Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft
File: D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft (raw, json)
Hash identifier: FJvrSu3vpCu7j7MZ1JmtKdrmGqseNhaYmLAaCl0i258=
Subject key identifier: D0:CB:B7:5F:85:45:91:B1:8E:8D:83:6E:3A:F5:BE:FB:3C:38:B9:8E
Authority key identifier: 0F:B7:CD:B0:52:82:B0:89:B4:76:75:9F:69:ED:4A:43:6B:45:63:62
Certificate issuer: /CN=0fb7cdb05282b089b476759f69ed4a436b456362
Certificate serial: 019DA4F9296DF553CA2FEDEEEDB9DA9AFBB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7fNsFKCsIm0dnWfae1KQ2tFY2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft
Manifest number: 0172
Signing time: Sun 19 Apr 2026 09:01:25 +0000
Manifest this update: Sun 19 Apr 2026 09:01:25 +0000
Manifest next update: Mon 20 Apr 2026 09:01:25 +0000
Files and hashes: 1: D7fNsFKCsIm0dnWfae1KQ2tFY2I.crl (hash: c0h5nt6q7+WLwVtOWOQfTjez/VuHDD5/imXy1ZyoJr8=)
2: Jv84iN2B8ANANDflC9HEXw5LA8Y.roa (hash: qNF0F5ELDvVzv6IS3eSh9XZM4TiIIZIYRSv7YJ85pZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/D7fNsFKCsIm0dnWfae1KQ2tFY2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 09:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f9:29:6d:f5:53:ca:2f:ed:ee:ed:b9:da:9a:fb:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fb7cdb05282b089b476759f69ed4a436b456362
Validity
Not Before: Apr 19 09:01:25 2026 GMT
Not After : Apr 20 09:01:25 2026 GMT
Subject: CN=d0cbb75f854591b18e8d836e3af5befb3c38b98e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2d:27:a2:6d:50:3c:4c:3b:09:b3:20:bc:6f:
b5:90:b2:3a:82:c1:fa:98:97:89:47:92:93:37:97:
b8:cc:35:ea:aa:a7:46:ec:2b:58:cd:69:3f:b6:ea:
f4:39:f2:d8:4e:6e:e8:a3:2e:24:bc:f0:19:99:fb:
fe:58:34:1c:a8:92:ae:86:ea:47:09:55:49:e8:72:
35:14:1d:f7:09:0f:21:93:33:d9:f8:94:ac:2d:e1:
64:45:20:7b:0c:d3:6a:b4:73:a9:0a:f5:c8:c5:3e:
9e:0f:0d:8f:cb:0d:0e:d0:0a:cb:3d:5d:66:02:f9:
f2:d6:1b:44:bc:53:7a:c6:35:78:5f:c8:8d:a1:0d:
b2:9e:3a:ce:33:ed:83:55:dc:ac:51:81:14:ee:48:
e0:92:bb:4c:d4:a5:27:d7:f7:4c:7c:ec:32:50:25:
9a:7d:6c:d3:2f:46:01:2e:12:21:5f:fe:64:8e:90:
95:d7:77:d5:05:25:25:2a:03:6e:66:8a:8a:51:8c:
81:e1:bc:50:6e:5d:bb:e3:4a:cf:8b:1a:a1:e0:f1:
f2:3b:05:13:a0:32:fe:f9:0f:3a:54:37:46:a2:14:
9f:e1:54:26:31:a2:20:c4:6b:d4:76:38:ba:3c:8c:
4c:95:23:f9:34:81:a8:01:8c:99:45:ee:fc:de:ae:
51:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CB:B7:5F:85:45:91:B1:8E:8D:83:6E:3A:F5:BE:FB:3C:38:B9:8E
X509v3 Authority Key Identifier:
keyid:0F:B7:CD:B0:52:82:B0:89:B4:76:75:9F:69:ED:4A:43:6B:45:63:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7fNsFKCsIm0dnWfae1KQ2tFY2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:14:64:98:d2:10:da:f0:2b:cc:cb:25:ce:ef:ef:6a:5c:b5:
56:77:9f:93:82:40:99:b2:3c:c4:5f:3e:5e:2c:71:a2:3a:04:
e1:67:ae:d3:f9:82:b2:61:13:43:93:c0:3a:07:36:24:b1:2b:
91:52:4d:10:04:21:e4:1a:17:75:26:08:23:6d:10:72:17:52:
49:3c:5d:29:96:4b:80:e2:4c:28:85:6d:1c:8b:bb:2e:f5:90:
76:ec:50:f7:be:f7:67:ef:c4:d0:49:6b:77:c0:86:cd:ad:b1:
b1:e9:ba:6e:13:b3:fc:d7:6d:f2:7a:50:c8:a8:ce:bf:b3:41:
59:fb:cd:fd:2a:f1:6a:c5:9b:43:88:b0:03:5f:2b:3f:cb:4b:
a5:50:17:62:37:ae:ac:b9:c3:26:1c:9b:cf:77:df:6e:a1:a4:
4b:71:09:65:32:5d:43:a2:95:48:ec:d0:14:c1:c0:83:8f:34:
05:74:e2:4b:d9:ab:63:44:f9:4a:3e:9e:e2:12:57:b6:07:52:
fe:3e:49:f1:73:04:72:0c:14:c4:4f:32:89:44:4b:52:b2:41:
42:2a:8b:b9:b7:63:a5:40:6a:cf:df:52:31:fe:2c:5d:01:19:
ef:e0:37:79:70:2a:90:4c:e3:8a:76:7c:d8:f1:3c:31:8f:0a:
93:62:c3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 16:58:05 2026 by rpki-client