Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
File: DP81-NWtPe6lUQZbJAK7DTyNlRk.mft (raw, json)
Hash identifier: seTWA9Vz+jIup3d9Y80RFcjZLG4DA4j4P2jh+ogzQDg=
Subject key identifier: 8D:F0:A2:E3:2D:7E:4F:98:11:27:55:1A:63:80:23:58:89:D5:49:0A
Authority key identifier: 0C:FF:35:F8:D5:AD:3D:EE:A5:51:06:5B:24:02:BB:0D:3C:8D:95:19
Certificate issuer: /CN=0cff35f8d5ad3deea551065b2402bb0d3c8d9519
Certificate serial: 019FAA19C87024BEE325A71E6322F6912F24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
Manifest number: 19D1
Signing time: Tue 28 Jul 2026 19:00:44 +0000
Manifest this update: Tue 28 Jul 2026 19:00:44 +0000
Manifest next update: Wed 29 Jul 2026 19:00:44 +0000
Files and hashes: 1: DP81-NWtPe6lUQZbJAK7DTyNlRk.crl (hash: /usxSak/AAAn6g55R8weQ8vysSXnomdcygZYfQ1jBuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:c8:70:24:be:e3:25:a7:1e:63:22:f6:91:2f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cff35f8d5ad3deea551065b2402bb0d3c8d9519
Validity
Not Before: Jul 28 19:00:44 2026 GMT
Not After : Jul 29 19:00:44 2026 GMT
Subject: CN=8df0a2e32d7e4f981127551a6380235889d5490a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:37:76:b4:1c:ac:d9:e8:8a:e8:65:49:e5:08:
ea:84:5f:ba:8e:ef:19:3a:a8:76:ab:ec:c7:6c:f3:
4d:86:2c:63:8d:02:66:96:52:3f:13:21:64:5b:a2:
12:fe:6e:6e:9a:53:2e:b7:e2:0a:43:00:90:bd:1c:
7e:dd:df:6c:7f:26:b2:21:d7:dc:72:df:1c:ce:d6:
96:4b:87:59:98:9f:d8:42:2d:1d:96:a4:5d:6c:ff:
54:48:8d:e7:50:97:d8:d6:1a:19:4e:2b:92:d9:d1:
d5:a4:09:6f:bd:83:43:db:3b:8a:7e:3a:7a:0e:7b:
e7:8a:c6:f4:82:ef:cc:b7:76:ca:56:7f:1c:2c:e8:
6b:1a:27:0f:81:fe:f0:0c:bd:ff:78:6b:4c:f0:37:
d1:3a:eb:df:8b:27:69:93:5a:94:13:a5:b0:6c:b3:
4b:ae:2a:08:55:7f:bf:96:f9:07:af:e9:87:7b:92:
75:32:98:24:46:aa:84:f1:3d:4f:98:ce:af:f1:f4:
37:c5:e2:7c:7a:23:31:ec:61:84:bc:e1:ba:f0:2f:
76:07:bc:fc:d9:2e:83:56:55:41:66:a1:15:55:52:
f5:86:83:79:ab:85:45:76:51:b8:6e:9a:c3:cb:1c:
ec:59:39:55:52:ee:12:64:fd:57:1e:d2:1d:7a:8e:
ba:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F0:A2:E3:2D:7E:4F:98:11:27:55:1A:63:80:23:58:89:D5:49:0A
X509v3 Authority Key Identifier:
keyid:0C:FF:35:F8:D5:AD:3D:EE:A5:51:06:5B:24:02:BB:0D:3C:8D:95:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e7:38:3b:24:72:8a:02:eb:60:ca:0c:f6:a2:96:6d:6c:70:
a6:56:4d:80:48:23:de:4e:93:44:b4:b7:62:7f:fe:00:dd:53:
37:9a:13:e5:b7:27:6b:ec:34:44:f2:1b:c2:2d:cf:e1:1e:3e:
2d:5a:b7:c8:fc:24:b9:d5:75:6a:6e:02:f6:9d:26:41:bd:b8:
ad:f3:8d:d2:fa:cc:6d:9a:58:ab:4c:50:e1:ea:34:e8:93:d0:
79:2a:9e:36:32:2b:82:ec:dd:06:be:dc:d6:cb:f2:a5:88:e2:
7a:c0:f9:fe:ff:7c:41:e3:4e:ba:1e:3f:73:42:4d:ba:06:5a:
13:0a:76:5e:de:bf:29:d7:8e:49:d6:e2:a6:36:9f:ef:ea:db:
c0:04:9e:c3:d5:7a:f3:70:c3:d0:95:d0:2e:2e:10:49:e0:ea:
e9:d1:02:6c:0f:40:30:4d:aa:b8:7b:cb:a2:0d:04:00:9e:cb:
c8:bd:21:1a:a2:eb:90:be:ba:93:78:89:f1:ea:9e:1b:d4:7b:
48:2a:28:0f:cf:9a:2e:12:70:fd:36:92:66:ba:1e:9f:d1:f1:
d2:b5:e8:96:b7:19:d7:b8:de:69:84:79:4e:11:ed:d3:67:5c:
f8:4d:72:14:31:72:44:8c:58:bc:ad:cb:dc:36:28:d8:ad:fd:
bc:11:8a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:46:37 2026 by rpki-client