Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
File: D1T54Kep6u6svFsQMQI1t_0O7QM.mft (raw, json)
Hash identifier: 9JuYkCUPowREpiD7EetCEHWytSQxXK7Q9PJ6AsEJcaU=
Subject key identifier: 39:D7:1D:A0:54:CC:35:B6:6C:6E:AB:7D:05:59:25:BD:D9:B2:5D:6D
Authority key identifier: 0F:54:F9:E0:A7:A9:EA:EE:AC:BC:5B:10:31:02:35:B7:FD:0E:ED:03
Certificate issuer: /CN=0f54f9e0a7a9eaeeacbc5b10310235b7fd0eed03
Certificate serial: 019FA9ABC61D5BE12534685F4B67B02076FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
Manifest number: 15D0
Signing time: Tue 28 Jul 2026 17:00:34 +0000
Manifest this update: Tue 28 Jul 2026 17:00:34 +0000
Manifest next update: Wed 29 Jul 2026 17:00:34 +0000
Files and hashes: 1: D1T54Kep6u6svFsQMQI1t_0O7QM.crl (hash: UbRQZgqvNDMcZoIrebN5h6YQdyBzo3HuFnRbNlBCtQc=)
2: QwkbPhXCYpS8QdG4aux1NndNvVU.roa (hash: lPZVn1QVeW2aCEI35oLMwurmWxshCLVoZsSdXVqBOzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:c6:1d:5b:e1:25:34:68:5f:4b:67:b0:20:76:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f54f9e0a7a9eaeeacbc5b10310235b7fd0eed03
Validity
Not Before: Jul 28 17:00:34 2026 GMT
Not After : Jul 29 17:00:34 2026 GMT
Subject: CN=39d71da054cc35b66c6eab7d055925bdd9b25d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8c:38:72:c6:67:8d:d2:c7:38:f0:38:45:9a:
17:dc:d6:a8:3b:cc:e7:9d:43:f5:c3:ec:5d:0f:4b:
be:01:48:ae:7e:e0:42:7c:d9:22:4b:d3:5f:30:8b:
87:02:34:58:6d:b7:b5:9b:59:5d:03:24:6e:ae:2e:
bf:bd:c3:43:e6:71:f7:dc:64:f5:f7:9a:ca:a5:5c:
c7:b1:d3:54:7a:e4:f1:bd:2b:26:7d:50:d7:aa:16:
0d:d1:2f:09:90:bc:74:06:2f:e8:c8:4c:49:aa:af:
3f:ce:8a:f6:03:b6:78:4f:32:51:7f:45:21:8e:88:
6e:9d:9a:0c:9e:c7:80:b9:d3:97:42:e1:46:8b:f5:
05:bd:b6:f2:f9:37:5e:39:b8:77:61:96:e3:c8:9a:
19:2b:f9:f2:ad:8c:4d:27:a8:d5:07:ff:32:df:92:
6c:87:43:75:65:7a:55:9c:f4:57:aa:19:50:59:ce:
09:b6:df:d5:3c:47:14:3a:af:f1:97:29:7e:4c:79:
d0:67:80:f0:84:d9:20:a1:2a:33:99:61:09:c9:d9:
00:98:40:58:e0:27:a6:ef:ec:e5:e2:bd:87:91:5f:
d3:7d:3e:68:97:7c:cc:37:d0:d4:4f:8a:73:41:db:
18:34:bf:8a:00:e0:d2:29:78:ee:5e:7c:40:58:46:
62:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D7:1D:A0:54:CC:35:B6:6C:6E:AB:7D:05:59:25:BD:D9:B2:5D:6D
X509v3 Authority Key Identifier:
keyid:0F:54:F9:E0:A7:A9:EA:EE:AC:BC:5B:10:31:02:35:B7:FD:0E:ED:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:a5:0d:52:c8:7d:a7:22:bc:ac:ac:f4:8a:4d:05:16:3a:5a:
c2:b5:57:30:ac:46:6f:9d:03:a8:11:94:d1:5f:80:5e:b7:93:
90:e7:46:6f:54:ce:07:6c:70:66:9b:eb:23:16:65:77:a2:c6:
c2:84:2d:d9:ec:b6:2b:b7:ae:b6:79:ba:63:46:bf:d3:89:b6:
bd:ec:f4:69:0b:4b:35:0c:07:84:64:db:18:0f:63:bb:75:f1:
48:10:26:05:3a:71:c0:e3:2e:d9:f8:dd:d8:86:b5:ac:79:06:
cc:c4:b8:19:3a:e9:93:eb:03:f0:1e:0e:07:97:d2:60:5c:27:
16:b7:98:3e:64:e8:09:0d:24:38:8a:5e:6d:f1:1a:59:05:77:
a1:fb:51:50:ba:a9:69:a5:6e:0c:05:d8:39:bd:ad:76:65:3e:
77:13:3c:89:94:b1:8b:c9:e8:98:2c:ab:cb:f1:33:61:7b:15:
d6:07:56:45:6e:c8:ba:d7:52:0a:95:63:a6:de:b5:46:24:d6:
55:b2:3a:a9:32:d7:95:59:ae:36:24:1d:0a:28:ef:3a:36:a1:
2e:c8:12:52:11:45:04:e2:a7:a6:91:80:2d:90:c0:ac:4a:7b:
fd:75:35:25:ee:6c:c3:9e:8a:59:e7:60:80:b9:f2:f3:b8:3a:
c2:c2:86:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:19:18 2026 by rpki-client