Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
File: D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft (raw, json)
Hash identifier: fjOZTwYzGkeYBGiV2gOTHo5R5gOKW/KYm0bSc5+amcE=
Subject key identifier: FE:39:37:66:C2:34:F5:40:EE:CD:86:1D:D2:AB:8D:D3:5E:F0:87:53
Authority key identifier: 0F:49:C4:9A:75:CF:6E:24:8C:9B:51:C7:05:4D:B2:F8:D9:DC:ED:CB
Certificate issuer: /CN=0f49c49a75cf6e248c9b51c7054db2f8d9dcedcb
Certificate serial: 01A0C1E81BC3D1FDA5E793A14E5472BDD07C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
Manifest number: 0F6F
Signing time: Mon 21 Sep 2026 03:00:09 +0000
Manifest this update: Mon 21 Sep 2026 03:00:09 +0000
Manifest next update: Tue 22 Sep 2026 03:00:09 +0000
Files and hashes: 1: D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl (hash: NJXse1ayQblRuP7KX0O5LndNDhiYb73D3EFGoOusa5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:e8:1b:c3:d1:fd:a5:e7:93:a1:4e:54:72:bd:d0:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f49c49a75cf6e248c9b51c7054db2f8d9dcedcb
Validity
Not Before: Sep 21 03:00:09 2026 GMT
Not After : Sep 22 03:00:09 2026 GMT
Subject: CN=fe393766c234f540eecd861dd2ab8dd35ef08753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7c:f3:ee:bd:8d:fe:de:34:70:32:75:e9:11:
75:b9:96:70:f1:e1:8a:31:f3:48:2c:c7:d9:f8:16:
29:53:a4:19:c0:5f:84:eb:f5:9f:d6:f8:2d:d4:78:
83:e4:de:3d:7b:10:47:00:02:c0:c0:28:34:7f:64:
07:3a:50:b6:71:89:64:59:9d:59:cd:cb:93:99:b0:
8a:d0:c9:4f:0c:2d:2d:3f:f8:d3:c1:72:e5:8b:06:
c5:4b:cf:38:ba:bb:4e:a4:fd:6a:a5:c8:27:63:40:
bb:fb:d4:c9:81:f6:8f:04:e5:78:50:34:cf:b3:06:
10:cc:76:03:3f:db:e0:1d:d0:1a:13:e4:3f:01:c3:
73:8c:e2:fb:18:92:97:71:a5:3a:45:bb:0c:ac:b2:
26:f9:4c:ba:81:7d:ea:2a:85:80:9e:3a:f6:ea:a0:
f7:3b:17:0a:c2:3d:a5:a0:ee:d4:28:40:b8:fb:70:
3e:6a:a5:f6:9d:73:6f:be:05:87:c8:7c:27:8d:45:
b1:7c:5b:4d:a2:17:94:98:97:55:69:9e:27:b5:98:
b3:ca:ee:ea:bb:60:af:31:4a:22:79:39:1b:28:44:
55:1a:aa:13:86:65:3d:9b:a8:10:72:69:be:55:62:
e3:6a:42:f4:59:3b:b3:95:dd:26:1a:c8:6b:5b:d3:
5a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:39:37:66:C2:34:F5:40:EE:CD:86:1D:D2:AB:8D:D3:5E:F0:87:53
X509v3 Authority Key Identifier:
keyid:0F:49:C4:9A:75:CF:6E:24:8C:9B:51:C7:05:4D:B2:F8:D9:DC:ED:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:3a:38:19:18:c6:7a:a8:73:ee:02:70:02:98:59:7b:6f:6d:
19:91:4c:34:39:d7:c2:d8:f1:6c:3d:ca:6e:ad:e9:20:1b:22:
8d:49:cb:9e:00:d7:cb:c2:c1:89:ce:f5:f0:10:e2:ff:53:a9:
10:27:58:5b:e6:a2:fb:2a:a2:7e:7a:2e:7f:9f:52:62:1b:bb:
c0:bd:87:86:68:da:e5:cc:00:54:a7:d3:06:d8:06:52:47:da:
55:d9:4d:f8:bc:5c:7b:f3:68:1b:05:4f:52:9a:03:3e:a6:9a:
6a:8f:c5:ad:c0:7e:9a:55:a0:4c:8b:ef:71:83:ce:c6:bd:e7:
0b:53:f1:5f:2c:e9:55:f1:65:b7:ff:77:b0:87:f0:9b:52:2e:
e4:b7:c2:76:d9:92:30:13:cd:76:b3:6e:db:00:a9:a7:c3:db:
2a:fe:47:5a:9c:0f:b2:96:9d:ee:4a:4c:5c:30:bd:c5:e8:d1:
5c:f7:77:43:94:fe:08:94:15:9c:1a:c2:fb:30:28:a8:60:32:
ee:75:b9:f7:e5:3c:0d:e9:16:3a:a3:eb:4d:17:31:3b:9c:68:
51:0b:62:f6:31:32:e0:aa:a9:f0:65:62:89:26:e1:98:82:e8:
15:13:3c:0e:dc:0f:2e:63:e6:b5:57:5f:13:90:5a:08:6c:67:
6a:ce:44:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:56:24 2026 by rpki-client