Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
File: D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft (raw, json)
Hash identifier: kr7Z8juzcExGMPiM/qGMb86+lo5nBoOo7PMq5P3Dpwk=
Subject key identifier: BC:FD:16:2A:86:96:D5:08:1B:A1:E2:95:0A:3C:6A:12:D0:DC:F9:89
Authority key identifier: 0F:79:76:05:20:B7:C1:5C:2E:42:60:30:82:72:B8:49:F8:8E:D6:77
Certificate issuer: /CN=0f79760520b7c15c2e4260308272b849f88ed677
Certificate serial: 019EBEB60AB0395C47FBFB6B92582B8A210D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
Manifest number: 1958
Signing time: Sat 13 Jun 2026 02:01:01 +0000
Manifest this update: Sat 13 Jun 2026 02:01:01 +0000
Manifest next update: Sun 14 Jun 2026 02:01:01 +0000
Files and hashes: 1: D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl (hash: JIWkv09k6QTqv9q82x4/BJiZHzAf8Db+RY2EHJ66+m8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:b6:0a:b0:39:5c:47:fb:fb:6b:92:58:2b:8a:21:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f79760520b7c15c2e4260308272b849f88ed677
Validity
Not Before: Jun 13 02:01:01 2026 GMT
Not After : Jun 14 02:01:01 2026 GMT
Subject: CN=bcfd162a8696d5081ba1e2950a3c6a12d0dcf989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:11:0f:90:93:f0:f9:63:08:eb:dd:8a:ac:b5:
c3:37:7d:8c:ef:aa:65:bd:08:e6:90:2c:64:56:2f:
c9:0b:ee:cb:56:84:34:95:70:41:62:80:bb:7c:de:
3e:0c:f4:bb:db:8c:4b:ca:57:f7:26:5a:05:f7:77:
2a:36:2a:38:2f:55:ed:9d:11:40:83:95:5b:2e:0f:
7a:5e:d2:bd:9b:4f:72:32:6a:eb:d4:63:02:2d:08:
c6:12:4c:02:c5:40:33:23:da:4a:82:58:50:a5:b2:
68:df:cc:75:43:7a:0b:af:8b:69:3e:6f:c7:6d:c2:
44:3b:65:7b:5d:79:e5:21:c4:1b:2a:d0:ba:09:20:
6a:3d:ed:d0:fd:58:03:c7:58:21:40:d3:03:a1:69:
f8:2d:81:0a:47:60:8b:3d:35:44:7f:a3:0d:ee:f9:
f3:52:00:8a:62:93:8e:af:61:44:3d:da:23:6d:09:
02:33:55:8b:99:7e:7c:0d:35:15:f8:72:e7:a9:3e:
ea:12:c5:57:4e:02:0a:22:fc:d5:18:39:6a:80:70:
dc:c7:c8:c6:4f:b8:87:aa:05:7d:c7:02:e8:e1:2b:
39:6a:38:23:a4:62:f2:41:2c:1e:ae:23:55:57:df:
62:b6:94:45:ef:6d:e8:2a:67:a4:9d:db:d2:66:0e:
2f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FD:16:2A:86:96:D5:08:1B:A1:E2:95:0A:3C:6A:12:D0:DC:F9:89
X509v3 Authority Key Identifier:
keyid:0F:79:76:05:20:B7:C1:5C:2E:42:60:30:82:72:B8:49:F8:8E:D6:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:20:b1:83:e5:c8:f3:b9:90:c4:28:68:81:c8:af:2c:50:88:
20:33:23:f4:eb:1c:f8:12:4b:ad:0b:62:67:3b:7f:b7:68:d3:
f0:d7:c0:8a:3e:e2:4c:0f:87:14:3e:c0:4f:e1:bf:72:27:84:
9a:55:bb:75:85:7b:fa:a1:1d:cf:7d:f8:c4:cb:00:a3:bf:8b:
b2:93:6b:12:31:3f:38:8d:e6:2c:4c:27:9b:01:e5:fc:5f:dc:
ea:5c:45:42:2a:7a:52:7f:09:41:5e:d4:b6:6b:90:b5:45:17:
89:a5:26:6d:27:0d:9e:67:5e:14:1c:d7:f9:ff:89:8e:06:dc:
18:0d:f3:50:22:c5:0e:0d:b3:52:dd:8a:8c:d7:0f:6c:df:11:
e1:c9:a8:f5:a8:43:65:f7:98:5c:52:f5:89:fd:92:3c:5c:e5:
a9:3c:81:79:1f:d4:2c:d5:e1:ee:ce:00:27:79:87:0e:1e:8f:
91:f0:7d:f8:4e:96:64:36:f8:71:61:16:a2:ea:84:63:bf:02:
e0:00:f4:33:2f:e2:8c:2a:28:c8:99:71:47:c9:9d:5c:9e:25:
e4:d6:72:23:59:96:2c:be:db:f0:21:e9:c0:d6:38:9e:ba:b3:
92:af:29:6d:31:e8:d9:3d:37:67:1c:d9:f2:18:7f:4a:cf:9b:
8e:5f:fc:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+tgqwOVxH+/trklgriiENMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNzk3NjA1MjBiN2MxNWMyZTQyNjAzMDgyNzJiODQ5Zjg4
ZWQ2NzcwHhcNMjYwNjEzMDIwMTAxWhcNMjYwNjE0MDIwMTAxWjAzMTEwLwYDVQQD
EyhiY2ZkMTYyYTg2OTZkNTA4MWJhMWUyOTUwYTNjNmExMmQwZGNmOTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxEPkJPw+WMI692KrLXDN32M76pl
vQjmkCxkVi/JC+7LVoQ0lXBBYoC7fN4+DPS724xLylf3JloF93cqNio4L1XtnRFA
g5VbLg96XtK9m09yMmrr1GMCLQjGEkwCxUAzI9pKglhQpbJo38x1Q3oLr4tpPm/H
bcJEO2V7XXnlIcQbKtC6CSBqPe3Q/VgDx1ghQNMDoWn4LYEKR2CLPTVEf6MN7vnz
UgCKYpOOr2FEPdojbQkCM1WLmX58DTUV+HLnqT7qEsVXTgIKIvzVGDlqgHDcx8jG
T7iHqgV9xwLo4Ss5ajgjpGLyQSweriNVV99itpRF723oKmekndvSZg4vpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLz9FiqGltUIG6HilQo8ahLQ3PmJMB8GA1UdIwQY
MBaAFA95dgUgt8FcLkJgMIJyuEn4jtZ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDNsMkJTQzN3Vnd1UW1Bd2duSzRTZmlPMW5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mODQ3NGItNWFlYi00MDU4LTlmNGUt
MDA0MjQyNWJhYjFhLzEvRDNsMkJTQzN3Vnd1UW1Bd2duSzRTZmlPMW5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9mODQ3NGItNWFlYi00MDU4LTlmNGUtMDA0MjQyNWJhYjFh
LzEvRDNsMkJTQzN3Vnd1UW1Bd2duSzRTZmlPMW5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuyCxg+XI
87mQxChogcivLFCIIDMj9Osc+BJLrQtiZzt/t2jT8NfAij7iTA+HFD7AT+G/cieE
mlW7dYV7+qEdz334xMsAo7+LspNrEjE/OI3mLEwnmwHl/F/c6lxFQip6Un8JQV7U
tmuQtUUXiaUmbScNnmdeFBzX+f+JjgbcGA3zUCLFDg2zUt2KjNcPbN8R4cmo9ahD
ZfeYXFL1if2SPFzlqTyBeR/ULNXh7s4AJ3mHDh6PkfB9+E6WZDb4cWEWouqEY78C
4AD0My/ijCooyJlxR8mdXJ4l5NZyI1mWLL7b8CHpwNY4nrqzkq8pbTHo2T03ZxzZ
8hh/Ss+bjl/8PQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:54:01 2026 by rpki-client