
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
File: 0ur89N6SC5zmRdbmlt8IqosFUZs.mft (raw, json)
Hash identifier: 5H9ADy6Ce4eJ/bwS5ycxXxTtOmRPuZHb8Nt8nvypLWc=
Subject key identifier: 66:0B:4F:EA:F2:5A:EC:D8:46:51:3C:34:5F:57:CA:60:CC:99:22:04
Authority key identifier: D2:EA:FC:F4:DE:92:0B:9C:E6:45:D6:E6:96:DF:08:AA:8B:05:51:9B
Certificate issuer: /CN=d2eafcf4de920b9ce645d6e696df08aa8b05519b
Certificate serial: 019FA906FE1B2057B6549BD30091E2969896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
Manifest number: 16D4
Signing time: Tue 28 Jul 2026 14:00:35 +0000
Manifest this update: Tue 28 Jul 2026 14:00:35 +0000
Manifest next update: Wed 29 Jul 2026 14:00:35 +0000
Files and hashes: 1: 0ur89N6SC5zmRdbmlt8IqosFUZs.crl (hash: h5Z2XvJAZDV46Og8RVJYwWy1Fx3LG47oRCJjzBhzsHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:fe:1b:20:57:b6:54:9b:d3:00:91:e2:96:98:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2eafcf4de920b9ce645d6e696df08aa8b05519b
Validity
Not Before: Jul 28 14:00:35 2026 GMT
Not After : Jul 29 14:00:35 2026 GMT
Subject: CN=660b4feaf25aecd846513c345f57ca60cc992204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bf:95:94:ed:e9:87:c0:66:53:67:b1:1e:67:
e3:a0:5b:65:39:3c:fd:4a:65:90:0d:3a:eb:8a:11:
30:69:b2:d4:74:79:79:4c:ee:3a:86:96:e6:ea:78:
06:44:56:b2:0b:8d:b6:d3:98:9c:fa:3f:37:b6:e7:
51:16:de:67:b4:e0:82:61:c9:81:ca:fb:f5:b6:15:
d3:78:14:53:ad:74:7f:fb:be:fa:0e:58:7a:78:a8:
a6:11:9b:3d:5e:be:89:54:3a:92:6c:de:fd:63:a0:
88:a9:46:05:05:fe:b9:43:6a:ff:f5:11:36:ac:b6:
0d:dd:e4:5c:2c:9b:18:be:b1:47:c7:52:1e:cf:07:
33:65:37:0e:c3:c2:74:76:34:61:6e:91:79:5e:55:
27:c9:e8:11:70:34:fb:f7:33:72:c0:40:f2:87:f0:
85:95:a2:fe:43:c7:08:c0:fe:a3:ed:5c:0d:8e:ad:
55:41:0b:81:a6:5c:66:0b:6c:6c:6c:ce:91:fa:11:
f2:40:f3:3c:95:2f:62:d5:b5:96:10:06:b9:9f:b8:
65:26:a6:81:67:be:18:36:98:54:3d:67:b8:6a:cf:
bb:4b:08:d7:50:59:27:d0:a7:7d:d2:87:58:9b:2b:
95:dc:92:99:18:d4:a6:b9:07:c6:12:67:32:9f:b5:
a8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0B:4F:EA:F2:5A:EC:D8:46:51:3C:34:5F:57:CA:60:CC:99:22:04
X509v3 Authority Key Identifier:
keyid:D2:EA:FC:F4:DE:92:0B:9C:E6:45:D6:E6:96:DF:08:AA:8B:05:51:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:96:c1:29:2f:1f:c9:33:63:06:e2:2b:5f:77:93:df:7e:00:
de:8f:fd:a6:b8:6b:db:63:1f:f6:fc:c7:b5:8e:3f:52:d1:ce:
5d:ac:a0:ff:cb:5a:74:2a:f2:da:b3:37:3a:88:7b:80:42:6e:
da:ea:79:21:e0:5a:a3:e8:43:af:98:65:33:54:00:01:1b:90:
3d:6f:b1:33:cd:e6:11:2c:3b:a6:77:81:54:bf:b8:d4:50:47:
02:55:3a:d6:a5:88:8c:ce:9b:10:4b:ba:28:2c:30:19:fb:56:
f4:b3:cd:59:00:0f:7d:b0:e6:32:43:4b:52:5e:ac:f3:ea:52:
23:14:8a:6b:9d:f8:6a:a4:49:de:f2:45:d1:ea:e8:17:c3:77:
0a:ea:c8:51:11:f7:93:69:d9:4d:13:9f:99:d5:05:88:89:dd:
e7:d0:b3:7e:b2:2d:51:05:ff:35:29:06:8c:64:42:14:f2:6c:
36:3e:20:73:45:00:97:d6:b5:0b:33:79:de:35:15:a8:7b:14:
23:e3:27:60:09:5a:93:c9:0b:d6:4d:ba:aa:f2:f5:d2:74:41:
00:5b:f7:dd:b6:d1:93:28:2c:50:c0:74:09:31:1d:dd:5f:5d:
0c:be:e3:d3:2e:df:f7:2d:bd:93:a8:3a:64:47:e1:d5:5b:c3:
c0:9b:8b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:00:53 2026 by rpki-client