Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9773dc-d8e8-480d-98f2-c00cbc1492bf/1/0phnd6RO0JQPKaeVx19Fpi9EuzM.mft
File: 0phnd6RO0JQPKaeVx19Fpi9EuzM.mft (raw, json)
Hash identifier: bqIhXO2vo6jSwXbbtZ9SPjzGnSKa6aPcD/i0uoSpSGA=
Subject key identifier: A5:34:44:CE:7F:23:22:E2:0F:E1:CC:33:81:6E:1A:B5:5C:AD:74:6F
Authority key identifier: D2:98:67:77:A4:4E:D0:94:0F:29:A7:95:C7:5F:45:A6:2F:44:BB:33
Certificate issuer: /CN=d2986777a44ed0940f29a795c75f45a62f44bb33
Certificate serial: 019FA82B60AF93C6AEA46D58EA5E192F9C61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0phnd6RO0JQPKaeVx19Fpi9EuzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9773dc-d8e8-480d-98f2-c00cbc1492bf/1/0phnd6RO0JQPKaeVx19Fpi9EuzM.mft
Manifest number: 09BC
Signing time: Tue 28 Jul 2026 10:00:42 +0000
Manifest this update: Tue 28 Jul 2026 10:00:42 +0000
Manifest next update: Wed 29 Jul 2026 10:00:42 +0000
Files and hashes: 1: 0phnd6RO0JQPKaeVx19Fpi9EuzM.crl (hash: ebO6pgrK0ji+2XY0r7e9Tlhzj2xUwXfaUqDycY+6m0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/9773dc-d8e8-480d-98f2-c00cbc1492bf/1/0phnd6RO0JQPKaeVx19Fpi9EuzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/9773dc-d8e8-480d-98f2-c00cbc1492bf/1/0phnd6RO0JQPKaeVx19Fpi9EuzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0phnd6RO0JQPKaeVx19Fpi9EuzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:60:af:93:c6:ae:a4:6d:58:ea:5e:19:2f:9c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2986777a44ed0940f29a795c75f45a62f44bb33
Validity
Not Before: Jul 28 10:00:42 2026 GMT
Not After : Jul 29 10:00:42 2026 GMT
Subject: CN=a53444ce7f2322e20fe1cc33816e1ab55cad746f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:94:b6:71:da:42:e9:34:97:4c:14:3a:fc:c3:
26:3c:60:b7:2c:34:30:2c:a5:2a:9f:ff:99:5b:d7:
62:82:58:ff:86:8d:14:f0:de:54:74:c7:76:84:61:
16:6d:43:ca:2c:60:12:fa:60:10:e0:ca:ee:8b:04:
d7:94:76:fb:57:91:c8:78:13:26:56:67:d9:7a:b7:
a3:7a:69:23:a2:0f:a4:80:45:78:52:68:2c:0f:8e:
ba:24:e8:b8:72:b8:31:4e:a6:c8:d1:e5:c4:ce:36:
14:5f:91:6a:1b:a1:65:82:dc:1d:e4:43:36:cb:b9:
28:4a:26:84:f9:79:0b:bc:9e:a2:ad:b1:e6:55:0e:
94:4a:8b:cd:07:83:27:7a:17:f0:a2:e4:09:b7:37:
5d:82:6c:a3:7e:e6:af:d1:c7:92:dc:ff:45:1b:a2:
b7:67:c0:b6:1f:0f:98:fe:a5:a3:ca:b7:88:c5:e9:
7e:56:d5:9a:59:58:71:f1:01:35:ab:96:e7:5e:b5:
62:16:31:e0:7a:e2:69:ca:67:ee:8a:59:88:fa:94:
3b:fa:3c:92:7f:bc:3f:35:8a:04:b3:82:ed:e7:19:
ba:8c:fd:b7:08:b8:4c:a6:72:49:0f:36:7d:95:77:
19:67:cd:0c:83:93:e1:f8:5d:32:7a:26:6e:e4:1f:
53:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:34:44:CE:7F:23:22:E2:0F:E1:CC:33:81:6E:1A:B5:5C:AD:74:6F
X509v3 Authority Key Identifier:
keyid:D2:98:67:77:A4:4E:D0:94:0F:29:A7:95:C7:5F:45:A6:2F:44:BB:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0phnd6RO0JQPKaeVx19Fpi9EuzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9773dc-d8e8-480d-98f2-c00cbc1492bf/1/0phnd6RO0JQPKaeVx19Fpi9EuzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9773dc-d8e8-480d-98f2-c00cbc1492bf/1/0phnd6RO0JQPKaeVx19Fpi9EuzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a7:f5:66:11:78:5e:4c:35:4a:8e:5e:7d:20:b6:ee:d6:3a:
c5:2d:2e:f0:c1:6b:0e:85:b8:b9:48:8a:6b:00:3a:27:c3:ec:
03:08:ae:3f:22:8d:3c:e5:8e:a0:8e:27:4d:11:d6:c0:4f:bb:
8b:8a:6a:26:ee:57:35:50:bc:04:73:8c:45:e0:e1:42:41:5f:
94:75:db:f2:3f:da:db:c3:8e:10:a8:a5:d7:75:a8:8c:e4:fd:
04:f5:d7:d7:8d:c1:5d:19:87:7f:c0:88:3d:11:cf:74:8a:b1:
8e:fa:72:3f:0b:39:76:b5:97:2f:ed:16:fb:d0:24:2f:a6:b7:
04:0b:77:fd:ef:5d:1d:82:97:22:e3:af:11:e3:d7:17:37:33:
31:78:13:9d:b6:82:9c:dd:50:21:9b:46:aa:3a:52:4e:b8:eb:
45:4f:b4:a6:3e:7a:3d:55:7d:75:21:0a:98:ac:13:ca:fd:92:
d0:30:15:8c:ee:64:58:ed:70:af:e9:c3:27:d6:5e:0b:dd:71:
04:65:80:93:34:47:8c:42:1a:e6:a5:a4:0c:f2:0a:c2:2c:b0:
4b:6f:39:c6:fb:44:6e:68:c9:0f:f0:d3:2e:6a:18:ad:01:40:
04:b4:08:a0:7d:e6:54:ea:4b:0f:f6:ae:bb:3e:43:01:83:38:
48:05:73:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:13:30 2026 by rpki-client