Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
File: Da7a5Z2cmvUe9UivsMlkOM73IRw.mft (raw, json)
Hash identifier: IIeeWbtXBWFErk6fbwssiUGqLpP0iVI0YdLwmsf3f+c=
Subject key identifier: FB:7D:7B:14:35:1F:9D:79:D4:BC:EA:06:48:F5:75:60:20:FF:19:81
Authority key identifier: 0D:AE:DA:E5:9D:9C:9A:F5:1E:F5:48:AF:B0:C9:64:38:CE:F7:21:1C
Certificate issuer: /CN=0daedae59d9c9af51ef548afb0c96438cef7211c
Certificate serial: 019EBF2343D28F687792D94720D9CB982DA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
Manifest number: 1956
Signing time: Sat 13 Jun 2026 04:00:19 +0000
Manifest this update: Sat 13 Jun 2026 04:00:19 +0000
Manifest next update: Sun 14 Jun 2026 04:00:19 +0000
Files and hashes: 1: Da7a5Z2cmvUe9UivsMlkOM73IRw.crl (hash: jGT+uNigFtz6wgxMK5K9JafX2KRnKk3Byb8xpNa7Ars=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:43:d2:8f:68:77:92:d9:47:20:d9:cb:98:2d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0daedae59d9c9af51ef548afb0c96438cef7211c
Validity
Not Before: Jun 13 04:00:19 2026 GMT
Not After : Jun 14 04:00:19 2026 GMT
Subject: CN=fb7d7b14351f9d79d4bcea0648f5756020ff1981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dd:15:dd:38:e5:b9:3f:51:32:7c:5a:5c:7f:
9b:a8:70:93:d1:41:06:e6:1b:9a:56:51:b0:b9:f9:
6b:f7:b2:4f:07:0d:17:af:3c:e6:cc:66:9a:38:fd:
ee:f6:00:65:27:de:10:a2:66:79:d3:1a:ee:7c:fd:
15:24:49:74:88:52:e9:dd:60:8b:2d:e4:0a:4c:c2:
d7:64:00:25:db:24:d4:5c:e3:d0:40:60:cd:35:93:
e7:61:41:90:ee:13:14:62:38:e5:63:84:95:b0:ff:
13:7b:81:b9:7f:94:ec:3d:7d:6b:93:58:9d:15:20:
23:fc:78:f0:c5:b9:4d:34:1f:95:c1:52:8d:c9:63:
b7:97:14:bb:82:8b:f2:e6:68:cf:3f:e5:42:e8:d5:
e1:d6:c9:9b:d1:6c:50:32:55:91:a5:56:5a:01:7c:
99:c0:bc:08:e3:10:c5:80:81:fc:ba:36:0d:2c:38:
fe:2e:a7:4b:f0:a6:b6:89:54:24:8f:70:cf:47:0c:
cf:1c:0b:ac:e1:f0:6b:14:90:5b:68:c7:ee:ef:11:
ba:1b:a1:ac:ae:39:03:e8:f7:76:64:58:da:00:1d:
b5:2b:13:f8:23:c1:73:98:14:68:b9:37:2a:ec:0f:
fb:a0:f3:c7:6a:9b:6f:cd:8c:8c:bc:36:ea:df:db:
ba:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7D:7B:14:35:1F:9D:79:D4:BC:EA:06:48:F5:75:60:20:FF:19:81
X509v3 Authority Key Identifier:
keyid:0D:AE:DA:E5:9D:9C:9A:F5:1E:F5:48:AF:B0:C9:64:38:CE:F7:21:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:fa:4e:36:1f:4d:48:2c:68:ce:7f:8d:04:d0:14:f4:2f:26:
d1:d4:21:1b:52:bd:02:fb:ca:55:eb:39:a2:6b:d3:91:35:a4:
06:6a:cc:ac:89:e1:30:39:96:2b:a7:37:ee:09:93:2d:30:d2:
cb:cc:0d:8d:80:21:a9:96:79:62:23:70:49:ad:8e:04:a0:4c:
c3:06:5d:ba:c2:41:6f:3c:c8:2e:ef:9c:2a:84:59:bd:8d:f2:
80:f2:e1:82:d5:d0:3d:f2:ee:1d:24:3c:21:52:03:49:fc:37:
0c:0a:3f:ca:e3:15:70:be:49:96:62:79:78:a3:c6:5e:a4:dd:
20:ad:6c:2e:f7:06:40:cb:90:4d:90:ed:9d:2c:a5:41:44:59:
c8:95:c5:d2:90:c1:cd:b0:82:84:e6:21:d5:39:ad:da:3a:48:
15:f2:f7:b1:59:85:94:60:29:5f:cc:df:7b:de:75:d5:22:9a:
fb:60:25:82:92:94:a9:b4:66:e9:24:53:64:9a:92:5f:41:43:
4c:ae:8a:a3:2b:94:41:d7:2c:d6:b7:aa:ab:89:16:39:8b:68:
9f:11:b5:a6:42:74:bf:3c:84:4a:fc:6b:2e:d8:62:57:42:fb:
d4:4b:bf:c5:fb:f9:c4:94:fc:0f:49:b7:10:24:57:2d:65:e8:
e8:0f:6b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:16:12 2026 by rpki-client