b6:a8:5d:96:c8:f7:70:85:
c6:a2:f5:6a:ba:7c:08:24:bd:8e:fe:94:02:e4:d2:
aa:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0C:E4:45:C8:7D:CA:5B:9B:0F:5E:CB:46:EB:EF:5B:E2:E9:D5:BF
X509v3 Authority Key Identifier:
keyid:0F:79:76:05:20:B7:C1:5C:2E:42:60:30:82:72:B8:49:F8:8E:D6:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:3e:5a:e8:37:0f:c3:69:29:03:14:ac:8d:0c:16:bb:86:0e:
00:64:7f:23:2b:5a:a7:24:c0:b3:ac:a6:c6:8c:c2:ac:72:70:
47:f2:7c:3a:58:25:89:44:df:f4:c4:bc:c5:1d:7e:c8:83:e0:
db:e2:24:98:fd:23:da:32:e8:c7:ea:9d:e7:fc:11:21:c0:e5:
52:82:89:1c:24:5b:75:a1:d5:51:0d:1c:a4:12:9b:09:cb:82:
8c:14:d6:76:43:ce:35:47:5e:e6:ff:73:d7:36:ae:4c:b9:4a:
f1:02:0c:11:5c:18:1d:25:6e:30:11:c1:23:ea:0f:27:37:f4:
e4:41:6c:ee:08:4b:a3:63:fa:ff:15:a3:50:0d:8c:27:e8:fc:
96:39:49:17:e2:18:65:4c:ae:63:ce:07:df:e3:ec:b3:db:a0:
4c:d0:92:d1:ec:b9:d2:09:5c:cb:7f:4f:0f:2c:5a:99:5e:40:
c3:d6:20:32:8f:44:52:90:90:11:b4:08:6b:3c:a5:32:2f:2e:
1f:db:c4:36:46:53:ef:2f:cd:ef:35:a9:4a:d4:53:87:42:85:
4a:db:3e:1d:39:30:3d:7d:05:70:7e:37:cc:2b:e2:15:bd:63:
7d:7a:6c:16:1e:c2:0d:f9:d5:a4:7f:c2:86:fe:93:41:85:bd:
b3:9a:7c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:15:14 2026 by rpki-client