Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
File: D2vaHb-nfHTacoBe7lQY0_DMU50.mft (raw, json)
Hash identifier: d7bar4JTzZAp0RptZX9NRQaTgWdeWTESUasdT0q+Pak=
Subject key identifier: 98:85:DD:69:93:A3:71:85:67:F1:AE:4A:E2:9C:BF:5B:06:0D:BF:4A
Authority key identifier: 0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D
Certificate issuer: /CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d
Certificate serial: 019EBDDA7C1B68CDAADDE5321B9082729557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
Manifest number: 167C
Signing time: Fri 12 Jun 2026 22:01:12 +0000
Manifest this update: Fri 12 Jun 2026 22:01:12 +0000
Manifest next update: Sat 13 Jun 2026 22:01:12 +0000
Files and hashes: 1: D2vaHb-nfHTacoBe7lQY0_DMU50.crl (hash: flwOPituRD1sXBuXrWajMqBSduhHL7IvxXT+1Qvvb4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:da:7c:1b:68:cd:aa:dd:e5:32:1b:90:82:72:95:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d
Validity
Not Before: Jun 12 22:01:12 2026 GMT
Not After : Jun 13 22:01:12 2026 GMT
Subject: CN=9885dd6993a3718567f1ae4ae29cbf5b060dbf4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d8:9c:a2:4d:ce:f1:7a:f4:2c:2a:b0:a9:47:
62:39:1b:9f:80:34:ce:b0:ec:0f:d5:81:82:3d:5f:
70:3d:4b:32:e8:70:d9:49:86:2e:47:d5:01:2d:cb:
46:55:71:db:f8:62:4a:18:ad:f6:e1:01:2d:12:3c:
2d:09:e8:ac:d6:84:12:e6:76:b1:7d:20:4d:8f:e4:
d0:7f:2f:43:c6:0f:be:c1:d9:74:66:cc:1b:f6:50:
15:45:4f:11:19:cb:7a:21:9d:f1:f1:a3:ea:17:7a:
76:b1:d1:96:4d:28:3a:dc:1e:2a:23:bb:47:96:d3:
22:82:ce:a6:24:be:64:71:fe:79:b2:9b:c3:66:81:
fd:79:bb:69:a3:cb:c3:3a:c3:e8:d2:8e:26:02:df:
ab:f5:e1:a7:1c:67:e9:f9:4c:7e:04:8a:87:31:18:
25:bb:42:55:97:70:68:bb:76:e0:38:48:92:af:a8:
f3:fe:15:ab:05:ed:db:f3:16:85:58:15:53:3f:b9:
65:62:0a:55:90:ae:79:50:eb:92:c1:0d:a7:4e:00:
e5:03:08:45:35:cb:5c:3f:c8:9b:df:cf:e9:aa:fa:
c3:7d:8e:2e:96:cb:6e:0f:6e:61:47:59:e4:bb:72:
cf:85:bb:0f:db:b4:a1:86:bf:f4:14:94:67:4c:85:
99:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:85:DD:69:93:A3:71:85:67:F1:AE:4A:E2:9C:BF:5B:06:0D:BF:4A
X509v3 Authority Key Identifier:
keyid:0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:99:e5:66:e0:0c:a8:5d:f1:1e:5f:dc:15:a9:43:8a:f3:68:
1f:71:98:db:39:fb:06:b7:86:d6:dd:35:58:71:db:21:13:52:
c8:e9:f0:82:16:6a:41:eb:e4:45:fd:f8:98:70:d5:1d:16:90:
d9:e2:95:85:7b:d5:fb:35:c3:c3:cc:b9:dc:76:c0:ab:ff:13:
db:a7:fe:34:cd:da:0c:c1:fc:2e:22:ee:51:cf:33:3a:67:17:
6e:c0:d0:c3:65:f1:47:6a:6a:45:e9:ce:c8:56:63:e5:46:cb:
b6:aa:b4:75:30:68:b5:16:e7:27:41:e3:44:2e:35:02:0f:5f:
4c:33:90:32:31:03:ff:d9:8b:55:f0:8b:12:d6:d2:ea:ec:8e:
bc:60:55:4b:da:7b:65:d5:22:72:c7:52:b6:14:1a:5f:69:30:
5f:2b:03:4b:0b:dc:2c:6d:c9:96:cf:74:a9:66:ef:42:3a:74:
8b:7b:d9:d4:74:5e:07:53:21:d1:99:31:4b:9a:9b:28:c2:25:
90:92:03:91:72:26:1d:3f:66:18:51:12:a7:a0:02:f4:e9:94:
02:6e:15:4d:8b:cf:aa:ef:2a:cd:9e:c1:32:3a:11:23:59:c8:
01:7d:54:3e:56:7b:02:73:34:7b:f6:1e:9c:6e:94:d8:8c:2f:
65:39:b3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:50:15 2026 by rpki-client