Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
File: 65fOljUzDxRxFMZG72qTR9aJFjs.mft (raw, json)
Hash identifier: CCVUV2OXQhe5jJr6W10ewX+xFINImr6y+BIKUbwV2Kc=
Subject key identifier: A6:F7:54:00:B2:B8:E4:D5:95:D2:DD:1A:BC:76:92:F4:26:D7:E0:5F
Authority key identifier: EB:97:CE:96:35:33:0F:14:71:14:C6:46:EF:6A:93:47:D6:89:16:3B
Certificate issuer: /CN=eb97ce9635330f147114c646ef6a9347d689163b
Certificate serial: 019FA906BC8A36E4788269A61161F5969588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
Manifest number: 1961
Signing time: Tue 28 Jul 2026 14:00:18 +0000
Manifest this update: Tue 28 Jul 2026 14:00:18 +0000
Manifest next update: Wed 29 Jul 2026 14:00:18 +0000
Files and hashes: 1: 65fOljUzDxRxFMZG72qTR9aJFjs.crl (hash: U3juOXWzcJve9WxveacZyF0bhEPoHve9YMEeRidl/zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:bc:8a:36:e4:78:82:69:a6:11:61:f5:96:95:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb97ce9635330f147114c646ef6a9347d689163b
Validity
Not Before: Jul 28 14:00:18 2026 GMT
Not After : Jul 29 14:00:18 2026 GMT
Subject: CN=a6f75400b2b8e4d595d2dd1abc7692f426d7e05f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5f:73:61:05:df:f7:0b:21:a5:63:80:61:2d:
42:ca:14:18:25:d5:4a:d7:da:0c:c6:52:cf:66:1c:
b3:aa:f7:79:92:2d:be:f2:b7:45:ea:e6:e7:b6:a4:
ee:3d:17:bd:e1:34:4f:90:85:ef:e4:6f:a6:16:65:
47:cd:1c:3c:9f:83:06:ea:2c:20:61:5f:a2:63:fd:
99:1e:4b:65:d2:94:9c:57:e9:c2:3a:fc:5f:18:ec:
d9:db:15:c4:22:9c:fe:4c:94:e5:f7:f7:52:55:89:
98:8f:c0:ce:de:f5:0d:d8:e8:ba:26:87:7e:f3:6d:
c4:9d:68:91:f5:2d:5e:0a:fa:da:17:09:a8:00:77:
6c:ce:83:80:f0:5b:6b:0f:c6:6d:02:73:ce:86:98:
81:8b:be:7f:cb:b4:39:9a:d7:6d:91:49:39:77:f5:
5a:3f:19:3d:97:7f:ab:0c:6b:88:1c:e6:bb:73:5b:
b7:03:cf:fd:c7:66:31:94:d0:c1:c6:e2:d5:e9:89:
bd:47:27:86:50:1f:dd:98:f7:47:b6:20:1f:31:f9:
47:cb:bb:e4:4f:05:7b:c2:96:bd:af:e7:03:68:9c:
8e:4e:36:b3:f8:d5:51:09:11:d9:11:ef:b9:3d:05:
c3:38:c5:5b:84:a5:b3:8d:aa:3d:22:9c:66:6f:ee:
ee:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F7:54:00:B2:B8:E4:D5:95:D2:DD:1A:BC:76:92:F4:26:D7:E0:5F
X509v3 Authority Key Identifier:
keyid:EB:97:CE:96:35:33:0F:14:71:14:C6:46:EF:6A:93:47:D6:89:16:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:71:ec:24:dd:08:35:66:73:ae:9c:61:de:d7:f7:c9:68:d8:
e7:4d:a1:a4:af:fc:f7:b4:9b:20:7b:5b:f6:9f:e6:89:fd:d5:
11:ad:ba:da:25:90:e2:f4:08:f9:72:18:7e:7d:61:0d:e8:cb:
fb:e0:18:06:4e:4a:f2:87:71:40:3a:d0:6d:b4:46:52:28:dc:
86:bd:f0:7a:2a:0a:8b:d7:d6:d0:ec:89:a6:24:f8:64:ba:d3:
49:cf:25:fc:64:35:1e:91:b9:22:41:43:9b:73:e2:16:53:1e:
cc:2c:62:7e:c6:cc:af:2b:44:00:8d:59:28:fe:b7:49:22:dc:
d6:6e:13:de:d9:5f:39:56:6b:83:86:1a:d7:02:d3:38:c7:db:
81:bd:f2:fb:c2:70:4c:e4:77:06:dc:b7:23:cb:60:cc:98:a0:
a2:0c:1a:3b:80:e1:b0:56:83:97:b7:d9:71:e8:5e:f6:ed:de:
91:31:2f:39:58:3e:25:08:bd:77:ea:bb:56:b7:71:40:4b:f0:
1f:da:06:f6:ad:01:18:48:6c:b5:89:b4:70:62:ef:e4:fb:9a:
08:45:3d:80:8d:80:52:53:0a:a1:e5:8d:28:34:0b:d6:b5:b2:
3f:48:0d:ce:1a:25:ba:d3:c8:fe:9f:8b:ad:1b:fd:c7:1c:fd:
15:fa:f7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:29:24 2026 by rpki-client