Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
File: D81k6vJZSCLz-aLrzRnbm3-nDZo.mft (raw, json)
Hash identifier: UAAzkhEdvFHAQ8V53UsUBlM7bEMlDUbWzNzTvsfEOYQ=
Subject key identifier: 2F:4A:7F:C4:F7:4C:44:5A:FD:19:8D:99:07:58:E9:C3:AB:2B:02:3F
Authority key identifier: 0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A
Certificate issuer: /CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a
Certificate serial: 019FADF6A6C648AC43C30F8B2CF00030EE64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
Manifest number: 05DE
Signing time: Wed 29 Jul 2026 13:00:50 +0000
Manifest this update: Wed 29 Jul 2026 13:00:50 +0000
Manifest next update: Thu 30 Jul 2026 13:00:50 +0000
Files and hashes: 1: 1HQ2oYdrkzbGmcEGuOKgDpKVA-A.roa (hash: +R86VJ/9zKCCo9on3dPLqNmwVLLy9nPRqGdyKqWuego=)
2: D81k6vJZSCLz-aLrzRnbm3-nDZo.crl (hash: Wx2fc+gTJmeY0S/UK6LFbzYxrhzYZRkJGRy4KpBsGgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:f6:a6:c6:48:ac:43:c3:0f:8b:2c:f0:00:30:ee:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a
Validity
Not Before: Jul 29 13:00:50 2026 GMT
Not After : Jul 30 13:00:50 2026 GMT
Subject: CN=2f4a7fc4f74c445afd198d990758e9c3ab2b023f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:39:53:0d:89:94:48:68:b1:62:66:95:ec:30:
18:11:10:8c:1b:7d:0b:06:a4:ef:85:e2:03:bc:3c:
d4:93:e4:ab:df:7a:97:71:38:99:27:9d:33:76:7f:
fa:36:a2:13:7e:39:59:a6:8c:c7:3e:f3:ca:da:f4:
ca:a0:8b:ff:94:99:7f:f6:0d:92:74:1b:ee:f2:9c:
6e:d2:3d:2a:e2:1d:44:4f:21:35:d5:9d:c7:3c:00:
d2:88:1b:0a:6f:e5:af:ac:a8:01:03:59:fa:e7:75:
34:e3:cf:6f:46:64:e0:10:a2:b5:6f:ad:ae:fe:e6:
02:e4:56:15:67:f7:dc:5d:83:48:24:d8:ed:00:3a:
19:48:36:11:5a:98:4a:95:b2:37:46:f7:9a:0c:7d:
48:c5:5a:f1:34:e1:eb:ce:36:45:ae:74:41:c1:2f:
d5:dc:a9:b7:7f:a6:4d:9f:72:f6:47:2f:f2:72:58:
be:35:ba:b3:00:1a:e4:af:c4:b4:f8:3f:54:c3:6d:
f0:e4:ff:3f:0a:3c:8f:9d:77:dd:83:f9:a5:5e:80:
29:02:eb:16:ed:59:1a:bd:5c:d7:22:53:b6:47:3a:
ab:e3:c1:8b:54:60:dd:e1:0c:c9:63:07:5a:af:9d:
6e:31:8c:f4:07:95:0b:3f:86:5c:a6:ca:d1:bc:fd:
13:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4A:7F:C4:F7:4C:44:5A:FD:19:8D:99:07:58:E9:C3:AB:2B:02:3F
X509v3 Authority Key Identifier:
keyid:0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:bb:72:00:11:ec:ab:7f:62:fc:aa:54:e8:d0:b3:52:1c:e7:
09:41:68:66:f6:71:c2:cc:a6:63:d2:b3:d6:76:3a:05:93:15:
7e:7f:c0:d7:7e:01:64:5b:ee:fe:22:5d:7b:67:17:08:6f:db:
da:d6:6f:72:f2:13:50:c0:d0:b8:4c:72:9d:ad:f1:da:e3:55:
09:50:48:2c:09:4e:84:58:7b:16:8e:dd:4a:b8:36:2a:c4:6e:
1e:6a:f4:3a:1e:4f:32:42:4c:34:cf:7d:3f:2a:ae:95:9f:cf:
73:96:c9:0d:9c:2c:ef:e4:3a:96:4d:f0:3d:7f:79:74:e6:71:
38:75:f2:2c:97:10:c0:c5:42:e7:73:95:70:4e:52:a1:48:4c:
b9:eb:13:9e:56:50:e0:9e:64:78:6a:56:6a:86:75:a3:af:56:
66:f5:01:6e:f9:f2:4a:68:61:32:4c:32:0a:0b:15:de:ea:ea:
32:bf:ce:c8:85:1d:8b:e6:f8:fb:a2:b1:be:81:a9:e1:2f:93:
3e:6c:9d:2f:cc:25:b2:46:dd:da:b2:28:65:df:aa:dd:ed:ce:
ef:02:02:65:1b:28:38:6b:26:ba:46:ad:62:b8:dd:e4:2b:33:
bf:71:60:61:95:d6:b3:41:22:80:03:92:1b:f0:6b:90:71:25:
cf:63:71:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:01:52 2026 by rpki-client