Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
File: D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft (raw, json)
Hash identifier: aFD4CRmNTta2GqICHQzY7bamy5s7vgNdGR2UeXIxPZg=
Subject key identifier: 9B:5D:56:BB:D5:17:36:36:7D:DE:0E:1F:3D:82:F4:41:88:21:F3:98
Authority key identifier: 0F:49:C4:9A:75:CF:6E:24:8C:9B:51:C7:05:4D:B2:F8:D9:DC:ED:CB
Certificate issuer: /CN=0f49c49a75cf6e248c9b51c7054db2f8d9dcedcb
Certificate serial: 019FA9E30C739F7ED3F1F57873A0C666794B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
Manifest number: 0EDE
Signing time: Tue 28 Jul 2026 18:00:57 +0000
Manifest this update: Tue 28 Jul 2026 18:00:57 +0000
Manifest next update: Wed 29 Jul 2026 18:00:57 +0000
Files and hashes: 1: D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl (hash: txelU9bb31ZFaYBJGpsit/OgR/jLKJFYsj3iI4R/h28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:0c:73:9f:7e:d3:f1:f5:78:73:a0:c6:66:79:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f49c49a75cf6e248c9b51c7054db2f8d9dcedcb
Validity
Not Before: Jul 28 18:00:57 2026 GMT
Not After : Jul 29 18:00:57 2026 GMT
Subject: CN=9b5d56bbd51736367dde0e1f3d82f4418821f398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a6:e7:ba:4d:38:5d:39:93:81:e0:67:a4:19:
65:3f:4b:6d:f6:2e:71:3c:92:97:24:91:c2:da:c8:
e2:c9:db:cd:47:5e:61:dc:2e:68:50:a0:73:0e:b7:
52:ea:05:60:c4:b8:ad:91:55:a3:5c:c2:fe:54:27:
72:8f:6e:22:20:12:90:f2:9e:e8:b5:6a:51:08:d6:
08:42:73:80:bb:2d:1c:f2:cc:8c:a7:9d:59:91:73:
b6:6a:5f:f3:85:b4:b1:18:8f:1e:d0:08:73:80:ab:
07:9e:e6:d2:3d:59:e0:62:c3:be:21:10:79:b5:2c:
70:23:02:a8:2a:43:b3:e3:e9:44:dc:34:56:ce:71:
dc:90:ac:41:60:5a:94:a8:d6:98:66:d4:84:88:74:
aa:78:a6:f2:9e:8d:46:dd:00:82:b7:41:f1:cf:28:
cd:b3:2d:33:df:14:73:7d:c3:b0:90:44:5c:13:3a:
44:cf:ba:57:0f:bf:07:01:50:05:0e:5a:38:12:3c:
d2:35:b5:2d:9f:b9:3e:85:20:c7:f9:7d:28:0c:7c:
3d:36:ee:58:47:2e:e3:a9:68:33:e8:66:76:37:9f:
39:6f:76:b7:11:75:43:56:11:9f:ce:7e:4b:cb:b9:
93:81:90:e8:a8:d0:fc:b0:31:d7:64:fb:db:96:9f:
d0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5D:56:BB:D5:17:36:36:7D:DE:0E:1F:3D:82:F4:41:88:21:F3:98
X509v3 Authority Key Identifier:
keyid:0F:49:C4:9A:75:CF:6E:24:8C:9B:51:C7:05:4D:B2:F8:D9:DC:ED:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:0e:56:c9:44:93:75:f2:a2:cd:8f:7e:89:da:fe:c3:9a:e7:
da:0e:60:3a:e6:25:c0:9c:d1:7d:18:45:cf:04:e0:bd:13:72:
3c:a8:cb:25:ce:c1:20:d6:66:f8:9e:01:6d:e0:7c:91:0b:92:
0d:4a:8a:2f:54:1f:2f:ac:70:3f:56:8d:c9:c5:de:3b:b7:03:
b7:c7:57:63:be:11:37:2d:65:86:13:0a:9d:4e:3c:2d:11:d8:
d9:19:b4:7a:f8:c9:f7:65:51:8c:0d:62:0c:be:a8:bc:b3:61:
3d:a5:a7:39:e6:07:06:2d:41:4e:32:7b:8b:18:09:6a:f0:6f:
2f:8e:38:a8:1f:69:a8:4d:5f:99:7d:2c:71:54:3c:7f:7c:7b:
95:d6:2a:1c:d0:0c:fc:87:14:8e:0e:18:45:c9:fc:7c:14:b6:
2c:19:b3:98:56:de:19:f6:f0:99:ae:66:05:da:41:c1:0b:ca:
cb:60:e3:8c:0e:02:4f:71:c1:bc:62:e5:b1:d9:4d:4b:57:1c:
28:eb:af:60:9c:46:09:07:52:d2:f9:d8:dd:74:4f:2f:82:cf:
02:44:4d:fe:81:4d:41:e4:8d:ac:1a:4a:db:26:37:0d:76:d4:
60:6b:9b:75:d4:a4:4f:3a:01:f2:18:1a:b4:64:67:90:35:ea:
b6:f0:1d:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+p4wxzn37T8fV4c6DGZnlLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNDljNDlhNzVjZjZlMjQ4YzliNTFjNzA1NGRiMmY4ZDlk
Y2VkY2IwHhcNMjYwNzI4MTgwMDU3WhcNMjYwNzI5MTgwMDU3WjAzMTEwLwYDVQQD
Eyg5YjVkNTZiYmQ1MTczNjM2N2RkZTBlMWYzZDgyZjQ0MTg4MjFmMzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApabnuk04XTmTgeBnpBllP0tt9i5x
PJKXJJHC2sjiydvNR15h3C5oUKBzDrdS6gVgxLitkVWjXML+VCdyj24iIBKQ8p7o
tWpRCNYIQnOAuy0c8syMp51ZkXO2al/zhbSxGI8e0AhzgKsHnubSPVngYsO+IRB5
tSxwIwKoKkOz4+lE3DRWznHckKxBYFqUqNaYZtSEiHSqeKbyno1G3QCCt0HxzyjN
sy0z3xRzfcOwkERcEzpEz7pXD78HAVAFDlo4EjzSNbUtn7k+hSDH+X0oDHw9Nu5Y
Ry7jqWgz6GZ2N585b3a3EXVDVhGfzn5Ly7mTgZDoqND8sDHXZPvblp/QjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtdVrvVFzY2fd4OHz2C9EGIIfOYMB8GA1UdIwQY
MBaAFA9JxJp1z24kjJtRxwVNsvjZ3O3LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDBuRW1uWFBiaVNNbTFISEJVMnktTm5jN2NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9jZWExNjEtY2I1Yy00ZTQxLWI4MzYt
ZDgwMDc3ZTEyYjVkLzEvRDBuRW1uWFBiaVNNbTFISEJVMnktTm5jN2NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9jZWExNjEtY2I1Yy00ZTQxLWI4MzYtZDgwMDc3ZTEyYjVk
LzEvRDBuRW1uWFBiaVNNbTFISEJVMnktTm5jN2NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAew5WyUST
dfKizY9+idr+w5rn2g5gOuYlwJzRfRhFzwTgvRNyPKjLJc7BINZm+J4BbeB8kQuS
DUqKL1QfL6xwP1aNycXeO7cDt8dXY74RNy1lhhMKnU48LRHY2Rm0evjJ92VRjA1i
DL6ovLNhPaWnOeYHBi1BTjJ7ixgJavBvL444qB9pqE1fmX0scVQ8f3x7ldYqHNAM
/IcUjg4YRcn8fBS2LBmzmFbeGfbwma5mBdpBwQvKy2DjjA4CT3HBvGLlsdlNS1cc
KOuvYJxGCQdS0vnY3XRPL4LPAkRN/oFNQeSNrBpK2yY3DXbUYGubddSkTzoB8hga
tGRnkDXqtvAdbg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:24:14 2026 by rpki-client