Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
File: De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft (raw, json)
Hash identifier: ea47V63ZCMHdBoauD0YCWMW2no9LjVINAAPagurd9wg=
Subject key identifier: 7D:58:57:85:F4:63:5C:6B:E5:59:22:54:FC:AC:D0:85:64:A9:CB:F5
Authority key identifier: 0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4
Certificate issuer: /CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4
Certificate serial: 019FAC08CD4E4F61E31BEB128EC2A55FA77A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
Manifest number: 0DC2
Signing time: Wed 29 Jul 2026 04:01:25 +0000
Manifest this update: Wed 29 Jul 2026 04:01:25 +0000
Manifest next update: Thu 30 Jul 2026 04:01:25 +0000
Files and hashes: 1: De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl (hash: GGzpIygaR00r7pHomxyKRVHbz5zKRfY/4MdxFWwpUmo=)
2: SbbT_vemLYhSpPxloUrfpgEATIA.roa (hash: TxqN78AgB7Nz/Wz8KEGfJojT7Yd8MRSlYTLQkCNBIXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:cd:4e:4f:61:e3:1b:eb:12:8e:c2:a5:5f:a7:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4
Validity
Not Before: Jul 29 04:01:25 2026 GMT
Not After : Jul 30 04:01:25 2026 GMT
Subject: CN=7d585785f4635c6be5592254fcacd08564a9cbf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fc:b4:44:b5:73:07:82:c8:b3:b4:11:95:5d:
5b:14:14:d9:cc:36:3e:a0:7f:42:e0:96:cb:3a:08:
e2:ad:29:4e:67:1e:14:2e:b2:44:67:be:ae:9d:32:
e1:02:85:18:35:aa:bf:27:c0:5d:3a:5e:d1:69:84:
95:e2:ca:82:fb:a0:12:dd:61:9c:8a:03:b8:9b:09:
52:44:4d:cd:93:41:e3:7e:06:c8:63:e6:3d:12:ee:
b9:fc:6e:44:84:98:79:57:04:a9:6e:38:47:00:75:
46:cf:f8:e8:05:e2:af:ec:51:b2:e2:6b:71:aa:72:
30:95:b7:20:de:a9:ad:5f:d6:81:1f:5d:7e:99:9f:
2e:27:4e:66:bc:1a:e0:75:32:88:aa:66:28:3c:84:
53:4c:65:14:eb:3e:47:f5:9f:f8:1f:d0:eb:ff:20:
be:ae:73:00:ec:59:78:47:6b:b7:7e:bb:cd:a2:b7:
56:b5:c4:f8:bb:31:77:68:f8:a8:fa:22:0c:1b:d0:
91:ca:c2:96:b9:91:f8:82:db:cc:0d:a4:d1:a1:a9:
20:9a:0b:23:96:86:d2:d5:aa:bb:7b:ff:99:85:73:
40:f8:e2:5e:ac:17:69:a3:16:04:f9:14:d6:ad:9f:
47:86:1d:59:e1:0e:d4:df:0b:04:9d:07:60:1d:29:
b0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:58:57:85:F4:63:5C:6B:E5:59:22:54:FC:AC:D0:85:64:A9:CB:F5
X509v3 Authority Key Identifier:
keyid:0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:03:ee:5a:48:32:78:0e:7f:fb:12:52:53:74:98:af:59:24:
ad:34:1b:aa:14:2a:2b:9e:08:6f:2b:9c:8c:05:1a:c7:56:74:
db:3c:0b:a6:cf:83:06:2e:be:56:f1:a9:fc:39:28:fc:43:85:
44:a8:7d:5b:ab:64:70:31:c0:f1:57:94:ed:b4:e7:27:e1:40:
0d:97:47:e8:99:b0:ee:2a:b2:06:3f:28:bd:e7:30:35:87:4e:
2f:5c:4f:86:0f:3c:32:ac:52:70:0f:f7:dc:a3:ce:e7:53:da:
28:a6:93:21:91:95:27:88:84:97:df:d5:c7:87:92:9f:54:e3:
a2:2c:53:dc:60:d5:86:58:5b:43:3b:77:b2:3e:50:9d:51:f4:
c3:43:5b:bd:e8:a1:a8:d3:99:69:a0:67:93:be:90:7c:56:fa:
3a:ff:de:b8:d0:8d:af:3c:09:c6:ca:42:b9:08:a7:03:ab:89:
ed:25:10:a4:74:aa:11:0a:ef:41:bd:6f:f0:7a:90:f1:27:70:
d0:ad:e1:c0:d1:99:97:3c:1e:b6:77:fb:81:12:8d:bf:5c:94:
2c:1d:d7:84:47:f0:88:ee:c2:3c:fd:fb:06:ce:33:e3:1d:f4:
74:06:f4:e0:63:ee:32:4a:28:f5:c5:c9:17:c9:cb:76:8f:13:
f9:f8:55:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:21:49 2026 by rpki-client