Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
File: DZHf1FaDQonB_QOg_vG1Kl79HZE.mft (raw, json)
Hash identifier: OLVk96w9kuwWaGtn5oSDlLl4AErui7vJ0LPpP5IeWaE=
Subject key identifier: C3:AE:EC:F7:1D:93:62:F0:C4:C3:62:49:66:E9:1A:E7:C1:B8:B7:D8
Authority key identifier: 0D:91:DF:D4:56:83:42:89:C1:FD:03:A0:FE:F1:B5:2A:5E:FD:1D:91
Certificate issuer: /CN=0d91dfd456834289c1fd03a0fef1b52a5efd1d91
Certificate serial: 019FAAF5923FF4DD19CDAA87DAF736BC349F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
Manifest number: 123B
Signing time: Tue 28 Jul 2026 23:00:48 +0000
Manifest this update: Tue 28 Jul 2026 23:00:48 +0000
Manifest next update: Wed 29 Jul 2026 23:00:48 +0000
Files and hashes: 1: DZHf1FaDQonB_QOg_vG1Kl79HZE.crl (hash: E3nJtX37DMduOzckAqF9ZzGJtBiCxEyYxE7u14oTlpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:92:3f:f4:dd:19:cd:aa:87:da:f7:36:bc:34:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d91dfd456834289c1fd03a0fef1b52a5efd1d91
Validity
Not Before: Jul 28 23:00:48 2026 GMT
Not After : Jul 29 23:00:48 2026 GMT
Subject: CN=c3aeecf71d9362f0c4c3624966e91ae7c1b8b7d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ab:1d:cd:2e:cf:bb:9c:3d:06:e1:52:b3:fd:
9a:d3:d0:62:d7:54:61:b5:02:18:56:a4:d2:25:32:
d6:db:1f:50:15:5b:9b:6d:1a:3f:2b:a0:7f:73:bc:
d3:8f:fb:27:43:5f:26:c2:a8:1c:f0:0d:8d:78:99:
93:99:fe:77:b0:be:92:40:11:5f:66:cc:23:46:81:
fa:60:91:04:c9:db:b0:29:41:c8:61:65:4f:9f:f2:
0d:b9:bc:07:b0:da:49:57:3d:7c:c9:5b:3a:a7:51:
e1:f0:30:92:26:35:42:57:19:a0:90:2c:5e:0e:b6:
ff:4a:98:8e:76:fe:7b:09:ca:f6:7a:b6:7c:7d:db:
5b:ab:be:70:8b:f9:e2:0d:74:6a:5f:30:a0:4b:06:
43:8c:aa:63:7d:cd:29:04:88:8a:f1:59:73:e4:9a:
89:e2:49:38:0a:03:de:86:d3:83:df:a5:b8:b7:5c:
fb:8f:60:d3:df:d2:5b:03:1a:71:19:e3:04:df:a7:
52:5d:fa:96:3b:95:0a:1e:db:26:4f:3a:4f:8e:d9:
ca:21:45:d8:ba:61:4b:5e:5f:67:d6:0c:a3:1a:99:
0d:3d:f6:03:1c:f4:24:f8:5e:28:1e:cd:78:e7:ca:
dd:c9:ca:3d:8a:b4:38:dc:0e:62:82:00:e5:a1:0f:
7f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AE:EC:F7:1D:93:62:F0:C4:C3:62:49:66:E9:1A:E7:C1:B8:B7:D8
X509v3 Authority Key Identifier:
keyid:0D:91:DF:D4:56:83:42:89:C1:FD:03:A0:FE:F1:B5:2A:5E:FD:1D:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:b7:83:f3:40:f3:11:1a:2e:e7:eb:e6:30:17:6b:20:0c:a3:
09:70:0e:57:cf:07:35:93:a0:23:08:ef:f6:b3:91:42:80:8e:
a4:6c:66:e3:9b:3b:ee:85:47:24:31:5f:3d:ed:de:06:5d:c3:
ef:8e:b6:ef:f0:a6:8b:24:7e:32:ff:7f:39:0c:fc:cb:e8:55:
9e:03:f1:c2:bd:54:ec:66:83:88:41:6e:af:4d:02:98:4e:19:
3a:7f:30:cc:a6:a5:21:92:fd:65:90:81:95:5c:e4:50:ec:96:
2d:fb:02:c6:17:07:5b:58:c1:31:49:a0:1f:49:1e:47:bf:97:
84:dd:f9:d4:25:73:63:00:79:da:c1:76:d4:66:df:e5:d4:3e:
fa:61:d5:df:48:64:3a:64:c6:58:09:8d:c0:35:3e:34:2a:cc:
82:ae:33:1b:01:90:53:91:7b:71:2b:e2:dc:66:1e:93:83:05:
b8:51:d8:fd:48:46:a0:84:6c:fa:fe:10:6c:df:26:86:a4:cb:
a0:aa:cd:71:ef:32:a9:6e:87:83:fb:c6:1a:be:b9:99:ca:05:
1b:01:46:e1:e1:ae:1c:d2:cf:b8:af:fa:9e:f8:2e:7d:67:2e:
9c:7f:15:05:36:49:4c:b7:29:02:c9:45:9b:05:8f:dc:98:ad:
ef:77:36:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:46:09 2026 by rpki-client