Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
File: D6vrbvgg09UvBTciM8VB7ksU82E.mft (raw, json)
Hash identifier: 86QKtkIij9+oUFiPSoQ2JM0342KtPXW0l0ZuEzFBPEM=
Subject key identifier: 87:23:71:B9:8F:58:08:1B:D7:DB:DC:CE:85:2B:49:55:29:ED:0B:D7
Authority key identifier: 0F:AB:EB:6E:F8:20:D3:D5:2F:05:37:22:33:C5:41:EE:4B:14:F3:61
Certificate issuer: /CN=0fabeb6ef820d3d52f05372233c541ee4b14f361
Certificate serial: 019FA9E29BB747318DAAECAD723934D9DDA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 18:00:28 +0000
Manifest this update: Tue 28 Jul 2026 18:00:28 +0000
Manifest next update: Wed 29 Jul 2026 18:00:28 +0000
Files and hashes: 1: D6vrbvgg09UvBTciM8VB7ksU82E.crl (hash: 32PeLp1+6VO5BZrXlblTUhHCTOlhpQ6GaIZJHglVRh8=)
2: VS5UOf4Oqufmk1nDLv2qDmY9aAk.roa (hash: yxhJeQxv5OL2X3W33orxeTr4UI2HV6MbDSVgY4g3PdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:9b:b7:47:31:8d:aa:ec:ad:72:39:34:d9:dd:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fabeb6ef820d3d52f05372233c541ee4b14f361
Validity
Not Before: Jul 28 18:00:28 2026 GMT
Not After : Jul 29 18:00:28 2026 GMT
Subject: CN=872371b98f58081bd7dbdcce852b495529ed0bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:60:d0:1e:d2:be:55:6d:d5:59:13:6d:be:df:
29:e0:a7:83:21:1e:5a:04:eb:58:53:b5:a9:cd:9b:
6c:14:a8:78:b3:69:e6:56:37:b9:cb:f7:ac:0d:f5:
02:be:67:77:25:2e:3b:8d:cd:f4:65:7f:94:0b:bc:
2a:ba:ec:c3:27:4d:0f:dd:67:dd:dd:72:95:31:a7:
b1:42:ef:1b:d3:44:c9:cb:81:aa:5c:1f:73:ee:ea:
75:91:35:61:07:c8:67:b8:8c:9e:a3:2d:67:a5:8d:
2d:18:be:1c:0a:c6:98:0e:68:81:1b:1c:45:a9:95:
8f:e4:34:4e:f2:90:66:88:9a:eb:28:c8:8e:34:de:
85:9f:ea:44:04:89:b6:e6:a9:23:a3:0c:e7:9d:9a:
db:7a:41:81:e2:ca:ab:cc:87:d0:27:8a:12:af:63:
b2:c5:a9:e2:b9:39:48:d1:67:d4:c5:8d:09:22:18:
8f:31:21:89:68:a0:d3:6f:a5:58:23:2b:99:d5:c9:
a7:fc:e9:90:91:d0:29:14:c7:f9:9d:cf:cc:e0:5b:
e4:e7:42:43:ea:4f:ff:99:83:93:b6:72:e2:85:7c:
6e:5e:a4:3e:fd:36:bf:ec:63:45:35:0c:80:7a:b1:
7a:04:22:e8:29:77:9f:a8:00:89:94:a7:05:0d:0c:
c4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:23:71:B9:8F:58:08:1B:D7:DB:DC:CE:85:2B:49:55:29:ED:0B:D7
X509v3 Authority Key Identifier:
keyid:0F:AB:EB:6E:F8:20:D3:D5:2F:05:37:22:33:C5:41:EE:4B:14:F3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:8f:d9:ce:ef:d6:3a:c0:84:ef:c3:2d:4b:40:84:d3:74:39:
d3:ed:40:cc:60:91:64:21:32:ac:c4:e8:d6:85:0f:47:c5:92:
d0:92:4b:b9:6e:22:02:82:e4:13:03:04:9f:54:df:8e:b7:6a:
ab:21:c2:18:49:56:73:e3:2a:b7:c9:eb:b3:7f:db:71:79:24:
bb:0f:4a:56:a9:9f:23:d3:91:b5:03:f8:71:25:0e:73:70:fd:
28:fa:b9:66:3a:7c:e0:34:b6:d8:87:58:e1:23:30:f8:40:6b:
66:c6:b4:21:43:46:98:a7:e7:ff:13:c5:7f:94:9d:3a:9e:e5:
04:3c:bb:54:a0:67:4c:ac:3d:81:3c:fb:10:b4:1c:df:a7:2c:
5f:21:a0:af:7a:dc:af:6b:0e:fc:c5:66:60:b5:ab:42:a9:ad:
a8:95:4a:b4:b8:f1:b5:55:42:25:b8:c2:e1:ed:85:95:47:f0:
e0:24:71:ce:86:0a:f5:2e:96:64:c8:a9:39:b2:24:6a:85:36:
ff:b1:4f:87:34:8f:18:8e:87:6b:86:c2:54:bc:65:d1:01:76:
24:fd:05:03:53:17:ef:03:f0:10:ed:b4:3d:69:f5:06:e9:0e:
22:4c:1b:03:ac:81:aa:47:a4:13:61:b4:64:4f:8e:4a:68:a9:
dd:fa:34:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:09:13 2026 by rpki-client