Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
File: DxoYFt02i3fPMr0hqeC61d9s3_A.mft (raw, json)
Hash identifier: j+6Ur2DAbiJgU2XP4nDnHcw6thHOnEc0VExIlotvCQs=
Subject key identifier: 67:8F:22:39:53:6F:19:D3:16:28:30:57:39:D1:B3:64:47:4F:F5:4C
Authority key identifier: 0F:1A:18:16:DD:36:8B:77:CF:32:BD:21:A9:E0:BA:D5:DF:6C:DF:F0
Certificate issuer: /CN=0f1a1816dd368b77cf32bd21a9e0bad5df6cdff0
Certificate serial: 019F17F96FCA7A7D556E88D466C0BB37DE64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
Manifest number: 1985
Signing time: Tue 30 Jun 2026 10:00:50 +0000
Manifest this update: Tue 30 Jun 2026 10:00:50 +0000
Manifest next update: Wed 01 Jul 2026 10:00:50 +0000
Files and hashes: 1: DxoYFt02i3fPMr0hqeC61d9s3_A.crl (hash: N9GncaZ8d/nJQ/S3KHrwMgHBuD/vV08JVc1KhnTXQq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:6f:ca:7a:7d:55:6e:88:d4:66:c0:bb:37:de:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f1a1816dd368b77cf32bd21a9e0bad5df6cdff0
Validity
Not Before: Jun 30 10:00:50 2026 GMT
Not After : Jul 1 10:00:50 2026 GMT
Subject: CN=678f2239536f19d31628305739d1b364474ff54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9f:7e:ec:26:a8:01:34:85:be:40:39:1c:38:
2e:3b:e7:8e:b4:48:e3:46:9b:78:98:4e:ea:bf:2f:
10:15:ce:52:6e:e9:80:10:36:5c:c0:76:27:56:22:
f4:07:ad:0f:0c:04:a9:82:84:51:d0:0d:28:32:c4:
1c:73:4a:64:57:e4:17:d5:ce:40:3b:12:30:af:b4:
3a:72:88:30:a9:44:95:4e:f6:d0:3f:52:83:2a:10:
88:85:9f:2b:15:1c:08:fa:c6:ed:89:27:a6:a7:67:
db:ae:fb:86:24:4d:aa:cf:58:58:0d:d0:61:4e:08:
7b:00:2a:76:65:03:85:40:d5:30:81:2a:92:ec:9e:
91:57:b9:89:51:a0:6e:8f:63:bf:9f:5b:01:54:fe:
db:c2:16:dc:72:96:c2:49:69:c0:f0:15:b9:4c:7b:
5c:be:db:4a:3d:a4:b5:15:64:b4:38:fa:db:f5:b8:
93:46:45:aa:f8:36:34:2a:d0:08:b2:22:1b:08:91:
9b:6e:d6:b2:97:81:95:73:15:ab:7c:55:cd:f2:00:
ce:c1:2a:98:74:f2:1b:57:db:31:63:ee:17:6d:5b:
3c:65:7e:ae:82:21:53:b0:6e:51:15:80:de:41:c4:
80:8a:9d:23:4c:09:73:3e:53:41:4f:c3:92:c4:6e:
6f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8F:22:39:53:6F:19:D3:16:28:30:57:39:D1:B3:64:47:4F:F5:4C
X509v3 Authority Key Identifier:
keyid:0F:1A:18:16:DD:36:8B:77:CF:32:BD:21:A9:E0:BA:D5:DF:6C:DF:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:8a:af:27:db:e1:9e:a1:55:c0:8f:bd:82:0c:81:52:c1:a8:
6d:aa:a0:32:70:ce:86:f9:3e:7f:af:4a:8a:c4:3b:bd:c7:90:
c7:bb:41:97:d8:55:fb:0c:99:a2:ca:3f:e9:4f:42:95:83:b9:
b4:d1:8f:1e:b3:39:f5:52:c8:c2:18:f9:e9:07:88:1e:62:9c:
e5:79:3c:3f:cb:84:09:0f:1e:a7:dc:df:2d:ee:92:1c:ad:4d:
18:12:af:e9:a1:9a:dd:1b:96:ae:de:9a:78:9a:79:5b:0b:8a:
2b:60:c9:1a:6e:8f:57:92:d8:7a:8a:7d:72:a9:ad:93:e4:f5:
ba:30:be:e8:f5:e0:b5:d5:26:fa:f1:5d:dc:24:ff:a5:d0:5b:
43:1a:e0:2c:52:2d:dc:d4:d2:89:2f:26:9b:66:bb:26:c4:f3:
32:3c:cc:ee:32:c2:1e:8c:3d:d0:22:f5:15:8d:bf:6b:51:3d:
f8:5b:3a:71:87:de:0e:51:17:14:1b:20:6a:9b:0c:4f:dc:60:
a8:39:d7:a4:52:6b:a6:56:21:4e:71:c3:f2:2d:05:0a:bc:5d:
d2:d1:52:d2:7e:4f:f9:d6:9c:c5:9c:8a:e5:ef:f6:c8:57:dd:
f2:14:5d:7b:ce:2c:9e:05:4c:df:22:25:79:19:a2:90:5d:2e:
0f:b2:80:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:19:21 2026 by rpki-client