Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
File: D0OG59TvxHLBH-nP7z0zCXSzP2E.mft (raw, json)
Hash identifier: LA3u0qGyv2B7MTREJ9uiOsNV2lk6QGpQfdL0C2L1zVY=
Subject key identifier: B5:6D:4A:D0:E6:BD:84:84:29:ED:45:62:3B:59:7A:F2:05:D9:B6:7B
Authority key identifier: 0F:43:86:E7:D4:EF:C4:72:C1:1F:E9:CF:EF:3D:33:09:74:B3:3F:61
Certificate issuer: /CN=0f4386e7d4efc472c11fe9cfef3d330974b33f61
Certificate serial: 019DA48B3A4E1AFCE275A8669F55F7470165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
Manifest number: 0B68
Signing time: Sun 19 Apr 2026 07:01:20 +0000
Manifest this update: Sun 19 Apr 2026 07:01:20 +0000
Manifest next update: Mon 20 Apr 2026 07:01:20 +0000
Files and hashes: 1: D0OG59TvxHLBH-nP7z0zCXSzP2E.crl (hash: KRLnxK7suhPiHbxygO6CFGgWKvjjF4RWSImwsHGOYtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8b:3a:4e:1a:fc:e2:75:a8:66:9f:55:f7:47:01:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f4386e7d4efc472c11fe9cfef3d330974b33f61
Validity
Not Before: Apr 19 07:01:20 2026 GMT
Not After : Apr 20 07:01:20 2026 GMT
Subject: CN=b56d4ad0e6bd848429ed45623b597af205d9b67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:90:5e:20:71:ff:cc:62:5e:18:aa:39:42:92:
a5:a9:ed:23:24:04:4c:36:2a:91:fe:20:ba:46:25:
0f:02:43:1a:7b:d9:8e:dd:e7:fb:a5:78:63:41:bf:
49:76:ce:3b:17:40:02:c1:af:6a:86:22:77:9b:70:
fa:04:9d:a9:42:9d:dc:fa:8e:b3:f2:99:4f:c3:05:
51:6a:d0:5a:62:1a:ad:34:61:12:ca:bc:0f:ae:9e:
29:50:2b:5d:cc:af:c6:de:12:2f:ed:7e:5d:3a:0f:
d6:3d:8e:b4:22:e5:39:a2:ea:e8:60:cc:73:ab:0d:
7d:f1:7b:d8:4f:c2:b7:19:3a:75:62:f2:4e:b0:72:
fe:dd:82:bf:2a:a5:d0:1b:84:b7:94:af:e9:ba:8f:
a1:3a:05:12:5b:18:fd:88:75:54:ef:e2:4d:78:f1:
91:8d:47:85:c8:e9:d4:bb:b5:83:16:4b:bd:01:78:
b6:6f:fe:23:35:8d:79:e5:65:1a:03:5a:a9:0d:e2:
39:76:b7:d0:8d:aa:f6:64:bf:47:1b:c6:fe:73:fa:
48:ed:81:b8:92:1d:40:a1:1b:73:91:01:2d:1d:10:
c0:4d:8f:b8:7f:08:af:80:f9:13:6b:71:47:61:3e:
46:ca:3c:5a:da:a3:d4:30:21:4f:78:c2:43:93:cd:
36:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6D:4A:D0:E6:BD:84:84:29:ED:45:62:3B:59:7A:F2:05:D9:B6:7B
X509v3 Authority Key Identifier:
keyid:0F:43:86:E7:D4:EF:C4:72:C1:1F:E9:CF:EF:3D:33:09:74:B3:3F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ed:91:e6:6e:7e:c7:c2:49:0c:29:11:d6:31:31:44:ad:2a:ff:
85:28:87:25:00:03:98:c5:c6:c3:c5:ae:8b:49:d5:d8:ee:e9:
8c:85:00:46:fc:61:61:6b:a4:ff:ed:06:44:40:de:73:af:5d:
b0:b0:17:40:d5:75:a5:70:49:c5:72:53:81:e7:22:a3:8c:da:
92:01:29:ee:cc:91:9e:c9:e5:3a:41:dd:42:c8:cc:5c:43:15:
83:a0:95:8e:a7:a3:b2:b0:11:f8:bf:62:b5:11:a8:0a:c1:d7:
8c:21:a0:78:b7:d5:fe:63:a8:88:b1:a8:a7:3c:6e:22:b2:28:
de:ee:e7:3e:81:94:1f:c1:5d:4b:af:96:06:55:28:98:ef:10:
df:1a:7c:ab:93:15:e0:8a:3a:a7:9c:d4:52:16:65:62:f2:dd:
f1:29:6d:8e:4a:99:9f:0c:8e:a9:b4:d5:d0:ab:1c:32:7d:9e:
f8:19:4f:46:69:1c:42:28:29:8f:01:71:54:17:fd:bc:02:73:
78:9d:2a:af:37:b1:86:de:a9:85:47:45:f0:95:e2:0d:4c:da:
f6:b6:b3:50:43:8f:46:65:a1:e4:cc:44:5d:3b:e3:70:23:9e:
35:ad:e1:6c:b7:25:78:16:b3:05:b3:5c:e2:0d:19:a8:16:42:
c0:96:ea:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:04:15 2026 by rpki-client