Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.mft
File: D9zw7HuvNJ6JLVERXCLA29Q1C44.mft (raw, json)
Hash identifier: jNxDjsWlaHT9i3SXhIBhxAMlMXWVW9BfDG8bI4XNEn8=
Subject key identifier: D0:B9:47:01:4F:25:55:CD:72:A3:D8:F3:C8:25:1C:12:B0:CE:72:11
Authority key identifier: 0F:DC:F0:EC:7B:AF:34:9E:89:2D:51:11:5C:22:C0:DB:D4:35:0B:8E
Certificate issuer: /CN=0fdcf0ec7baf349e892d51115c22c0dbd4350b8e
Certificate serial: 019EBE48381A00053DDD1CE60F57E029E8FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D9zw7HuvNJ6JLVERXCLA29Q1C44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.mft
Manifest number: 0611
Signing time: Sat 13 Jun 2026 00:01:04 +0000
Manifest this update: Sat 13 Jun 2026 00:01:04 +0000
Manifest next update: Sun 14 Jun 2026 00:01:04 +0000
Files and hashes: 1: D9zw7HuvNJ6JLVERXCLA29Q1C44.crl (hash: FJsU3hE9r+83+C8KBjIsA0vaZRo+1UmN1f6JKUddOP0=)
2: Jv3FrbaSeXZke2UP27JZQguG_qc.roa (hash: dePpEEDTqP/enapSxKmHvz68yt/UQtEn5OCz1CdZVCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.mft
rsync://rpki.ripe.net/repository/DEFAULT/D9zw7HuvNJ6JLVERXCLA29Q1C44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:48:38:1a:00:05:3d:dd:1c:e6:0f:57:e0:29:e8:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fdcf0ec7baf349e892d51115c22c0dbd4350b8e
Validity
Not Before: Jun 13 00:01:04 2026 GMT
Not After : Jun 14 00:01:04 2026 GMT
Subject: CN=d0b947014f2555cd72a3d8f3c8251c12b0ce7211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d8:59:07:24:38:43:30:7b:bc:d7:20:29:0f:
43:80:2f:0f:96:ee:53:0d:bd:a6:9c:7d:1b:19:28:
4c:be:c0:87:60:29:73:52:72:d8:41:a9:3a:25:fa:
d0:82:c5:0c:dc:27:2d:a9:b9:5d:6d:b4:89:3e:55:
d1:ff:32:3b:c1:96:9a:0d:4b:9b:67:08:e9:29:24:
31:50:f4:b3:31:2c:31:f7:c7:71:00:b4:53:4c:ca:
a5:0f:48:a3:15:5f:5b:93:e9:01:b7:f1:4e:f7:23:
d2:bb:7f:7a:33:7c:37:79:89:ba:30:6e:1a:76:1d:
30:a6:30:a5:7f:2d:26:ca:26:9f:9a:6a:e1:0e:0c:
51:ec:06:b6:ec:6f:25:7a:fb:65:60:70:31:d1:88:
65:21:16:a4:b7:9e:4d:de:86:47:83:09:a6:5f:3a:
a1:37:02:e2:da:54:07:3e:4f:8f:69:2d:b1:e5:ba:
56:41:d5:07:83:11:94:6d:5f:9a:4e:af:eb:d7:b4:
9e:28:0e:fa:fa:d2:8d:40:9f:d6:e1:93:76:4b:3d:
e1:b1:d4:a1:ac:f8:97:4f:eb:79:1b:8c:60:85:c9:
9e:85:47:c6:db:90:c3:ea:62:c3:e2:11:27:43:de:
e5:31:c5:df:42:a6:11:6e:95:ff:8b:d5:14:d6:75:
f3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B9:47:01:4F:25:55:CD:72:A3:D8:F3:C8:25:1C:12:B0:CE:72:11
X509v3 Authority Key Identifier:
keyid:0F:DC:F0:EC:7B:AF:34:9E:89:2D:51:11:5C:22:C0:DB:D4:35:0B:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D9zw7HuvNJ6JLVERXCLA29Q1C44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:68:18:70:c6:ab:75:88:90:49:36:af:c3:42:43:33:ea:47:
3a:f4:76:85:d8:61:a7:88:6c:c7:e5:6c:12:dc:bc:7b:a1:f7:
8c:3f:44:ac:30:85:7d:eb:ec:4a:bc:db:c3:9b:c4:7d:80:ea:
18:05:48:e9:32:88:4d:f2:42:dd:92:9f:0b:61:95:de:d8:1f:
ad:52:b9:99:a7:30:a8:5a:ba:63:2a:bd:01:56:0b:cf:57:58:
fe:7e:33:b4:fa:87:39:f1:ad:f8:24:ec:b5:e0:ec:15:a4:a5:
cb:92:3e:b7:37:00:0f:52:84:5a:24:33:ef:c2:42:c0:5e:3a:
74:2e:19:b9:ce:68:b0:47:84:d6:29:61:f4:d9:18:b5:7c:59:
c0:5a:78:1c:40:e3:e7:4e:54:eb:ca:1e:e1:c7:e3:d3:bf:32:
8c:00:a2:21:3c:37:de:36:b1:37:48:ee:d7:38:2e:cf:4c:ae:
fe:60:87:a2:15:68:a0:00:ae:09:c5:9c:e0:2e:95:9d:f8:ae:
3f:71:14:e8:82:b1:ce:3c:34:60:a2:5f:cf:ef:11:f9:ce:80:
c7:ac:3a:58:a1:c9:b8:4e:bb:34:32:94:2f:50:52:e2:f1:73:
21:c2:bf:78:a5:3e:94:fe:60:79:3b:00:52:cb:00:07:34:f4:
be:de:86:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:57:02 2026 by rpki-client