Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
File: D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft (raw, json)
Hash identifier: CYfFgx80kCD0eesNiWPlZtsQ8LTQqSvpxWDWyHuWNXc=
Subject key identifier: 43:39:BA:7C:B8:FC:B7:15:61:DF:67:6F:82:F3:7A:03:46:39:84:61
Authority key identifier: 0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1
Certificate issuer: /CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
Certificate serial: 019FAA1A9118A19ACF1B11411F03811CB2EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
Manifest number: 1069
Signing time: Tue 28 Jul 2026 19:01:35 +0000
Manifest this update: Tue 28 Jul 2026 19:01:35 +0000
Manifest next update: Wed 29 Jul 2026 19:01:35 +0000
Files and hashes: 1: D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl (hash: 19/R1APDPoVe3c+ddF8mH6WWWu3FA/zoOUSBVov+PsE=)
2: jK9vJkC-9INkg3kH606wmZpM3gY.roa (hash: pPtcnLjluAlTQa5sDa1ndB+L+idIHW8vl3l2EMrfHcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:91:18:a1:9a:cf:1b:11:41:1f:03:81:1c:b2:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
Validity
Not Before: Jul 28 19:01:35 2026 GMT
Not After : Jul 29 19:01:35 2026 GMT
Subject: CN=4339ba7cb8fcb71561df676f82f37a0346398461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:42:a5:2e:4c:7b:bd:0e:c7:db:d9:a1:38:86:
2f:07:a0:11:4e:81:b9:4a:72:4b:7a:a9:a3:a0:80:
19:db:d2:17:bb:cd:95:1e:fc:6d:07:0f:b6:f3:e6:
70:3e:0d:6c:32:72:ca:ae:c4:df:22:d0:9a:33:e4:
33:e1:e7:bd:09:a9:7a:7b:11:71:4c:6f:02:7f:b2:
e2:dd:2a:5c:d7:92:b5:be:17:42:f9:b9:16:85:8e:
00:c8:c4:ff:56:b9:fd:c6:24:17:d8:75:d4:01:ce:
22:34:23:62:9a:64:d0:b6:bf:56:75:92:19:8c:8d:
76:8d:9c:66:c1:be:06:8c:d1:9a:ef:ea:7c:0c:58:
6d:1f:7c:fc:0e:af:f2:a7:4c:a2:ef:b7:4a:88:e5:
4d:6f:75:fc:6b:4e:f7:c2:07:e6:c8:21:26:1d:fe:
d3:76:6f:8f:b7:38:95:16:aa:c9:03:c2:be:84:aa:
53:e6:10:5e:f8:e3:6a:e2:31:f4:ba:15:9e:20:be:
f4:7f:b6:53:95:02:ba:2d:76:1c:37:a2:6f:91:91:
1d:a7:f7:a6:5d:7d:67:38:75:97:3e:e3:0c:5c:68:
c3:f7:d5:90:c3:8b:2b:4c:17:29:9f:61:6a:ae:c5:
a5:4f:a1:83:02:c0:15:e2:be:91:fb:ba:d2:6f:8c:
16:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:39:BA:7C:B8:FC:B7:15:61:DF:67:6F:82:F3:7A:03:46:39:84:61
X509v3 Authority Key Identifier:
keyid:0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d9:42:5a:c0:09:79:e2:0d:ee:36:1b:c7:0f:cf:40:c3:65:
18:ed:27:d5:46:ec:f9:9d:a0:d5:ef:5c:fb:64:8c:82:ad:c3:
2e:14:52:41:5b:d1:8b:dc:e7:0c:ee:4f:f0:1f:ad:81:0b:ac:
c1:45:8b:2a:7c:b1:0b:5a:b2:ff:b0:c5:29:b6:4c:ea:76:28:
34:c4:29:2f:2a:04:c1:2b:c8:26:32:f1:2d:ca:d6:b1:64:cd:
e5:1e:ea:39:cf:9d:36:13:7f:70:91:47:23:46:a1:3c:d1:ec:
3c:94:e6:d9:29:6e:64:89:26:33:b3:96:4a:6b:0d:1b:02:a7:
32:f8:96:f1:69:76:cb:e6:f8:a8:e7:82:92:7c:1e:26:4c:03:
b7:42:15:fa:ed:4f:42:ed:44:9d:7c:38:71:10:aa:1a:bb:fd:
4d:c8:54:7d:db:82:eb:ed:3c:6b:7e:3a:d7:cc:b4:1c:db:4c:
4f:b6:67:0c:bf:82:51:f5:33:5e:ea:1f:1e:10:2c:ae:91:02:
69:da:6c:cd:80:63:85:5d:66:e5:e7:67:4c:33:49:9a:fb:c6:
3e:c9:74:d2:22:ab:85:45:f5:0a:43:57:14:6c:ef:b5:9e:a4:
b7:c5:af:ef:bb:57:e9:eb:fe:b8:7a:7d:ef:1e:ce:ed:17:40:
67:f7:4f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:15:45 2026 by rpki-client