Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/386f81-b139-48af-bcea-a71fb4635065/1/D6j7U5miekMK5yfFMs0iSZnohk8.mft
File: D6j7U5miekMK5yfFMs0iSZnohk8.mft (raw, json)
Hash identifier: IZudX0w3PFMZLeLPt4TbzBBI2L/NxN5dEdle9jOspzg=
Subject key identifier: B0:22:39:2F:1D:DB:C7:86:E4:0F:57:12:47:E5:44:66:C9:EF:7F:16
Authority key identifier: 0F:A8:FB:53:99:A2:7A:43:0A:E7:27:C5:32:CD:22:49:99:E8:86:4F
Certificate issuer: /CN=0fa8fb5399a27a430ae727c532cd224999e8864f
Certificate serial: 019FAB2BFCD0E3138AD4694B3D32AB019444
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D6j7U5miekMK5yfFMs0iSZnohk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/386f81-b139-48af-bcea-a71fb4635065/1/D6j7U5miekMK5yfFMs0iSZnohk8.mft
Manifest number: 065E
Signing time: Wed 29 Jul 2026 00:00:14 +0000
Manifest this update: Wed 29 Jul 2026 00:00:14 +0000
Manifest next update: Thu 30 Jul 2026 00:00:14 +0000
Files and hashes: 1: D6j7U5miekMK5yfFMs0iSZnohk8.crl (hash: SYHFKcw+6/EqTuxdYOdHLp2ywmkYSWb0+amni1JBWMo=)
2: N3bXffW8yKFqU5UMm7fvxG-jz6A.roa (hash: bdRoY8TZDQQa0PscQFcX1AU8tV8n2oKXvuQ9ADHxYzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/386f81-b139-48af-bcea-a71fb4635065/1/D6j7U5miekMK5yfFMs0iSZnohk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/386f81-b139-48af-bcea-a71fb4635065/1/D6j7U5miekMK5yfFMs0iSZnohk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/D6j7U5miekMK5yfFMs0iSZnohk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2b:fc:d0:e3:13:8a:d4:69:4b:3d:32:ab:01:94:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fa8fb5399a27a430ae727c532cd224999e8864f
Validity
Not Before: Jul 29 00:00:14 2026 GMT
Not After : Jul 30 00:00:14 2026 GMT
Subject: CN=b022392f1ddbc786e40f571247e54466c9ef7f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2b:18:58:d4:8e:b8:ec:7f:dd:1b:c6:a1:ee:
53:50:c9:01:67:05:ff:79:2a:30:d6:69:48:31:68:
16:39:64:a1:fa:88:a1:74:f0:5d:fc:fb:f9:0d:ab:
3f:b6:10:b3:ff:7c:ef:57:15:bf:2c:32:90:96:bf:
28:7c:b5:01:49:62:27:2a:a0:c2:19:88:f8:1e:42:
f4:5f:ce:f6:56:d3:f6:58:db:8e:c2:74:09:1a:43:
8b:41:44:78:23:f4:0c:ac:96:e1:e5:b0:43:92:8c:
c2:8c:8f:74:47:99:e7:d3:65:e0:3e:aa:7d:e2:45:
2d:cb:b6:7c:0f:ca:c7:d4:df:fc:61:d5:85:d7:e2:
e6:6d:e8:cd:d1:e2:4c:8f:a8:5d:2a:a8:66:9b:a3:
8f:e2:a9:0c:e7:ab:7f:2c:b9:e9:aa:de:51:16:7d:
6b:4a:1e:37:b2:2c:76:69:8a:38:0b:65:15:51:22:
8d:69:55:e7:b2:13:08:98:2c:49:d4:17:cf:f3:dc:
25:00:b5:97:52:72:ea:96:d2:38:80:bd:0b:98:32:
8f:83:f6:94:da:14:d9:03:35:b7:e9:4a:93:fb:62:
98:38:a1:75:db:24:14:49:df:c6:ff:c2:66:6d:43:
dd:1a:85:76:d5:0e:cb:84:af:4f:3a:42:8a:4a:4e:
93:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:22:39:2F:1D:DB:C7:86:E4:0F:57:12:47:E5:44:66:C9:EF:7F:16
X509v3 Authority Key Identifier:
keyid:0F:A8:FB:53:99:A2:7A:43:0A:E7:27:C5:32:CD:22:49:99:E8:86:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D6j7U5miekMK5yfFMs0iSZnohk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/386f81-b139-48af-bcea-a71fb4635065/1/D6j7U5miekMK5yfFMs0iSZnohk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/386f81-b139-48af-bcea-a71fb4635065/1/D6j7U5miekMK5yfFMs0iSZnohk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:cc:18:4e:b2:0e:0f:0a:1c:9c:d7:9d:29:9a:70:3b:88:aa:
ff:3b:1a:ac:89:c1:45:ea:70:d4:98:c7:ba:23:9e:49:e9:a2:
18:7f:cd:aa:3b:0b:d5:bd:04:7b:b2:61:34:3e:f8:3a:27:31:
c6:be:ae:d4:f1:1f:4e:18:40:31:0c:bd:67:b4:2d:e4:16:ec:
d2:5f:ec:14:ef:55:7d:b4:fe:72:d3:4d:7b:42:99:66:38:b0:
98:e3:ec:3d:3d:80:e5:3d:c4:62:7b:88:14:d1:a2:98:26:34:
3f:91:ec:dd:e1:79:47:80:0e:7e:0a:5d:94:9c:67:b6:fc:a5:
9b:ee:48:d3:30:18:c6:41:c1:af:fa:75:03:3c:ea:7e:e4:54:
2d:4a:2f:df:93:01:c2:59:c5:5f:2b:4c:64:b8:62:d7:f6:fe:
6f:76:92:c7:4c:9c:32:a7:99:3e:be:10:40:e0:9f:57:76:53:
75:6b:16:e4:3e:9d:de:6a:5b:51:bf:5c:45:17:8d:0b:41:76:
e8:4d:59:73:8b:61:07:06:0b:09:49:62:37:97:ce:46:d8:f0:
06:84:f1:88:c1:c1:e4:73:ff:7d:3c:90:17:c9:e1:0e:ef:84:
23:eb:b0:c3:46:31:fb:e0:af:3f:2f:56:f4:2f:46:d6:c5:ab:
6c:4b:5f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:28:30 2026 by rpki-client