Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
File: Dv0crRIZAnVQiePKgLptfMxLm3E.mft (raw, json)
Hash identifier: gf/DcaxKl4wi3qvkwsAr7dJwdCg2eWjLQ5DrLz0UAFQ=
Subject key identifier: EE:F5:1A:2E:04:F6:78:39:9F:66:CD:D0:EF:3B:F5:E2:F7:76:73:53
Authority key identifier: 0E:FD:1C:AD:12:19:02:75:50:89:E3:CA:80:BA:6D:7C:CC:4B:9B:71
Certificate issuer: /CN=0efd1cad121902755089e3ca80ba6d7ccc4b9b71
Certificate serial: 019FA86235F556C56EBE0A8D2D5F1C8D3E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
Manifest number: 0FCE
Signing time: Tue 28 Jul 2026 11:00:36 +0000
Manifest this update: Tue 28 Jul 2026 11:00:36 +0000
Manifest next update: Wed 29 Jul 2026 11:00:36 +0000
Files and hashes: 1: Dv0crRIZAnVQiePKgLptfMxLm3E.crl (hash: JtEoY0MVltf63sCW0UkH96GFGuUIgIB4YWN725g5l5M=)
2: Ync302nWoIDxqRaEpHli5zPb-l0.roa (hash: CuUUdJvVMWZ1G3401/kid+n0FU2EaOY59WBjrBRwy1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:35:f5:56:c5:6e:be:0a:8d:2d:5f:1c:8d:3e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0efd1cad121902755089e3ca80ba6d7ccc4b9b71
Validity
Not Before: Jul 28 11:00:36 2026 GMT
Not After : Jul 29 11:00:36 2026 GMT
Subject: CN=eef51a2e04f678399f66cdd0ef3bf5e2f7767353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:10:90:f8:51:0d:1d:38:7e:9a:3a:9a:10:81:
c4:3d:3e:2e:bb:ad:4e:ea:11:f1:ef:98:17:fc:4f:
48:2d:47:6f:34:01:26:ed:9b:06:10:0c:7b:aa:88:
64:a8:85:b1:a2:e4:6d:de:4d:0b:8e:1b:4b:bc:a6:
92:fe:ae:27:dc:ce:e6:aa:ad:b8:a0:f8:dc:c3:93:
11:0e:83:c2:3f:dd:eb:a2:92:6a:2f:3d:6c:84:bf:
e6:84:56:4b:10:cf:f8:1d:97:d8:8a:5f:ba:09:df:
ec:72:13:c1:c2:9b:de:86:28:51:1b:bf:d7:f2:81:
38:93:f0:82:72:5a:36:65:97:f8:04:65:c5:07:a0:
f5:1f:6d:c7:8c:c6:68:b8:2d:5c:21:07:5f:47:1d:
6c:2d:63:56:c0:f5:df:cb:22:b1:43:ff:27:17:89:
b0:39:33:d8:29:45:90:5e:4b:ef:ef:a4:5d:7f:e0:
5e:41:36:64:1c:92:ff:5b:da:31:d3:6d:e7:b3:d8:
ee:3c:be:c4:81:fc:7b:ca:0a:9d:29:30:1b:9d:9f:
b9:5b:49:71:bf:81:a3:bc:95:a7:ba:38:13:ee:87:
9b:cb:11:78:3f:44:34:2a:e1:30:d8:cb:34:0e:79:
12:cd:c0:48:b5:c1:ce:ec:b7:f4:16:e6:47:47:16:
01:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F5:1A:2E:04:F6:78:39:9F:66:CD:D0:EF:3B:F5:E2:F7:76:73:53
X509v3 Authority Key Identifier:
keyid:0E:FD:1C:AD:12:19:02:75:50:89:E3:CA:80:BA:6D:7C:CC:4B:9B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:d7:5c:a4:94:79:dc:b8:0a:92:2f:a6:c8:80:6e:ca:68:21:
ec:fc:e6:2d:0b:da:d0:d6:7a:77:ae:a9:4e:9a:fc:42:b3:80:
cc:58:09:eb:30:5b:93:cd:ed:c7:6c:14:d3:dd:a7:75:71:10:
33:f6:c2:3b:c3:df:b1:67:72:88:fc:f6:78:38:ea:70:76:49:
bc:12:06:86:19:f0:13:a1:a8:93:61:8f:0e:87:06:7e:7a:91:
d7:4f:8f:13:c9:67:d8:50:95:58:1b:86:12:fd:b6:96:3d:f2:
b5:4b:85:e5:5a:d4:5a:c5:9c:62:3e:55:a1:00:e8:94:f5:78:
5a:66:82:38:19:b6:36:25:e8:09:61:d2:51:66:d4:b0:2e:6f:
a7:83:f8:57:40:ce:38:0a:83:90:c8:ad:0c:d0:d0:e6:7f:c2:
1e:75:18:59:71:7a:15:28:00:2b:36:3c:79:89:9f:72:c6:59:
0e:5b:fd:55:b7:7e:4c:af:d5:5a:94:bc:a9:e9:c6:c8:18:5b:
18:64:04:23:cc:19:ec:2c:1a:ea:5d:5d:3b:b4:84:b0:d9:e6:
dc:94:ae:44:12:04:df:a9:0d:f6:ba:07:32:e0:cb:d8:82:67:
9d:0a:96:85:e2:d2:52:ef:94:b5:f0:4f:5e:39:d9:cb:df:10:
36:14:d1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:40:54 2026 by rpki-client