Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
File: D-cy5rJJCT55oaUHy82BlvAYF_o.mft (raw, json)
Hash identifier: ie0n0GsIPBoxVTbOz4zVd07HhXQFIDBMX4MhigV7L/U=
Subject key identifier: AB:54:08:1A:24:A0:EE:51:8C:23:46:9A:B8:FE:DB:68:06:36:FB:E1
Authority key identifier: 0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
Certificate issuer: /CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Certificate serial: 01A0021443C1EF7FD767C64454D25D862416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
Manifest number: 1498
Signing time: Fri 14 Aug 2026 21:01:17 +0000
Manifest this update: Fri 14 Aug 2026 21:01:17 +0000
Manifest next update: Sat 15 Aug 2026 21:01:17 +0000
Files and hashes: 1: D-cy5rJJCT55oaUHy82BlvAYF_o.crl (hash: DKlDJbbpo29axSY0XkRIieZMSii5oEloOtd5oiWhLkA=)
2: KRcQChyIkdk17z-o88DTXwkNu_Y.roa (hash: k4ZBkPTraQNZ31kK5NnaOy56WVAVKO/c8Q/xt3FDIoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:14:43:c1:ef:7f:d7:67:c6:44:54:d2:5d:86:24:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Validity
Not Before: Aug 14 21:01:17 2026 GMT
Not After : Aug 15 21:01:17 2026 GMT
Subject: CN=ab54081a24a0ee518c23469ab8fedb680636fbe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:38:56:7c:3d:c7:ea:68:ce:35:13:53:26:22:
9a:2b:24:12:a8:58:9a:ca:28:6d:00:77:33:e8:8b:
44:7b:8f:38:5c:85:ab:db:2a:8b:41:32:70:46:e6:
66:04:6d:3e:e4:5e:93:a6:b8:0d:72:1a:dd:8d:7a:
7a:ed:37:b2:a6:c0:a5:7a:d0:84:c1:b2:57:5f:ea:
9d:97:fb:f3:b8:ef:6b:bd:2d:26:7c:e5:6d:cb:ee:
ce:3a:66:29:e5:62:0b:b2:37:df:d7:66:95:02:99:
7f:46:5b:ff:d3:aa:2e:f5:03:16:ca:9b:50:8d:da:
dc:25:d7:db:76:86:e9:ca:af:6e:74:4c:49:1d:fc:
3a:73:db:13:7a:dd:2c:a5:34:36:65:f7:65:88:dc:
9d:da:ca:e0:ef:a5:5a:5a:30:03:29:c8:88:4b:93:
56:d4:cc:45:62:ac:aa:ad:9c:0e:59:bf:05:33:95:
e1:0b:5e:b9:02:88:f0:c8:c2:f2:b6:ea:0b:18:be:
53:25:d2:81:ec:c3:6c:70:c4:7c:76:d6:66:ea:a2:
d1:75:49:b6:67:37:2e:c7:73:3f:14:ec:6a:6a:c9:
3e:c1:f1:e9:61:4a:5e:01:4b:d9:e5:1c:a8:e8:fc:
3d:4f:76:3b:f8:07:68:37:d3:8a:de:5e:42:8e:05:
6f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:54:08:1A:24:A0:EE:51:8C:23:46:9A:B8:FE:DB:68:06:36:FB:E1
X509v3 Authority Key Identifier:
keyid:0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:7f:00:5c:ea:1b:e2:63:29:97:b5:91:cc:ff:63:20:21:f1:
7e:b1:ce:53:1c:40:52:28:38:28:bc:bd:9c:14:b2:37:0f:8e:
cb:c8:d2:c3:d9:9e:d1:51:0d:10:d7:5c:04:4b:17:bf:38:ee:
9d:86:51:34:56:8d:b6:71:6b:17:ae:09:9d:1a:c6:85:bb:8c:
84:b4:0b:1d:43:21:40:23:ed:43:28:35:80:dd:a5:c3:88:83:
1a:fe:48:b3:b2:e1:08:eb:47:1e:9f:15:3f:ad:35:98:aa:20:
54:7c:14:99:d7:55:bf:c9:c4:58:ca:06:19:a8:00:5a:a7:71:
2b:e3:6c:fd:e6:ee:73:07:dd:b5:b9:80:79:71:6d:19:c5:13:
2c:45:42:cd:e4:63:4b:bc:34:4f:31:c2:70:85:92:fa:6c:2c:
63:5d:6b:5f:85:a2:98:c6:63:92:f0:85:1f:05:0d:b9:9f:e0:
73:34:78:b1:49:37:f4:78:ba:54:fa:a4:69:72:bd:0a:5b:fc:
2f:7f:2f:8e:12:f0:87:cd:fd:1b:ef:e9:ba:1e:55:e3:09:85:
7d:3c:1f:75:89:31:22:66:00:79:ea:15:34:13:d6:61:24:c6:
bd:43:a7:8d:ec:23:a6:0c:18:6f:b8:ed:a1:d5:94:73:8c:13:
ec:b8:be:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:29:26 2026 by rpki-client