
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.mft
File: D1pCPdyX3TDeyLhnPCSWjic3JnY.mft (raw, json)
Hash identifier: mo6MmEXSJEpjyO5XwTZ1ZDRhR1XI84EFznKN4ycOgT0=
Subject key identifier: CC:89:9C:0E:35:94:19:F2:6C:40:50:01:05:A0:55:CC:A2:42:23:CF
Authority key identifier: 0F:5A:42:3D:DC:97:DD:30:DE:C8:B8:67:3C:24:96:8E:27:37:26:76
Certificate issuer: /CN=0f5a423ddc97dd30dec8b8673c24968e27372676
Certificate serial: 019FA7868B22267CD0B884C1C9F4465F171F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1pCPdyX3TDeyLhnPCSWjic3JnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.mft
Manifest number: 0497
Signing time: Tue 28 Jul 2026 07:00:40 +0000
Manifest this update: Tue 28 Jul 2026 07:00:40 +0000
Manifest next update: Wed 29 Jul 2026 07:00:40 +0000
Files and hashes: 1: D1pCPdyX3TDeyLhnPCSWjic3JnY.crl (hash: ayX9mKUIuDLR9Gdi5UONjz5jpzPNYnGGvnXTQYiolU8=)
2: qxsVFLWzutD4sIWMRN_71aQX3Gk.asa (hash: PzokN7IgeLCI/R1ls+fKOOoJuZd/ub5AjD723/KR19k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1pCPdyX3TDeyLhnPCSWjic3JnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:86:8b:22:26:7c:d0:b8:84:c1:c9:f4:46:5f:17:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f5a423ddc97dd30dec8b8673c24968e27372676
Validity
Not Before: Jul 28 07:00:40 2026 GMT
Not After : Jul 29 07:00:40 2026 GMT
Subject: CN=cc899c0e359419f26c40500105a055cca24223cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:52:4d:dd:58:82:16:cb:6b:35:67:5c:25:69:
66:4c:16:fe:21:c1:cf:06:c5:fc:44:e4:fe:05:2c:
70:0a:50:89:9e:f7:f4:d5:24:ee:04:93:7a:cc:09:
11:61:0d:0d:1a:68:d3:be:de:59:80:c1:fa:b1:bd:
09:d0:46:a0:90:c0:ae:35:b3:2c:2a:f5:43:22:31:
6d:b3:f3:90:2c:e2:75:4f:e3:8e:71:90:ae:9d:30:
db:0e:6f:10:c8:f7:56:fe:0a:78:48:5a:58:d3:5e:
6b:40:e3:15:67:25:6f:8a:7c:09:d7:6e:40:b5:fe:
1f:52:82:52:23:7e:4c:97:58:28:5e:fc:c2:a6:98:
de:5f:bc:26:3b:d9:98:22:7c:b3:02:be:26:53:ec:
67:8e:ce:32:8f:7b:1a:f0:72:1c:93:85:0d:95:b3:
7d:50:ca:72:0d:da:5a:44:15:e1:59:81:4f:85:47:
20:7e:48:17:34:4f:01:7f:5e:ab:4c:80:8c:d1:fa:
9c:42:98:97:ac:78:aa:bc:14:38:ef:83:2e:0d:a6:
2f:18:5e:4e:a7:42:82:87:80:91:a4:f2:fb:92:27:
5d:52:21:50:ab:5a:b2:1e:c2:d7:d0:8c:df:af:4b:
2d:28:72:ce:d6:1c:3d:77:0e:41:d9:08:e7:21:6d:
85:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:89:9C:0E:35:94:19:F2:6C:40:50:01:05:A0:55:CC:A2:42:23:CF
X509v3 Authority Key Identifier:
keyid:0F:5A:42:3D:DC:97:DD:30:DE:C8:B8:67:3C:24:96:8E:27:37:26:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1pCPdyX3TDeyLhnPCSWjic3JnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:8f:d1:02:17:f9:0e:ba:a1:cb:21:bb:cd:b8:82:87:8a:b9:
3b:06:6f:b2:74:39:71:29:1d:96:cc:fe:76:1e:46:8f:d4:19:
c8:58:e4:fd:de:49:78:4f:25:fb:bd:d4:66:88:fc:44:7e:2b:
2a:f4:28:be:13:8a:8d:a2:53:fd:70:55:9f:80:83:e0:ee:07:
fd:88:10:59:5a:80:e9:71:1a:5c:aa:b5:9b:e9:ab:09:0f:aa:
a8:ca:f1:a8:60:fc:3c:a6:27:bb:35:80:d0:d9:d9:fd:2e:5e:
be:dd:f1:db:a9:3f:69:1f:97:83:17:bc:c7:12:f4:b8:4e:95:
71:ac:bc:f3:3a:2c:93:94:15:6c:3e:c9:94:ca:65:b9:14:e4:
bd:d2:16:38:86:38:f3:45:ca:f8:14:3f:d9:84:22:1a:a8:60:
ef:95:1e:04:d2:7e:bb:cc:2e:75:3a:b7:cf:72:a5:be:1f:7b:
a0:c6:50:67:50:a7:bc:16:d4:20:6f:a6:81:62:5c:00:f7:23:
ae:b9:02:ed:f9:39:e6:45:c0:d6:a4:73:b7:92:02:26:71:98:
b9:de:4e:20:9f:98:d0:10:8e:5a:8b:05:66:ad:6e:bd:04:e6:
d6:6d:7c:a2:a3:71:3d:0a:34:6c:60:54:d7:e1:64:ad:32:b9:
b9:eb:1c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:09:54 2026 by rpki-client