Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
File: D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft (raw, json)
Hash identifier: 7no0oTSy9IZWBDD+DF3J2bg2oj3wcjP31i5KZdfIXRk=
Subject key identifier: 6B:7C:BA:E6:A8:31:76:DD:DF:C4:F6:BC:91:F2:FC:1E:29:14:55:60
Authority key identifier: 0F:82:7A:5A:24:E7:71:CC:14:FA:69:BB:74:B3:E7:60:16:7B:02:6B
Certificate issuer: /CN=0f827a5a24e771cc14fa69bb74b3e760167b026b
Certificate serial: 019FA89A5A001ED4604A8CB1F92785A90271
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
Manifest number: 0C28
Signing time: Tue 28 Jul 2026 12:01:55 +0000
Manifest this update: Tue 28 Jul 2026 12:01:55 +0000
Manifest next update: Wed 29 Jul 2026 12:01:55 +0000
Files and hashes: 1: D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl (hash: uGnDmkck62c2afGmuVBx6vHZyuW5rnct8Qz/Uj8nbjA=)
2: RZQiwmw-LTuvBT8bKGu9sePwQKA.roa (hash: 30MASV+eS5v/knDU6PvbB3wtKl60C43+n0OVN/QWwQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:5a:00:1e:d4:60:4a:8c:b1:f9:27:85:a9:02:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f827a5a24e771cc14fa69bb74b3e760167b026b
Validity
Not Before: Jul 28 12:01:55 2026 GMT
Not After : Jul 29 12:01:55 2026 GMT
Subject: CN=6b7cbae6a83176dddfc4f6bc91f2fc1e29145560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cc:5f:94:44:eb:da:4a:fd:21:4d:60:01:eb:
2d:c3:aa:25:00:58:3c:72:ea:05:d2:ec:6b:1a:61:
e3:b1:2c:18:b4:bd:52:0c:ff:bc:08:b9:fd:08:e8:
8a:a8:51:71:48:b1:1a:5c:b2:12:0d:4c:ba:78:b9:
f7:ce:67:d6:96:86:b6:6d:b9:19:51:3e:c7:a4:04:
96:a6:3b:57:7e:5a:c5:6a:98:85:1f:ac:50:63:8d:
13:ee:ac:a0:c5:bd:08:54:a1:b5:bd:f1:93:bd:27:
43:1a:47:2b:f3:65:74:d6:f6:a4:18:a0:43:19:84:
54:7c:e7:4e:0e:08:7b:98:85:71:f9:47:90:68:4e:
a6:75:df:e7:b9:c1:d0:82:11:5a:3b:39:92:2e:c2:
e6:0b:95:1f:e4:00:fb:75:c0:05:cb:03:9a:d5:95:
56:81:7c:19:c8:1a:2f:39:d8:be:cc:2b:18:97:f2:
b3:dc:cd:37:da:ba:1e:2e:68:c6:15:83:6c:53:4e:
7d:fa:f8:16:c7:fb:19:af:d0:1b:e4:82:f0:88:93:
66:37:49:97:68:16:a6:ec:0e:ba:c3:8c:54:83:76:
81:9d:a7:8c:46:d6:06:47:60:bf:71:b9:a1:0e:01:
bf:cc:f9:7d:b9:ed:d4:bd:1e:2a:4c:ae:a4:b3:a9:
d2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7C:BA:E6:A8:31:76:DD:DF:C4:F6:BC:91:F2:FC:1E:29:14:55:60
X509v3 Authority Key Identifier:
keyid:0F:82:7A:5A:24:E7:71:CC:14:FA:69:BB:74:B3:E7:60:16:7B:02:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:31:6b:5a:d5:d0:7d:76:17:bd:c4:63:33:27:66:a6:33:cb:
8a:a7:0d:5f:16:21:08:4b:88:6d:c0:7a:0f:bf:e7:0c:82:f8:
d2:6e:ee:0e:02:a7:05:4c:31:ba:92:1a:55:df:50:9d:41:6f:
56:74:36:c3:35:69:5d:e8:7a:a0:09:fe:b2:8f:ce:74:49:ec:
c3:e8:44:6c:89:84:38:9b:1f:cd:17:d5:a6:92:f3:f4:df:8a:
8e:b4:e7:40:a1:fd:d1:2f:de:28:a8:c2:33:ce:89:ee:af:ee:
f4:35:61:c8:d4:dc:65:36:4f:7c:84:e5:c5:4e:c2:5d:0b:10:
2c:24:ea:20:7d:20:d1:e3:22:06:df:cf:55:a5:14:f4:40:ca:
62:af:05:5c:7f:d6:07:b2:f9:cb:4c:94:85:aa:5f:37:f1:b7:
92:d4:1f:fe:27:25:f7:19:7c:03:45:8d:be:24:51:e9:b0:7d:
4d:8b:74:e6:8b:d1:e7:7b:a1:0c:c5:0d:e1:61:3f:ce:87:1a:
8e:c9:c6:1e:7c:77:cc:b9:b0:3c:38:bb:bc:78:cf:72:70:67:
3d:87:9c:9d:68:32:ca:0f:7f:f5:3b:e7:71:76:5a:ed:0c:77:
46:33:b2:d7:e0:61:46:b4:f7:52:de:43:f5:12:c0:fa:da:21:
16:63:9a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:42:46 2026 by rpki-client