Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/89dd25-546c-4f18-acc4-7a4057314167/1/DUlCfYpEd823aAhhqexQ3HMhaYI.mft
File: DUlCfYpEd823aAhhqexQ3HMhaYI.mft (raw, json)
Hash identifier: +5VLyHIhirONtf8wJaMIXoGmqd+N7Koan+355ShLqGM=
Subject key identifier: 7F:FA:36:D5:70:DF:D2:9B:13:9C:DB:9C:E2:0C:DE:7E:86:D6:60:DF
Authority key identifier: 0D:49:42:7D:8A:44:77:CD:B7:68:08:61:A9:EC:50:DC:73:21:69:82
Certificate issuer: /CN=0d49427d8a4477cdb7680861a9ec50dc73216982
Certificate serial: 019FAA19981C2A177B8C1CB2A59552FF758A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUlCfYpEd823aAhhqexQ3HMhaYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/89dd25-546c-4f18-acc4-7a4057314167/1/DUlCfYpEd823aAhhqexQ3HMhaYI.mft
Manifest number: 0A5F
Signing time: Tue 28 Jul 2026 19:00:31 +0000
Manifest this update: Tue 28 Jul 2026 19:00:31 +0000
Manifest next update: Wed 29 Jul 2026 19:00:31 +0000
Files and hashes: 1: DUlCfYpEd823aAhhqexQ3HMhaYI.crl (hash: 8Pf5qjSuGo+jQ7CT4UklcVEp3tiJStIICSCrR9mdiwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/89dd25-546c-4f18-acc4-7a4057314167/1/DUlCfYpEd823aAhhqexQ3HMhaYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/89dd25-546c-4f18-acc4-7a4057314167/1/DUlCfYpEd823aAhhqexQ3HMhaYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUlCfYpEd823aAhhqexQ3HMhaYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:98:1c:2a:17:7b:8c:1c:b2:a5:95:52:ff:75:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d49427d8a4477cdb7680861a9ec50dc73216982
Validity
Not Before: Jul 28 19:00:31 2026 GMT
Not After : Jul 29 19:00:31 2026 GMT
Subject: CN=7ffa36d570dfd29b139cdb9ce20cde7e86d660df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a6:82:f3:a2:d9:07:3e:71:a1:a7:14:ce:35:
b3:d3:41:eb:ec:98:87:7e:bc:63:33:e5:ab:7d:49:
29:7c:75:95:7f:e3:e2:70:01:c7:18:fc:a2:26:12:
d7:7f:68:c7:6b:10:94:7a:ae:41:cb:25:c8:f4:bc:
c7:da:69:5d:fc:07:b8:fb:57:7e:c0:44:84:2d:ef:
7e:a7:c8:07:99:d1:52:18:0a:cd:67:18:80:62:a1:
6a:6b:a0:52:06:88:bc:7b:f6:f7:c6:46:ab:2f:6f:
22:b8:42:02:03:c4:99:96:ab:b0:ef:07:d2:e1:5b:
1e:00:11:5a:84:93:c1:c5:20:0a:75:cf:ff:3b:c2:
c6:ba:f5:32:03:96:9c:ae:15:46:28:3d:d6:31:e7:
c8:43:fd:fc:5a:09:ad:f4:4d:1d:d9:42:b9:0e:ff:
57:38:72:65:49:c4:a1:23:f2:f6:73:13:eb:f3:54:
7d:be:b7:3d:2f:97:65:e0:aa:a5:59:5a:de:04:3c:
71:e5:f4:3e:ec:0d:8c:5f:5e:6c:1a:2c:49:28:b9:
87:29:08:7d:ca:75:33:40:5a:12:7a:1a:23:1d:52:
3c:aa:df:80:0b:4b:6e:78:51:39:b2:d0:74:71:b3:
69:3d:98:f1:06:7f:06:4e:83:93:3b:da:57:5c:d5:
5a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FA:36:D5:70:DF:D2:9B:13:9C:DB:9C:E2:0C:DE:7E:86:D6:60:DF
X509v3 Authority Key Identifier:
keyid:0D:49:42:7D:8A:44:77:CD:B7:68:08:61:A9:EC:50:DC:73:21:69:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUlCfYpEd823aAhhqexQ3HMhaYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/89dd25-546c-4f18-acc4-7a4057314167/1/DUlCfYpEd823aAhhqexQ3HMhaYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/89dd25-546c-4f18-acc4-7a4057314167/1/DUlCfYpEd823aAhhqexQ3HMhaYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a0:b7:b4:7a:ca:80:70:3b:2b:a9:29:63:6d:29:d6:11:8c:
ff:e4:f1:aa:9d:d4:6d:bb:8c:96:29:7f:eb:90:df:e9:f2:06:
71:db:c5:27:71:cc:43:1a:13:46:74:cd:32:4d:8e:95:11:68:
45:26:a1:b5:bf:4a:10:12:09:65:ad:cd:6c:6d:a4:b5:b4:5a:
88:74:21:71:a1:62:4f:be:e7:ed:95:8c:6d:7b:d3:30:53:70:
90:cd:fe:a2:44:60:2e:ae:59:64:b2:aa:94:26:14:1d:eb:88:
f9:a5:b1:e4:30:45:25:14:b2:9a:59:22:73:76:5a:6e:dc:c4:
8e:52:84:53:36:b3:ae:01:61:17:91:fd:11:5b:92:b3:4d:c2:
1f:86:41:eb:3f:5b:a5:32:32:e7:b6:80:6c:41:36:9e:7f:ab:
e3:21:da:e7:c7:b4:90:25:19:0b:aa:29:f7:8c:58:e8:3a:76:
d5:b6:91:24:60:7c:fa:7d:22:cc:4e:c8:8a:c1:39:2c:ea:15:
eb:99:91:74:b4:2c:a3:6a:ec:b3:55:8a:f1:65:4f:99:d6:d7:
dc:de:df:34:c2:33:15:f0:0f:8f:36:44:9a:52:5f:5b:0e:77:
80:66:35:c9:fd:0a:34:ae:db:5d:04:76:23:d2:95:30:6e:fc:
b6:e3:54:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:58:30 2026 by rpki-client