Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
File: Da7a5Z2cmvUe9UivsMlkOM73IRw.mft (raw, json)
Hash identifier: YIfoeKNAVZ/ICUt0PhWEJY1SQ/+moO81qcvcKpNlaFc=
Subject key identifier: 2D:F1:B2:3D:A9:C3:BA:10:7B:7C:86:2D:2E:8B:D4:3A:A6:18:5C:99
Authority key identifier: 0D:AE:DA:E5:9D:9C:9A:F5:1E:F5:48:AF:B0:C9:64:38:CE:F7:21:1C
Certificate issuer: /CN=0daedae59d9c9af51ef548afb0c96438cef7211c
Certificate serial: 01A0C2C3E79F98FA846327D7D46D68E05263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
Manifest number: 1A61
Signing time: Mon 21 Sep 2026 07:00:13 +0000
Manifest this update: Mon 21 Sep 2026 07:00:13 +0000
Manifest next update: Tue 22 Sep 2026 07:00:13 +0000
Files and hashes: 1: Da7a5Z2cmvUe9UivsMlkOM73IRw.crl (hash: J6+g9CGzgw8Z41Uq1ue6/5KXOV9OaulGB2cx79iRd9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c3:e7:9f:98:fa:84:63:27:d7:d4:6d:68:e0:52:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0daedae59d9c9af51ef548afb0c96438cef7211c
Validity
Not Before: Sep 21 07:00:13 2026 GMT
Not After : Sep 22 07:00:13 2026 GMT
Subject: CN=2df1b23da9c3ba107b7c862d2e8bd43aa6185c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:59:c5:d3:60:16:da:4f:92:5c:29:99:5e:fa:
65:34:1b:9d:75:be:9e:0b:05:d4:17:76:3d:1b:54:
82:d6:76:88:a3:89:1b:b3:24:fb:d3:4d:0b:79:fb:
93:a7:1b:62:70:6f:7e:d6:ba:36:29:54:6e:43:f0:
e2:66:8c:f0:a4:03:76:a0:8a:3a:be:5f:44:ff:b3:
20:c7:5f:74:6c:84:f6:db:d2:25:37:70:65:92:50:
93:b8:9c:d9:5b:c0:d0:29:65:30:9f:07:c2:45:69:
95:d2:16:9d:f6:90:95:20:8e:a7:b5:20:8c:5c:a6:
5b:c7:4e:d4:88:70:81:be:c8:32:b4:f1:f9:0b:3e:
21:59:a4:5a:e6:8c:13:0e:71:59:2f:53:33:f7:12:
0a:1f:79:14:57:e0:a1:0e:3a:95:97:e8:ee:87:b8:
6c:40:06:08:f1:ae:1d:40:2f:62:7b:e2:26:a4:fe:
ab:24:7f:11:70:d3:4f:f9:68:39:a8:a7:f0:84:5e:
9f:7b:d5:bb:04:7f:da:be:2d:17:a4:09:7d:59:d4:
08:62:d4:7e:c4:26:5d:b6:82:70:0a:2a:db:7a:7b:
33:b1:27:e1:48:54:84:19:62:30:ba:cd:4d:fd:e9:
da:39:58:99:48:ae:0c:bb:ee:70:6f:08:33:5e:8e:
dd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F1:B2:3D:A9:C3:BA:10:7B:7C:86:2D:2E:8B:D4:3A:A6:18:5C:99
X509v3 Authority Key Identifier:
keyid:0D:AE:DA:E5:9D:9C:9A:F5:1E:F5:48:AF:B0:C9:64:38:CE:F7:21:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:5f:f4:d6:53:f9:52:27:27:e8:2a:cc:2c:0d:de:8a:06:f3:
51:f6:e2:1d:fb:ce:b8:26:47:5e:7e:34:3b:6f:0b:ac:9f:4a:
ce:71:2b:d5:b9:8e:41:a8:37:1a:b3:b5:97:de:60:a7:f6:a3:
85:26:ae:6b:e2:94:0c:c8:1e:76:80:3d:e5:22:82:cd:09:91:
af:a2:bc:ee:fe:35:3c:3f:b7:1a:11:7b:1f:8a:71:3a:6d:97:
19:96:a6:1a:7f:0f:73:ab:fe:36:7b:d5:1f:ce:a2:1c:1e:0b:
5f:54:43:14:2b:58:91:86:be:6c:3d:b5:59:a8:21:fe:51:0e:
b6:44:fb:ba:fb:37:01:16:91:59:1c:65:df:9f:62:ea:b4:ba:
cf:40:e2:02:f2:32:8c:ac:76:5a:74:c0:68:ab:b5:9e:a3:f0:
36:19:4f:36:22:55:6b:ea:65:8a:2f:34:3e:0e:4b:74:f1:07:
30:fa:d2:ee:93:14:da:cb:4a:00:ce:6f:9c:71:c4:02:40:95:
2c:f5:e3:2e:e6:f3:44:1b:52:24:9a:54:cb:6e:79:d9:cd:51:
7d:1c:ed:77:84:59:87:ee:d7:7b:0c:0d:f5:06:3c:d5:c0:19:
13:9d:a5:95:f1:38:16:11:3c:b4:08:b2:c4:3c:b4:03:9b:a7:
9b:0d:a3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:02:33 2026 by rpki-client