Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft
File: DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft (raw, json)
Hash identifier: CDXY428ua1rsjtCiEAJGzsRRrKeE1VkVZVljQNNVi+8=
Subject key identifier: 0B:79:B3:52:7A:0D:2F:50:13:B7:D6:F1:8D:FC:C6:BD:E1:0B:AC:25
Authority key identifier: 0C:4F:0B:9A:5F:E0:38:9F:AD:CB:BF:B1:FA:1C:40:C4:A4:BA:0D:2B
Certificate issuer: /CN=0c4f0b9a5fe0389fadcbbfb1fa1c40c4a4ba0d2b
Certificate serial: 019FAAF5C62E3483C62E15F87D0C1C2D91D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft
Manifest number: 16AE
Signing time: Tue 28 Jul 2026 23:01:01 +0000
Manifest this update: Tue 28 Jul 2026 23:01:01 +0000
Manifest next update: Wed 29 Jul 2026 23:01:01 +0000
Files and hashes: 1: DE8Lml_gOJ-ty7-x-hxAxKS6DSs.crl (hash: 3sTQOZeAuoEcrwpjAC8ZhheMrWb//UDc/WtWL69R62Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:c6:2e:34:83:c6:2e:15:f8:7d:0c:1c:2d:91:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4f0b9a5fe0389fadcbbfb1fa1c40c4a4ba0d2b
Validity
Not Before: Jul 28 23:01:01 2026 GMT
Not After : Jul 29 23:01:01 2026 GMT
Subject: CN=0b79b3527a0d2f5013b7d6f18dfcc6bde10bac25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:44:ca:c6:08:46:3f:11:83:7d:7b:ac:4a:e9:
1c:c5:6c:66:63:45:27:75:00:c6:e8:d6:4f:eb:1f:
3d:96:17:bb:76:1b:db:0f:1c:50:bd:c6:ae:e8:71:
9c:3c:0a:63:d3:ce:ff:72:e9:43:8b:ad:67:4f:a1:
2a:22:ae:c5:60:15:9d:8b:e4:6a:f8:3f:fc:06:56:
ad:05:8e:4b:a5:60:c9:f4:e2:68:d4:53:9e:8c:64:
5e:f1:d6:7a:0b:1e:86:f4:d1:45:52:53:0b:3b:07:
62:62:ae:65:04:cf:29:9b:56:46:e5:15:7f:67:ae:
9b:89:f3:b2:16:4d:b7:c3:99:58:77:52:d9:0e:7b:
21:4b:30:cc:af:46:41:76:00:71:20:29:f5:ff:79:
fa:db:83:88:4e:89:9a:e4:b3:c8:2f:92:43:b5:19:
ac:91:ec:9b:0a:ea:a1:9a:5a:80:9d:99:dc:e8:99:
bd:5a:95:7b:52:9a:51:e9:f2:8d:b4:31:2b:0e:6a:
59:7e:79:5b:52:0e:c1:de:47:a4:e6:5a:59:29:11:
6e:2b:ec:29:c0:f6:11:87:a6:70:a5:0b:b5:c6:50:
b8:49:be:e4:30:65:f5:52:82:9d:35:7b:12:58:f5:
b8:c9:51:e6:c4:5c:40:fa:63:f8:d2:76:61:39:91:
d6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:79:B3:52:7A:0D:2F:50:13:B7:D6:F1:8D:FC:C6:BD:E1:0B:AC:25
X509v3 Authority Key Identifier:
keyid:0C:4F:0B:9A:5F:E0:38:9F:AD:CB:BF:B1:FA:1C:40:C4:A4:BA:0D:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b3:80:1a:89:46:3c:25:db:87:f1:10:42:88:5a:ef:54:a6:
0a:db:b5:c5:8d:ea:29:80:0a:ba:3d:16:56:67:d2:f0:ba:cb:
0e:13:05:ee:8c:da:2b:b4:ac:47:47:b7:23:9b:fb:19:32:98:
68:28:c0:7e:a7:62:2a:a1:90:5f:e5:69:22:05:43:5a:05:d9:
eb:c1:2a:45:dd:b4:2a:e4:47:66:a1:31:26:6f:2c:39:43:28:
05:4a:de:8d:fc:d8:64:4a:9d:5e:ac:ba:9d:0e:b4:42:ca:6f:
28:a9:fe:74:8f:38:8b:0a:20:28:f9:53:4a:9a:27:6e:58:a0:
3b:54:7f:24:99:0d:e4:bd:05:12:80:5f:41:0c:d8:a4:fd:e9:
32:86:df:60:7f:a9:08:e7:27:53:07:61:a9:24:4f:05:8b:67:
83:9d:a5:d1:48:b1:4a:34:3c:19:14:78:77:fb:af:2b:90:97:
4d:40:96:08:50:46:fa:6f:45:fa:ef:4e:b7:a1:a9:df:aa:66:
79:fe:6a:0e:7c:32:96:eb:ff:92:d0:0e:24:a7:85:d8:db:90:
cd:df:93:61:78:81:6d:ef:6a:2c:db:72:7e:f7:71:44:48:6b:
94:8a:46:1d:87:cd:ac:43:e0:1e:96:20:96:df:c0:29:ad:6f:
07:0b:15:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:54:41 2026 by rpki-client