Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/090c7b-293e-49db-afb5-2905d21e3671/1/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.mft
File: D5fi7R6Sfb_Y3g1elKd9VMLdAEI.mft (raw, json)
Hash identifier: K5vdQXnt4UKhVy0G3ztLLXZlGHWsXdK6MCv0Cac6w6U=
Subject key identifier: BD:A6:59:30:4B:C1:A4:D9:9B:A4:0A:E9:72:74:F1:FF:B8:77:C3:39
Authority key identifier: 0F:97:E2:ED:1E:92:7D:BF:D8:DE:0D:5E:94:A7:7D:54:C2:DD:00:42
Certificate issuer: /CN=0f97e2ed1e927dbfd8de0d5e94a77d54c2dd0042
Certificate serial: 019FAA87996BE6D8F9C4A38183F18FFD0F12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/090c7b-293e-49db-afb5-2905d21e3671/1/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:00:41 +0000
Manifest this update: Tue 28 Jul 2026 21:00:41 +0000
Manifest next update: Wed 29 Jul 2026 21:00:41 +0000
Files and hashes: 1: D5fi7R6Sfb_Y3g1elKd9VMLdAEI.crl (hash: quMM3XH3RvqXqdEORD1GKAE+oxUpCXNnJOZ04GDibUQ=)
2: Um6n_idKHhLBJBBzUCl6l1HPrEI.roa (hash: SxF4T3uK56mVfgUvnXBquT7aoBlNGiQk5l7rUMHBbSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/090c7b-293e-49db-afb5-2905d21e3671/1/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/090c7b-293e-49db-afb5-2905d21e3671/1/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:99:6b:e6:d8:f9:c4:a3:81:83:f1:8f:fd:0f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f97e2ed1e927dbfd8de0d5e94a77d54c2dd0042
Validity
Not Before: Jul 28 21:00:41 2026 GMT
Not After : Jul 29 21:00:41 2026 GMT
Subject: CN=bda659304bc1a4d99ba40ae97274f1ffb877c339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b6:80:f9:d3:9c:26:76:56:7f:69:d3:d6:1f:
97:18:7a:bd:d0:8a:7c:74:17:86:9a:63:d5:6b:08:
00:c3:cc:d3:a8:6b:e7:02:99:c2:38:3b:4a:da:6a:
5a:d2:e8:5f:89:f1:62:09:83:31:cc:44:4a:35:36:
dc:ee:55:54:9a:40:d5:38:29:54:be:19:4c:5c:d0:
96:8b:50:41:f8:aa:b8:9c:07:32:58:8b:f0:cc:d4:
ff:5c:d4:c0:5d:ee:1f:e4:a2:73:07:fb:1f:c3:fe:
fb:a0:b9:a8:bd:fd:67:9e:83:8e:cb:37:97:de:34:
54:98:ec:56:4c:eb:8c:51:00:9e:a2:de:3c:5b:d8:
03:6a:ab:a0:41:be:a3:a1:df:53:85:ea:ce:71:29:
8d:ae:2d:ff:8c:1f:3d:ee:52:4c:82:76:d6:d9:fc:
ce:3c:d4:b6:30:bf:f7:2c:a2:ac:9c:d6:77:51:46:
ef:1f:17:7d:b2:2b:84:53:10:18:f8:02:85:5d:4e:
35:00:8a:29:c8:26:d8:2c:10:89:d5:b0:23:21:51:
9a:62:a3:2e:5c:e2:53:1b:59:b2:fe:a0:5f:0e:3a:
69:78:c6:af:31:ba:cf:3e:3a:de:07:c5:ac:2e:b6:
f1:16:c2:61:3a:6a:eb:57:32:91:b2:45:b3:2d:ee:
bf:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A6:59:30:4B:C1:A4:D9:9B:A4:0A:E9:72:74:F1:FF:B8:77:C3:39
X509v3 Authority Key Identifier:
keyid:0F:97:E2:ED:1E:92:7D:BF:D8:DE:0D:5E:94:A7:7D:54:C2:DD:00:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/090c7b-293e-49db-afb5-2905d21e3671/1/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/090c7b-293e-49db-afb5-2905d21e3671/1/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:dd:34:13:8b:6b:bf:98:94:02:dc:40:42:80:6f:8a:77:2d:
91:e2:9b:17:6c:60:61:8a:cc:7b:4c:00:3b:51:0d:33:e6:9e:
1a:21:3c:fe:95:6c:fa:bc:5d:e1:fe:d5:41:b0:db:0f:59:27:
4b:29:dc:9c:97:1a:9d:f1:d5:73:0d:c1:2c:37:0f:ab:ec:e5:
9b:26:dc:87:d9:6c:d0:55:10:66:1f:d9:6d:a6:a6:ce:30:83:
a2:51:69:5e:42:1f:f8:eb:c8:fa:7a:d1:4a:c5:8f:bd:92:ea:
c5:8c:63:28:92:32:23:24:82:1a:6c:7e:54:76:65:26:22:d4:
89:7d:ec:dd:22:97:59:67:6a:bd:c6:06:12:5a:9c:f6:8a:a8:
28:a4:e6:94:22:4c:22:c1:4b:54:07:09:d5:9d:87:43:df:e4:
c7:dd:50:15:00:e3:d9:8b:2e:25:61:1f:c5:7b:d6:61:ac:38:
94:f8:b7:ee:d9:c8:97:bb:d5:cc:1f:4d:51:04:f5:73:5e:09:
77:3a:ee:17:bd:71:cd:4e:70:c6:b6:41:8d:35:0b:3b:c9:fe:
62:f0:5d:33:e7:7d:1c:1e:30:60:ef:c7:3d:64:0a:fe:00:69:
7c:5b:de:08:81:1f:44:a8:bd:4a:07:ae:c0:41:c3:a7:80:91:
c4:3e:db:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:22:29 2026 by rpki-client