Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
File: D2vaHb-nfHTacoBe7lQY0_DMU50.mft (raw, json)
Hash identifier: 8B+eYs8Zqa3TgKlQFOCvA9n7mFcDhNIutM6L4Jor8CE=
Subject key identifier: 33:08:F5:94:03:89:3C:B8:0B:DC:93:97:C4:CF:B8:E0:1A:F2:F4:5B
Authority key identifier: 0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D
Certificate issuer: /CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d
Certificate serial: 019FA9757873AFEEC6C44EB1858ADEEAF59F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
Manifest number: 16F6
Signing time: Tue 28 Jul 2026 16:01:15 +0000
Manifest this update: Tue 28 Jul 2026 16:01:15 +0000
Manifest next update: Wed 29 Jul 2026 16:01:15 +0000
Files and hashes: 1: D2vaHb-nfHTacoBe7lQY0_DMU50.crl (hash: QJTH36CXFfMM2Fw4lX7BaDBEhPzJ6hQ4HafvLwATDP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:78:73:af:ee:c6:c4:4e:b1:85:8a:de:ea:f5:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d
Validity
Not Before: Jul 28 16:01:15 2026 GMT
Not After : Jul 29 16:01:15 2026 GMT
Subject: CN=3308f59403893cb80bdc9397c4cfb8e01af2f45b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ae:4a:6f:28:9e:54:6e:00:54:59:6e:99:d8:
52:54:de:dc:d6:c1:dd:54:88:00:51:0c:fe:e4:cb:
c6:e3:bb:33:ec:c8:b3:ca:de:a2:4e:02:3f:88:af:
cd:26:7a:68:19:de:dd:f9:fb:43:6f:54:d6:7c:11:
8e:67:05:87:67:d4:eb:63:f1:43:77:a7:f1:f0:44:
3f:3d:48:a2:5a:e5:c8:e5:63:ea:aa:8f:47:8e:bd:
9e:42:8c:f8:18:09:df:74:75:8e:5c:64:df:d5:f5:
22:56:d0:44:4e:5f:af:68:4e:fe:de:2c:70:a8:1d:
d1:01:59:cc:84:7d:1b:4b:9e:ee:b8:88:9d:59:df:
0f:15:30:c6:5c:ef:84:58:95:8d:22:3e:31:ba:c5:
e2:69:31:0b:17:a3:7f:15:87:65:a4:1c:8f:4d:f5:
28:bb:b0:ec:1a:6d:32:4e:fd:17:a0:2b:73:6e:98:
7b:c3:fa:29:37:e6:c8:f7:f4:36:ef:2a:d6:99:b3:
b5:6f:d4:a6:8a:a2:8d:94:87:56:16:d6:62:5e:01:
e1:28:81:40:b2:fb:15:6e:c7:90:83:f8:73:83:3e:
6d:bc:a8:ee:2b:0e:39:5a:c4:06:79:0d:62:4a:1a:
f5:a2:8e:a9:a5:44:12:84:fe:b5:b5:81:87:61:69:
ec:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:08:F5:94:03:89:3C:B8:0B:DC:93:97:C4:CF:B8:E0:1A:F2:F4:5B
X509v3 Authority Key Identifier:
keyid:0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:4a:c7:a4:8a:2e:f9:04:17:d7:21:85:ab:8a:b6:e6:8c:79:
b3:64:cb:e3:aa:db:d1:d2:fe:40:21:54:96:05:61:1e:53:c8:
94:7d:f7:eb:1a:27:48:76:34:e2:55:c7:6e:89:5e:5c:08:df:
ef:7e:5b:1f:9f:d3:b5:4f:af:5e:e3:ce:e1:04:6e:e5:44:7b:
18:42:9b:50:c9:b5:e8:27:70:7a:b2:c4:0c:05:35:7c:99:a8:
ec:49:56:03:67:fc:ad:a7:ae:38:5e:7b:b0:5c:0a:61:83:c2:
79:65:f0:24:c5:83:78:ec:66:bb:a9:86:36:fe:26:10:60:a1:
9d:ec:b9:d2:62:b6:32:36:a4:5e:1d:48:0e:12:df:d8:b4:94:
af:50:2f:34:2e:44:cb:50:f1:e6:a5:d8:84:eb:de:de:a3:cd:
12:d0:71:a1:0e:14:34:67:a3:e6:31:74:9c:34:2d:71:00:43:
eb:8c:04:63:39:a1:c3:69:9e:6c:79:e9:1c:c4:bc:44:ce:0f:
30:11:08:67:47:c5:cb:0e:ac:67:ea:56:31:13:be:65:d2:72:
a4:b2:34:5b:54:c3:c5:6f:42:ad:68:5f:04:8f:e6:e8:5d:04:
f7:a3:7b:38:8d:e7:29:4c:67:71:2d:77:5f:c3:df:48:29:97:
56:f4:de:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:30:35 2026 by rpki-client