Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
File: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft (raw, json)
Hash identifier: 8VRtB1qbSuz5N9O65PWAVYeDvYvXFFX6RZZQ4amtXSg=
Subject key identifier: A7:10:0A:E4:93:A3:46:DE:BB:85:E8:ED:FE:1A:9D:5C:C9:CA:85:78
Authority key identifier: D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
Certificate issuer: /CN=d031655023bd141731d56fb8453ff0514f728865
Certificate serial: 019FA89A467409E92F4956CB5020922E6965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
Manifest number: 1689
Signing time: Tue 28 Jul 2026 12:01:50 +0000
Manifest this update: Tue 28 Jul 2026 12:01:50 +0000
Manifest next update: Wed 29 Jul 2026 12:01:50 +0000
Files and hashes: 1: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl (hash: SQLVTIF4ITlARTRRHgz2FYMd2bUZ121oMEHOC7jUJDE=)
2: 3AB4ABWLvkMBLhXbVPQ47Et_IPE.roa (hash: 7TTeY9RzcNuOB9ePCi+NTRAM5DwBMiMi62WzvEoHHl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:46:74:09:e9:2f:49:56:cb:50:20:92:2e:69:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d031655023bd141731d56fb8453ff0514f728865
Validity
Not Before: Jul 28 12:01:50 2026 GMT
Not After : Jul 29 12:01:50 2026 GMT
Subject: CN=a7100ae493a346debb85e8edfe1a9d5cc9ca8578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:bd:8a:69:8a:fe:b3:1d:1f:fa:e6:87:5c:39:
7f:63:76:48:78:3a:65:5b:9b:6c:34:12:d7:5d:41:
d7:4f:15:c4:54:3c:f6:2b:71:18:e2:4b:99:1c:ba:
99:3e:da:78:b1:22:71:c3:09:c7:f8:9f:6e:5e:c7:
83:89:67:7f:40:cd:46:83:58:ec:b3:97:5d:32:a0:
76:30:43:ac:57:4d:2b:b0:2b:4e:5d:7e:1b:07:3a:
14:41:61:a9:fa:8a:f0:bb:fa:fc:2d:53:32:8a:e4:
f8:18:91:85:b6:e6:ba:4b:ec:5c:c8:8b:f3:8f:83:
d4:40:1e:a8:4c:79:93:1d:da:da:f0:b6:ac:7a:92:
b2:8e:07:7b:f6:94:d1:c4:76:3a:55:77:06:35:7d:
cb:78:11:3e:ed:9e:8e:46:52:8e:cc:34:d4:6e:5b:
ea:67:24:65:8c:bb:5c:38:b5:fd:ee:56:ea:59:a7:
18:18:07:79:cd:cd:32:fe:41:92:50:5a:12:ae:1e:
4c:4a:6e:48:3d:bb:51:bf:c3:24:a1:0f:17:cd:32:
02:27:94:97:78:0b:94:8a:5c:82:34:29:26:1d:ef:
b5:e3:56:53:2a:96:6e:37:e7:ce:45:75:52:7f:66:
6a:26:8e:28:00:b1:b0:2d:fa:71:5b:2b:ec:5b:61:
a2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:10:0A:E4:93:A3:46:DE:BB:85:E8:ED:FE:1A:9D:5C:C9:CA:85:78
X509v3 Authority Key Identifier:
keyid:D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:4b:82:c5:b9:f7:40:5a:33:40:0e:c4:74:37:22:2a:9e:35:
2c:a5:4c:f3:be:e5:15:33:0a:b6:81:2d:d0:c5:c2:d1:95:90:
34:ba:66:9c:83:52:c2:26:a5:d5:bd:9a:b5:fd:d6:75:7a:21:
7d:52:3a:41:7e:71:38:72:58:f6:de:e0:08:aa:92:96:a2:d5:
5d:14:b5:d9:47:4e:31:b8:37:b8:76:e5:0a:7b:a2:3c:3f:b1:
cd:22:f3:8e:da:43:ef:3a:69:f0:f6:36:f7:8e:40:2c:c7:af:
8c:75:45:da:8b:89:ef:ec:c9:0e:cd:cd:a1:b9:6b:6d:8a:68:
d8:83:c1:50:e8:6f:85:4a:56:1b:7c:f2:8b:b3:01:33:da:df:
7e:fe:eb:a1:54:c9:e8:5e:3b:85:0d:38:1a:29:08:bd:55:d0:
f9:da:0c:40:dc:14:b0:58:26:97:3e:26:5f:c6:fb:91:3f:78:
29:c8:8b:2a:ff:dc:ed:13:e2:63:96:32:d5:5b:f5:28:7d:a4:
45:91:08:2b:fc:b7:bb:16:c0:91:3d:93:6b:24:b2:8e:03:35:
0b:e0:f3:13:14:98:cc:1e:0c:a2:7f:32:81:97:8c:66:e3:bc:
a4:f6:50:67:37:6a:c5:92:3f:c5:07:42:17:c5:6c:d9:e3:0d:
b4:09:6e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:42:16 2026 by rpki-client