Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
File: D5JWkWA5A-8kSFy0vzXigweGe4M.mft (raw, json)
Hash identifier: dMpUEbwhmkkZ1U1is1NNxWv1TIdFyLuHesF8WJSzf4s=
Subject key identifier: 09:C1:54:C2:F5:75:CF:69:DF:F8:25:E4:C0:0E:71:56:8A:5B:F6:21
Authority key identifier: 0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83
Certificate issuer: /CN=0f925691603903ef24485cb4bf35e28307867b83
Certificate serial: 019EBF239A448C160FE310C876604DC374CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
Manifest number: 0768
Signing time: Sat 13 Jun 2026 04:00:41 +0000
Manifest this update: Sat 13 Jun 2026 04:00:41 +0000
Manifest next update: Sun 14 Jun 2026 04:00:41 +0000
Files and hashes: 1: 80qBnu2XnhFRiBmZiF038oU110Q.roa (hash: LIRyJNKQ/3u7PO7ipf6wdyHbe0bKIPQwJsid3/CO5Lg=)
2: D5JWkWA5A-8kSFy0vzXigweGe4M.crl (hash: AhMwODigcN1/3piZVt6HyVsuA6cZPg00efDj6EeNcPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:9a:44:8c:16:0f:e3:10:c8:76:60:4d:c3:74:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f925691603903ef24485cb4bf35e28307867b83
Validity
Not Before: Jun 13 04:00:41 2026 GMT
Not After : Jun 14 04:00:41 2026 GMT
Subject: CN=09c154c2f575cf69dff825e4c00e71568a5bf621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:96:82:24:d7:aa:d0:f1:fc:b6:da:47:14:bb:
29:cd:ec:a9:56:24:7c:19:53:ac:52:00:5f:99:85:
fa:37:7e:21:d8:5f:13:cd:6d:9e:66:fd:51:02:d0:
97:e0:07:7c:38:c1:18:54:f2:c8:ac:76:82:fa:eb:
bc:14:c8:c7:3f:8b:05:84:41:4a:5c:38:9e:c2:c4:
f9:3b:2c:da:36:2c:d3:6c:2d:09:68:03:19:23:4a:
b5:be:a9:a7:94:57:fe:bc:d7:9c:27:f1:e8:51:48:
64:d7:ff:f6:2f:55:3b:14:86:44:7b:2d:e8:2b:3b:
d7:6f:15:16:0d:8c:48:52:bc:ef:b6:1a:0b:f1:9f:
73:62:db:99:8b:ce:ff:d7:15:81:f1:39:cf:fc:3c:
27:56:01:8b:0a:32:80:28:cd:87:ca:d3:ee:1c:8a:
da:0e:98:3c:a7:69:39:92:de:6c:5e:30:8d:cb:ab:
47:31:21:ee:04:f8:c4:50:db:3e:2f:5e:38:01:6e:
7f:cf:c3:76:74:fc:13:47:98:df:62:ab:c2:c3:d3:
37:42:c0:fa:a8:75:a2:82:6d:68:30:e5:64:f2:79:
02:59:d6:82:3f:3b:1c:0f:bc:c8:d1:c5:cf:bb:e3:
e2:39:c8:b8:f3:53:3c:7f:e5:f2:3a:56:15:12:94:
fb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C1:54:C2:F5:75:CF:69:DF:F8:25:E4:C0:0E:71:56:8A:5B:F6:21
X509v3 Authority Key Identifier:
keyid:0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:e9:9a:55:00:3f:50:6c:54:a2:91:6a:37:50:d1:c9:3a:20:
33:36:fb:87:99:5d:8f:f6:90:d0:78:45:98:a0:46:f5:18:94:
3c:22:e1:60:2e:2f:d3:9a:1a:4f:23:49:3c:a5:7b:e4:dd:82:
ba:f0:11:ef:a8:93:23:d9:ca:66:49:b1:f4:43:ad:85:18:66:
7e:33:8a:3b:f7:03:64:69:eb:e0:1d:b7:ee:8e:00:d0:a9:e9:
dd:15:5a:cf:08:a3:46:55:14:0d:41:79:44:1f:ff:4c:22:cd:
01:14:bf:74:78:8b:d6:d6:66:df:da:53:9d:7b:a5:44:8d:1f:
23:33:67:54:76:e9:b7:a2:c8:8a:40:76:d0:c6:7e:82:04:e9:
24:d7:bd:ad:4e:76:b1:f1:64:42:60:2d:8a:4b:57:67:3a:a9:
f1:67:72:8c:44:01:2e:fe:15:9d:f5:82:3f:00:d2:e9:aa:cd:
85:a9:11:3e:f7:e9:cb:55:aa:b9:59:d0:6b:64:bf:85:e6:26:
10:ca:9b:bc:94:28:5f:ac:10:fd:3a:bd:a3:00:7b:0b:88:65:
ba:22:99:49:83:bf:0c:b1:e0:48:87:2c:f9:44:9e:e1:63:79:
1c:0b:31:0a:75:02:70:db:fe:ba:65:64:e3:78:3e:08:55:ce:
0e:9d:f6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:19:54 2026 by rpki-client