Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
File: DtjJoWGXLWi0RTPg4x9R5NzlunU.mft (raw, json)
Hash identifier: EQX1BwQP37CKW7P1NuFQ8L0sHwN7E8mYQsHrcGTpkJI=
Subject key identifier: AE:4E:97:78:4D:C7:E2:97:B5:6D:F6:3F:DA:A0:C6:FA:DE:0C:D7:0D
Authority key identifier: 0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75
Certificate issuer: /CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
Certificate serial: 019FAA1A2E2C17CC190F1780348C9DA3047F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
Manifest number: 19CE
Signing time: Tue 28 Jul 2026 19:01:10 +0000
Manifest this update: Tue 28 Jul 2026 19:01:10 +0000
Manifest next update: Wed 29 Jul 2026 19:01:10 +0000
Files and hashes: 1: DtjJoWGXLWi0RTPg4x9R5NzlunU.crl (hash: 1GfcDPZUfCKAs5Xf3UMuf1TMGq3esszqK10Op1MRG80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:2e:2c:17:cc:19:0f:17:80:34:8c:9d:a3:04:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
Validity
Not Before: Jul 28 19:01:10 2026 GMT
Not After : Jul 29 19:01:10 2026 GMT
Subject: CN=ae4e97784dc7e297b56df63fdaa0c6fade0cd70d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:df:81:99:6e:ad:63:39:c2:76:d1:eb:9a:fb:
61:d6:08:21:b7:8b:a8:53:dc:0c:b4:4f:f9:22:51:
3d:49:8b:c9:04:cc:6e:4f:3a:a2:ec:2f:53:60:29:
79:4e:21:80:1a:fd:b3:c1:35:02:6b:4a:25:e3:4e:
b5:63:02:44:c4:bd:df:41:59:52:fe:65:2b:4f:7d:
2f:6d:d1:25:d1:33:8d:b4:26:ae:b6:cd:e1:e9:eb:
4d:41:66:df:f8:4d:1d:58:ed:01:9d:2a:ce:a5:87:
20:de:db:ca:ac:ed:f6:62:d2:ae:b8:b6:86:4a:dc:
63:08:a4:ad:38:38:17:c8:dd:6a:bd:7e:c3:e0:f2:
d3:57:6e:c9:c6:9b:0f:c0:33:2d:0e:ab:b2:b0:b6:
0e:ef:90:6f:be:04:e5:0f:10:f7:c1:49:d3:8b:29:
fb:c8:9e:8d:37:6c:3d:0c:e3:03:5b:58:32:79:a2:
0f:5e:12:94:7d:fe:b5:2f:0b:9e:0c:aa:8a:b1:c5:
fb:37:c0:e7:a7:52:9b:45:51:d8:09:4a:87:04:a5:
48:3e:bf:06:81:2e:db:7e:1e:c2:16:1e:2e:a1:7b:
58:36:b5:99:0e:43:40:64:8b:3a:2a:54:14:db:7a:
d4:e7:44:ba:ec:58:5d:60:f1:dc:73:45:6f:1c:5d:
c7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:4E:97:78:4D:C7:E2:97:B5:6D:F6:3F:DA:A0:C6:FA:DE:0C:D7:0D
X509v3 Authority Key Identifier:
keyid:0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:bd:a9:7b:71:c9:4b:2b:96:07:6a:0f:ad:3c:64:04:7e:c3:
34:ca:1d:4c:cf:14:70:89:b7:59:ac:75:4a:38:fa:7c:1c:eb:
50:60:1d:d1:f3:45:51:ba:6d:ff:b5:88:67:b8:c8:e5:19:57:
83:73:38:22:4d:e2:ce:d7:7c:97:ed:46:17:e5:2b:ac:45:41:
8d:0f:86:b8:be:90:01:64:7c:6b:f5:66:9d:06:f7:b7:a3:d7:
fc:5c:8e:e1:6c:45:bf:68:4e:e7:2f:d6:1e:e8:d3:c2:f8:00:
dc:e6:5e:37:0d:68:f1:39:6a:57:21:ac:7f:f0:32:47:14:5a:
d5:b4:f4:1e:c6:33:57:0a:f4:8f:fb:ca:e3:7e:c1:af:39:b8:
2a:1a:4d:4f:21:30:8b:fa:b2:ce:bd:3b:86:7c:1e:85:ff:1d:
80:87:11:da:8c:c8:58:66:59:b1:21:18:27:42:05:79:80:61:
df:5a:c1:2e:45:fa:ec:0b:b3:2b:2b:2c:31:36:b8:94:21:7a:
69:4e:51:2b:3d:5a:ed:dd:29:77:3e:6a:8e:36:29:95:33:55:
5b:c6:cd:1f:f6:b3:84:da:18:c8:fb:60:35:e0:94:65:71:6e:
37:e3:21:12:a4:2b:20:b2:1c:eb:a0:83:0c:1d:05:77:c5:a3:
81:d2:54:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:18:01 2026 by rpki-client