Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
File: Da7a5Z2cmvUe9UivsMlkOM73IRw.mft (raw, json)
Hash identifier: fiqjH43ZaA088L5IM0qCWDyQ7b6bns3aqOj0Vac5gC8=
Subject key identifier: EB:9F:D0:93:CD:1A:C7:2A:03:7A:54:7F:CD:B6:03:9A:35:E4:2D:3E
Authority key identifier: 0D:AE:DA:E5:9D:9C:9A:F5:1E:F5:48:AF:B0:C9:64:38:CE:F7:21:1C
Certificate issuer: /CN=0daedae59d9c9af51ef548afb0c96438cef7211c
Certificate serial: 019FAABECC41F2D91A67FFE884E720E59E0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
Manifest number: 19D0
Signing time: Tue 28 Jul 2026 22:00:58 +0000
Manifest this update: Tue 28 Jul 2026 22:00:58 +0000
Manifest next update: Wed 29 Jul 2026 22:00:58 +0000
Files and hashes: 1: Da7a5Z2cmvUe9UivsMlkOM73IRw.crl (hash: f0URNf2fav0xlAkh4FLLBE2NH87+RvnwGaikmXDj390=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:cc:41:f2:d9:1a:67:ff:e8:84:e7:20:e5:9e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0daedae59d9c9af51ef548afb0c96438cef7211c
Validity
Not Before: Jul 28 22:00:58 2026 GMT
Not After : Jul 29 22:00:58 2026 GMT
Subject: CN=eb9fd093cd1ac72a037a547fcdb6039a35e42d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b5:29:8d:bc:6b:8c:dc:c6:33:d0:f0:b1:cf:
ff:82:3e:00:00:75:58:4b:f8:94:4c:80:20:8d:1b:
69:ce:f5:50:5d:25:21:fb:6d:a9:dc:ed:45:87:4b:
37:d2:37:92:f4:5c:16:eb:3c:71:62:54:46:4c:3c:
b8:86:20:ef:3d:f5:32:c1:0d:a0:aa:4a:68:95:6c:
49:61:10:13:e6:23:26:5d:67:11:81:56:0d:2d:03:
f4:bb:64:d2:fb:c5:95:3f:3e:ae:b1:1a:77:34:fa:
58:69:66:77:45:be:6d:b4:11:31:1c:4c:bf:27:9b:
f6:ea:1c:94:f7:85:37:d6:b7:48:9c:69:51:3e:8a:
69:5b:47:19:05:55:d3:17:8c:27:61:bc:cb:46:50:
54:49:ef:c3:b0:24:19:58:1f:c6:58:be:94:5d:f9:
48:d7:60:0f:17:9d:fa:76:0b:ea:3f:a1:df:5e:f3:
b7:39:65:44:df:47:92:b0:7d:15:26:f5:d0:4c:7e:
b7:76:9f:a4:90:f3:37:5c:96:fc:3a:79:dd:cd:f8:
8b:8f:15:14:10:43:76:2b:5c:ea:70:99:25:09:6a:
4e:4d:dd:e2:de:9b:65:78:57:53:77:c3:d6:86:47:
a0:86:8c:c8:10:c7:b7:8a:33:c3:26:23:91:e7:d7:
0f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9F:D0:93:CD:1A:C7:2A:03:7A:54:7F:CD:B6:03:9A:35:E4:2D:3E
X509v3 Authority Key Identifier:
keyid:0D:AE:DA:E5:9D:9C:9A:F5:1E:F5:48:AF:B0:C9:64:38:CE:F7:21:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ad:49:5b:3d:33:24:45:28:27:30:32:75:a5:72:5c:38:b2:
05:d8:31:ae:a1:bd:40:47:4b:46:3b:d7:4b:c7:80:6d:a9:fb:
f6:5d:23:bf:7a:31:db:2d:3e:af:2d:70:1b:47:f8:25:26:4b:
d6:9d:7d:02:01:ff:28:8d:17:a8:79:c2:21:db:b4:4b:27:81:
66:28:2a:f6:56:ac:49:49:b8:d7:54:87:9a:2e:6b:20:36:ee:
fc:1a:80:1c:35:5f:58:1c:7a:55:c5:3e:1a:e5:8d:02:9f:91:
78:a2:5e:38:16:33:f4:fb:09:fb:59:be:fc:6a:07:e9:69:a9:
29:a5:38:74:48:a3:d6:dd:da:4d:c4:fc:64:d7:e6:2e:4f:6d:
b5:5a:5c:fd:5c:8d:44:c8:d2:da:72:b9:ff:96:a2:f1:ce:20:
51:76:72:bd:c4:77:9d:2f:ae:e6:b2:8d:f3:d6:49:71:bc:e6:
74:44:d0:d8:1f:cc:57:69:f3:4a:6e:df:86:78:6c:c2:e2:de:
3b:b2:a0:3c:05:36:e4:dc:c8:f4:cc:4b:ce:d3:b7:ed:8d:93:
c9:5b:ce:e7:3a:d2:09:c6:65:42:f4:05:13:8d:d5:32:6a:1b:
1a:c6:b7:7e:0d:6a:bc:1f:87:8e:bd:24:9d:ea:9c:d7:8e:86:
18:bf:d6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:24:43 2026 by rpki-client