Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
File: 61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft (raw, json)
Hash identifier: ml+/MkSMa+CD2YY3MNPl+iePMLq9OVgz9axoDNxvvxw=
Subject key identifier: 32:A9:24:5F:27:D7:FF:02:A4:2C:A8:57:04:17:44:A2:9C:F0:AD:A4
Authority key identifier: EB:50:B4:39:D4:88:E1:B1:A6:9E:35:86:09:86:21:95:6C:0E:DC:7B
Certificate issuer: /CN=eb50b439d488e1b1a69e3586098621956c0edc7b
Certificate serial: 019FAA19B1821D0B4873B3C8B843ADE1D740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
Manifest number: 0FCD
Signing time: Tue 28 Jul 2026 19:00:38 +0000
Manifest this update: Tue 28 Jul 2026 19:00:38 +0000
Manifest next update: Wed 29 Jul 2026 19:00:38 +0000
Files and hashes: 1: 61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl (hash: F267wefhHbVt88t74axV4YUEEZPcH6QlFlOoTnXvJvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:b1:82:1d:0b:48:73:b3:c8:b8:43:ad:e1:d7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb50b439d488e1b1a69e3586098621956c0edc7b
Validity
Not Before: Jul 28 19:00:38 2026 GMT
Not After : Jul 29 19:00:38 2026 GMT
Subject: CN=32a9245f27d7ff02a42ca857041744a29cf0ada4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e4:f6:a9:87:75:5f:6c:05:4f:00:73:00:0e:
c1:53:dc:94:fa:69:90:ad:d7:94:84:81:ee:ed:31:
69:e9:0c:dd:d5:19:01:5b:9e:40:47:c4:f3:55:ab:
b5:84:59:ec:7b:dc:2c:fe:99:4e:4e:4f:d9:da:7a:
1f:00:3c:00:96:52:ac:1d:2d:fc:40:b0:46:09:9a:
d4:93:e5:80:f5:77:11:05:ef:b8:b7:41:24:86:0c:
6a:cd:b8:41:89:a2:84:3d:01:f3:d2:25:62:6a:1e:
23:9b:b0:0b:6a:6f:db:aa:d6:6e:e9:2d:8d:8f:3c:
c5:9c:eb:8f:d6:32:25:b0:b3:b6:c3:95:9b:88:6d:
cc:4e:57:5e:58:3f:09:cb:dc:38:6b:2b:d4:6e:e4:
70:5c:6e:e3:c8:2b:87:d3:c1:64:8b:71:3c:96:b7:
e3:03:e0:ed:a6:aa:be:74:20:7b:4c:36:32:1f:b0:
7a:df:84:b6:19:49:80:6f:21:47:66:ec:bb:b7:b6:
3b:9a:5e:3d:e6:71:91:1d:5f:c1:d0:7f:22:85:0f:
c9:03:98:89:b7:1c:c1:03:47:a0:e6:bd:d9:b6:33:
a4:7f:db:4a:a0:0b:cb:70:3b:98:6e:5a:68:30:61:
cb:2d:83:67:24:9e:d3:6a:aa:2d:77:dc:a8:02:2f:
88:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A9:24:5F:27:D7:FF:02:A4:2C:A8:57:04:17:44:A2:9C:F0:AD:A4
X509v3 Authority Key Identifier:
keyid:EB:50:B4:39:D4:88:E1:B1:A6:9E:35:86:09:86:21:95:6C:0E:DC:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:aa:9e:e5:11:f7:24:9f:ef:77:5d:8e:85:e4:c9:f2:4c:82:
d5:69:d9:66:aa:14:3b:33:9e:a8:47:78:1c:a7:47:b5:ed:7e:
6a:d4:d1:11:53:f9:fa:71:8f:bf:96:d4:c0:ba:89:71:df:14:
56:53:21:c2:0c:3f:74:49:8c:42:ef:ff:f6:80:66:69:71:9c:
89:ab:93:ae:96:e3:e9:40:5c:a8:8e:ce:4c:7d:b0:5c:ae:26:
25:22:65:02:59:61:35:23:69:a0:ec:7a:24:e7:c0:69:8c:f7:
b6:62:06:f6:6d:20:5e:0c:4c:2f:ed:f4:ce:a4:5c:f6:17:2a:
4d:6b:1f:ba:5d:30:6c:13:d3:94:84:27:3f:59:88:e9:7a:e3:
24:58:54:51:f4:84:42:77:15:35:d2:35:13:21:ef:3e:5d:33:
0c:58:1d:f6:22:f6:7b:b4:a1:50:af:d0:dd:b1:21:b7:09:da:
79:e3:7f:3f:3e:3d:0e:fc:d7:8d:d3:33:68:dd:8b:a5:47:05:
06:7e:c4:7c:b0:f1:f9:f5:47:7d:a0:24:dc:70:22:2e:c4:96:
68:d9:99:4c:96:01:58:9f:39:f7:8e:a8:23:f3:4f:41:77:0c:
73:e4:92:c3:98:4d:5f:85:11:2c:3e:ee:5e:5a:28:0d:d3:34:
12:77:f3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:53:38 2026 by rpki-client