Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1adb3b-0597-40f4-95f1-08a6680ac842/1/DU7kd6rb1vbH8sonqPohowxrNXw.mft
File: DU7kd6rb1vbH8sonqPohowxrNXw.mft (raw, json)
Hash identifier: vhBMH9UmopzrJnJgGDjXN8GK8v/7MZIHzap7QZIV/Gc=
Subject key identifier: 50:CF:F3:E4:CC:AD:91:A8:4A:B6:22:AF:07:A0:EC:70:5A:CC:48:3E
Authority key identifier: 0D:4E:E4:77:AA:DB:D6:F6:C7:F2:CA:27:A8:FA:21:A3:0C:6B:35:7C
Certificate issuer: /CN=0d4ee477aadbd6f6c7f2ca27a8fa21a30c6b357c
Certificate serial: 019FA9E3319A91557D0A9C3FF1397A4DFDC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DU7kd6rb1vbH8sonqPohowxrNXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1adb3b-0597-40f4-95f1-08a6680ac842/1/DU7kd6rb1vbH8sonqPohowxrNXw.mft
Manifest number: 1562
Signing time: Tue 28 Jul 2026 18:01:06 +0000
Manifest this update: Tue 28 Jul 2026 18:01:06 +0000
Manifest next update: Wed 29 Jul 2026 18:01:06 +0000
Files and hashes: 1: DU7kd6rb1vbH8sonqPohowxrNXw.crl (hash: 32+Tx6XZ4smLfmISAhWc0QlSsFNl/XmdAKOcLzqQN6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1adb3b-0597-40f4-95f1-08a6680ac842/1/DU7kd6rb1vbH8sonqPohowxrNXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1adb3b-0597-40f4-95f1-08a6680ac842/1/DU7kd6rb1vbH8sonqPohowxrNXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DU7kd6rb1vbH8sonqPohowxrNXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:31:9a:91:55:7d:0a:9c:3f:f1:39:7a:4d:fd:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4ee477aadbd6f6c7f2ca27a8fa21a30c6b357c
Validity
Not Before: Jul 28 18:01:06 2026 GMT
Not After : Jul 29 18:01:06 2026 GMT
Subject: CN=50cff3e4ccad91a84ab622af07a0ec705acc483e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:42:e4:18:46:a8:1b:f4:5e:e9:81:f8:51:e8:
90:4e:72:72:72:5c:d7:23:35:86:23:32:5a:65:19:
39:8e:71:16:be:3e:82:af:9e:98:33:4c:94:d7:b0:
1d:dc:bb:3f:99:e1:18:51:51:38:a5:5c:fc:4b:16:
97:a2:b5:c9:55:c7:18:12:c7:cf:00:ae:05:2c:84:
b5:df:9a:0c:e3:cd:f0:ba:05:40:76:b2:7f:56:45:
a0:05:36:77:fb:96:a1:a8:6a:a2:5a:3d:88:4f:27:
c7:34:e8:cd:e9:f2:28:f1:86:7b:e0:c1:80:0c:55:
34:89:74:65:86:87:22:d0:fb:80:86:49:66:8c:10:
b6:d0:a7:a5:f3:70:3b:a1:b3:44:05:af:bd:c1:f4:
90:ea:c7:bb:65:7d:3b:4f:b8:78:21:c6:56:05:37:
a0:11:83:47:34:1a:51:35:f9:74:79:74:9f:99:79:
1b:8f:5c:da:13:be:6f:69:f1:f0:a3:f7:d1:4e:80:
02:44:2b:5f:cc:31:73:60:c0:5d:69:21:13:36:3f:
59:6f:63:6c:16:a6:ae:3f:77:fe:07:b3:2e:55:93:
c5:5b:50:63:57:93:c5:84:ed:d2:5e:7b:c6:da:ab:
9d:78:31:d1:4f:c9:a0:65:a3:82:6a:b4:96:51:41:
25:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:CF:F3:E4:CC:AD:91:A8:4A:B6:22:AF:07:A0:EC:70:5A:CC:48:3E
X509v3 Authority Key Identifier:
keyid:0D:4E:E4:77:AA:DB:D6:F6:C7:F2:CA:27:A8:FA:21:A3:0C:6B:35:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7kd6rb1vbH8sonqPohowxrNXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1adb3b-0597-40f4-95f1-08a6680ac842/1/DU7kd6rb1vbH8sonqPohowxrNXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1adb3b-0597-40f4-95f1-08a6680ac842/1/DU7kd6rb1vbH8sonqPohowxrNXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f3:48:6e:48:2b:85:32:b8:b6:a9:ad:07:ad:45:08:bb:6d:
00:b5:34:e9:be:c1:4f:20:9d:e5:a1:d9:0f:83:f9:49:d0:66:
44:cd:4c:5e:f7:bb:89:4d:12:00:ce:9b:a0:97:01:e6:2f:89:
47:81:f0:e5:5c:d4:63:11:75:9b:ca:f9:6d:6f:34:31:0e:e9:
f4:a4:0d:32:56:78:35:15:fb:71:df:b4:8c:82:91:3a:c2:81:
ed:0d:85:32:85:47:03:10:e2:e8:6a:0b:fd:11:70:04:e0:1f:
9f:04:2b:5a:d7:7f:24:fb:f7:f2:5a:fe:43:bb:d5:90:b2:57:
58:0b:0c:18:2a:02:45:f6:3b:36:c1:49:a6:69:2b:ef:55:48:
42:63:00:2d:4e:2d:26:70:3c:aa:9e:2f:18:97:74:1a:45:07:
6d:e2:c3:ac:26:ff:aa:e2:64:a4:c5:59:3c:5f:03:6f:fd:ac:
f6:4d:af:5a:37:12:81:77:5c:35:e9:30:d5:ad:7b:36:97:7b:
ea:75:5f:9d:d4:21:71:d7:55:fa:9d:42:fc:8a:0b:f4:c1:ee:
66:d8:82:25:e1:db:1e:c9:e0:9b:7f:c1:0a:2c:2c:1a:90:3e:
0c:75:e8:e6:d3:a3:90:e4:45:b6:ac:83:cc:a1:d3:f2:44:ea:
47:a8:41:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:33:47 2026 by rpki-client