Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
File: D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft (raw, json)
Hash identifier: XOinkw/kpNV4/BifvUxdXNZmGp6THj5ztq065g4K7aY=
Subject key identifier: 16:F8:D1:B3:E0:8D:5C:29:E5:BA:31:0E:E8:16:B8:A3:09:85:52:AE
Authority key identifier: 0F:79:76:05:20:B7:C1:5C:2E:42:60:30:82:72:B8:49:F8:8E:D6:77
Certificate issuer: /CN=0f79760520b7c15c2e4260308272b849f88ed677
Certificate serial: 019FA8629028F8D4653DEB29F9977192F5A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
Manifest number: 19D1
Signing time: Tue 28 Jul 2026 11:00:59 +0000
Manifest this update: Tue 28 Jul 2026 11:00:59 +0000
Manifest next update: Wed 29 Jul 2026 11:00:59 +0000
Files and hashes: 1: D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl (hash: fSnuNKbVVk+bYpMBWbOSbQgeAiCHZc8RglZJNhoS5kA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:90:28:f8:d4:65:3d:eb:29:f9:97:71:92:f5:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f79760520b7c15c2e4260308272b849f88ed677
Validity
Not Before: Jul 28 11:00:59 2026 GMT
Not After : Jul 29 11:00:59 2026 GMT
Subject: CN=16f8d1b3e08d5c29e5ba310ee816b8a3098552ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b0:c4:1e:1a:09:e0:0d:ff:47:22:b7:9d:28:
82:17:68:4e:21:26:54:08:71:4c:d7:df:95:12:66:
0e:56:25:34:b9:c5:27:28:79:5b:32:23:d6:f3:4d:
c0:68:6c:4a:5e:d9:0d:a5:ee:62:4e:40:c8:db:2e:
05:6f:cc:ed:5b:09:d1:8f:9a:2b:c3:8c:38:1f:ad:
fc:cc:d0:26:87:89:67:b5:f5:75:21:7a:28:a8:11:
3d:d7:45:50:2e:ac:37:78:a1:d6:9a:c6:ff:02:d0:
2d:c1:7a:16:06:2b:38:ed:3f:63:91:71:3e:66:aa:
0d:22:84:48:81:34:db:d2:a7:3b:67:a4:89:46:06:
3f:b6:ce:20:65:a1:0e:c6:07:27:a0:34:30:5d:89:
3b:33:10:66:c0:6d:27:db:ea:3f:f3:88:e2:ab:4a:
e9:f8:10:87:e6:08:d1:c5:46:b0:60:a4:7e:4e:9d:
34:03:9f:ee:f8:d6:6f:1a:09:77:f2:37:11:69:a2:
38:b9:74:9e:14:ea:4a:3c:e7:45:09:1c:57:7b:69:
71:6d:71:b0:58:c2:dc:59:40:22:89:05:6c:09:3f:
af:4c:7c:50:45:78:65:6f:e4:4a:6f:1c:c6:50:98:
fd:18:f9:24:99:96:46:60:c7:9f:93:08:de:3f:c6:
97:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F8:D1:B3:E0:8D:5C:29:E5:BA:31:0E:E8:16:B8:A3:09:85:52:AE
X509v3 Authority Key Identifier:
keyid:0F:79:76:05:20:B7:C1:5C:2E:42:60:30:82:72:B8:49:F8:8E:D6:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:01:e3:5c:6a:e6:e8:6a:0e:d1:00:f9:e6:0f:07:43:a9:ed:
c7:48:48:a4:f0:a5:15:e9:85:23:7d:fa:0c:2b:7d:1c:38:04:
2b:2e:1c:59:97:1e:57:12:8a:15:f8:a7:d6:b3:a9:19:d2:66:
a1:d4:9d:cc:e6:6c:d2:ab:c7:a0:e8:a0:7a:37:17:fa:1c:87:
e2:e1:c0:dc:05:e6:70:80:3e:d0:7d:19:02:89:4b:12:eb:51:
3a:38:1f:55:22:5a:77:99:92:81:11:c4:a3:87:18:cb:15:5f:
ad:ff:72:81:d0:ea:42:87:a5:e2:eb:c9:98:2e:16:b8:03:aa:
f0:8b:ae:d8:36:5e:1c:95:e1:c4:3b:bf:4c:09:dd:a3:fc:db:
25:ed:e9:5c:2c:bb:75:52:3a:af:a9:ee:63:0e:ff:68:9c:c7:
24:a7:68:35:4e:5f:fe:a0:a0:79:0e:da:ef:5f:0e:f7:c8:20:
9e:65:03:03:ab:df:47:e9:61:7c:ba:0a:bb:65:89:27:ea:aa:
99:5d:be:94:df:2e:da:db:88:12:57:37:57:c2:a2:7d:11:d0:
e8:2a:46:50:78:c9:01:8d:ac:e3:ba:86:dd:0f:ca:54:91:86:
99:d9:dd:ef:a2:3f:b7:72:61:45:53:5f:24:71:3c:f0:09:b8:
cf:1f:f0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:23:20 2026 by rpki-client