Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
File: D-cy5rJJCT55oaUHy82BlvAYF_o.mft (raw, json)
Hash identifier: vCI7+4Yj2T/m+xC0e+FvRuIMsGhcFpAvHM1JK9GNytk=
Subject key identifier: DE:77:8D:AA:5E:9B:26:B9:15:47:3C:15:6D:DA:3F:66:50:EA:9D:9D
Authority key identifier: 0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
Certificate issuer: /CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Certificate serial: 019F1867BA399E750CEE3D0252C6D376F797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
Manifest number: 141F
Signing time: Tue 30 Jun 2026 12:01:18 +0000
Manifest this update: Tue 30 Jun 2026 12:01:18 +0000
Manifest next update: Wed 01 Jul 2026 12:01:18 +0000
Files and hashes: 1: D-cy5rJJCT55oaUHy82BlvAYF_o.crl (hash: lVlZr76X+/WAjVbT8RhOGw9ZAOAOF1rtpnQMDQVBKnE=)
2: KRcQChyIkdk17z-o88DTXwkNu_Y.roa (hash: k4ZBkPTraQNZ31kK5NnaOy56WVAVKO/c8Q/xt3FDIoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:ba:39:9e:75:0c:ee:3d:02:52:c6:d3:76:f7:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Validity
Not Before: Jun 30 12:01:18 2026 GMT
Not After : Jul 1 12:01:18 2026 GMT
Subject: CN=de778daa5e9b26b915473c156dda3f6650ea9d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e7:75:6c:cc:78:37:9f:7c:43:64:98:68:52:
b8:7b:3b:5b:1b:55:b8:04:07:6d:57:3e:bd:21:54:
2f:46:aa:9b:bd:a6:be:7a:0a:ae:2c:8b:65:53:7b:
90:d3:4e:1b:e8:87:1b:4d:bd:fa:aa:30:b4:94:b9:
bd:b8:9a:8a:7f:ba:b4:55:5b:b6:0e:70:c5:eb:87:
31:de:cb:9d:e3:5b:c8:a0:ef:fe:19:91:8a:a0:5e:
40:36:61:dc:fe:0f:17:34:b4:2d:dd:f0:56:93:9f:
8b:a7:28:55:5b:c2:65:20:8a:de:8e:b2:65:2f:85:
7a:c6:0f:21:46:75:a8:eb:61:4f:ed:e6:9f:1b:5c:
3c:e4:62:16:13:0d:6c:29:e5:05:78:78:d5:0b:d5:
e2:7b:3e:65:32:09:a3:46:44:16:a6:c8:9d:04:95:
d3:44:96:29:08:31:dd:13:2c:23:7e:be:be:81:95:
54:8f:33:6e:ae:88:fb:0e:14:1d:b5:38:98:af:42:
0e:78:a6:54:69:62:31:65:37:f8:a3:53:0c:9f:78:
6f:f3:8d:b0:80:b5:c3:ea:f6:13:e0:08:68:83:09:
f0:fe:a9:cd:e1:49:7f:05:a0:bf:f1:3b:d5:54:41:
0b:f9:da:2c:6d:52:74:c4:b9:b1:b9:1b:2f:95:85:
3b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:77:8D:AA:5E:9B:26:B9:15:47:3C:15:6D:DA:3F:66:50:EA:9D:9D
X509v3 Authority Key Identifier:
keyid:0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a5:cd:fa:a9:d0:da:6d:68:5d:9f:f4:a6:34:ba:be:08:e5:
1a:d2:65:d8:d7:f5:d7:ca:e4:e7:32:4b:e5:25:a3:14:05:67:
a1:ce:2d:5e:66:16:c3:e1:15:45:64:2e:8a:b1:20:24:c6:70:
47:33:ba:d6:55:a8:65:ac:d1:0d:53:57:dc:e6:1c:00:c5:10:
de:45:96:59:08:de:e4:d8:2f:95:e4:38:2c:3f:37:50:b6:07:
73:06:60:de:62:41:f6:07:48:e2:7c:ee:2b:c7:4c:49:fc:59:
78:da:00:4c:ec:92:02:c9:9f:9c:92:e2:a8:52:65:d5:8f:c3:
f5:30:99:6a:d6:70:b2:bb:b7:25:d0:a7:c9:cf:f3:68:a2:66:
10:ec:9f:cc:98:bf:22:eb:38:aa:a5:fc:1c:3e:41:f3:53:ec:
46:24:27:a7:01:43:2e:e5:ec:2d:0e:e9:a0:c2:10:07:e7:1e:
79:4b:6e:a2:57:7a:aa:07:ba:28:21:47:07:3c:f1:8e:c0:24:
3a:09:ea:b9:94:71:c7:8b:11:b8:9c:2a:3b:d7:13:d3:de:c0:
a6:14:7a:f5:1e:eb:e1:91:91:7f:50:68:2e:f4:d2:07:5e:a2:
60:f0:fa:00:8b:33:0b:76:a8:f0:6d:35:29:e4:06:2e:11:f8:
1a:e1:0f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:26:20 2026 by rpki-client