Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft
File: D97nlErE2jERKV2B4p3roAwWOpY.mft (raw, json)
Hash identifier: zykwpMP8/lgQi+aXMpY1FtitE5S1oYINYrBwqCP/D90=
Subject key identifier: 19:E2:74:13:B6:60:6E:00:E6:26:F1:CB:56:0F:2D:75:B5:35:A5:FB
Authority key identifier: 0F:DE:E7:94:4A:C4:DA:31:11:29:5D:81:E2:9D:EB:A0:0C:16:3A:96
Certificate issuer: /CN=0fdee7944ac4da3111295d81e29deba00c163a96
Certificate serial: 019FA82B65F1EE1BFE498DD954AC344D8B54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft
Manifest number: 13CD
Signing time: Tue 28 Jul 2026 10:00:44 +0000
Manifest this update: Tue 28 Jul 2026 10:00:44 +0000
Manifest next update: Wed 29 Jul 2026 10:00:44 +0000
Files and hashes: 1: D97nlErE2jERKV2B4p3roAwWOpY.crl (hash: X5fzOIWl62a31JIL/+3z2RYKtiAAX1hEihhW9TRIkOY=)
2: WgNv7-eEqKwSW95Nva_O1MQX1iY.roa (hash: 9ipqetu8ePvj0pp7eCO9cwEQqK0gXGR/o2mUfaHu77U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:65:f1:ee:1b:fe:49:8d:d9:54:ac:34:4d:8b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fdee7944ac4da3111295d81e29deba00c163a96
Validity
Not Before: Jul 28 10:00:44 2026 GMT
Not After : Jul 29 10:00:44 2026 GMT
Subject: CN=19e27413b6606e00e626f1cb560f2d75b535a5fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bc:50:b2:65:bb:f5:d9:1c:0c:5d:28:59:37:
ad:2d:ef:05:28:37:86:7b:e5:56:70:97:ef:aa:29:
61:ef:32:17:40:a6:6c:e1:5f:ad:75:b4:d4:6e:2a:
d5:52:0e:ef:df:7f:0c:a8:1c:6d:2e:85:84:bb:40:
21:bb:99:c3:bb:85:df:83:85:ef:97:4e:3f:71:ea:
f9:ad:eb:17:2d:a4:63:16:a9:d9:31:ba:50:87:eb:
6d:87:e3:46:d2:84:b8:c3:fb:7b:f0:14:4a:b9:22:
bc:c5:70:08:ce:b8:53:a2:5a:21:12:0b:da:ba:b0:
05:ac:e3:90:f3:03:92:41:f8:2b:7c:1b:05:05:f4:
09:eb:72:c3:54:d3:3d:95:19:71:e5:40:f8:76:cc:
f6:54:60:7c:a3:fd:64:8c:25:59:5f:ae:d0:c5:7b:
3f:24:38:94:04:f1:5e:7e:a4:c3:8b:73:5b:c6:40:
1b:98:14:9f:0b:c1:ac:a8:03:1c:60:2b:a1:5e:36:
3e:6c:20:b7:52:92:82:39:ab:a3:39:93:c3:de:e8:
2c:7b:d5:27:84:57:d2:bd:16:63:49:b6:d1:6b:d8:
eb:ec:2f:1b:3b:aa:0f:da:bf:40:fd:63:a6:df:f5:
d8:b0:ec:29:23:85:a2:1b:fd:f5:57:82:50:37:c6:
3d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E2:74:13:B6:60:6E:00:E6:26:F1:CB:56:0F:2D:75:B5:35:A5:FB
X509v3 Authority Key Identifier:
keyid:0F:DE:E7:94:4A:C4:DA:31:11:29:5D:81:E2:9D:EB:A0:0C:16:3A:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:50:fc:77:29:af:08:fc:bf:86:80:9d:18:02:90:2c:2b:6f:
5f:02:90:70:3e:b0:c9:93:a3:d8:3d:e2:03:65:24:fd:a5:0f:
4a:7d:87:f5:83:e9:08:70:f1:8e:9e:f2:f3:44:d2:ba:30:99:
d3:62:3c:54:ab:a5:e4:b4:55:d1:9f:8f:86:22:4d:62:c5:ed:
98:01:d9:98:d9:af:dc:4c:da:e4:14:74:3d:e5:10:1b:bc:f5:
c6:90:59:0e:83:1b:6e:a8:f7:3a:e8:79:21:b2:f2:4b:a8:e8:
cf:3a:90:71:dd:07:71:1c:00:a9:1b:f7:19:2b:33:6f:94:3d:
9c:c4:3f:3c:d7:0c:eb:2f:be:d0:c6:8f:f4:fb:f3:ab:49:ff:
9b:cd:42:b3:18:dd:b9:a9:6d:9e:e6:28:7b:e7:f4:8f:fe:d7:
b2:1a:e4:bb:5c:cf:ca:03:f9:85:04:9d:90:6a:b2:72:4a:a5:
ed:81:5f:30:f0:f6:f4:37:bd:73:27:f1:14:6a:72:db:bc:4e:
70:f9:cf:d1:ac:0e:68:d8:1c:8b:0d:cd:e3:3c:36:0e:88:54:
d4:e8:dc:84:05:5d:7e:ef:25:8d:46:ab:b1:f7:be:c2:36:f1:
65:57:7b:d2:b4:de:25:10:db:32:79:c1:0a:df:d4:a6:7f:b1:
3f:97:de:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:21:15 2026 by rpki-client