Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/89dd25-546c-4f18-acc4-7a4057314167/1/DUlCfYpEd823aAhhqexQ3HMhaYI.mft
File: DUlCfYpEd823aAhhqexQ3HMhaYI.mft (raw, json)
Hash identifier: +YeKbQjpOjHuofDVH6aSyfQ1Hnw2L5vXsVkaQ3khZng=
Subject key identifier: D2:B8:21:AF:6E:91:6A:FB:82:F5:F8:89:05:CF:AF:BA:71:68:C2:33
Authority key identifier: 0D:49:42:7D:8A:44:77:CD:B7:68:08:61:A9:EC:50:DC:73:21:69:82
Certificate issuer: /CN=0d49427d8a4477cdb7680861a9ec50dc73216982
Certificate serial: 01A001014DF18A71C13C9252A816180D5F95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUlCfYpEd823aAhhqexQ3HMhaYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/89dd25-546c-4f18-acc4-7a4057314167/1/DUlCfYpEd823aAhhqexQ3HMhaYI.mft
Manifest number: 0A8C
Signing time: Fri 14 Aug 2026 16:00:57 +0000
Manifest this update: Fri 14 Aug 2026 16:00:57 +0000
Manifest next update: Sat 15 Aug 2026 16:00:57 +0000
Files and hashes: 1: DUlCfYpEd823aAhhqexQ3HMhaYI.crl (hash: ZHj/MgNWlsVb8kZuQLMRA9VbXKjzwZWxQc2EiRYyvXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/89dd25-546c-4f18-acc4-7a4057314167/1/DUlCfYpEd823aAhhqexQ3HMhaYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/89dd25-546c-4f18-acc4-7a4057314167/1/DUlCfYpEd823aAhhqexQ3HMhaYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUlCfYpEd823aAhhqexQ3HMhaYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:4d:f1:8a:71:c1:3c:92:52:a8:16:18:0d:5f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d49427d8a4477cdb7680861a9ec50dc73216982
Validity
Not Before: Aug 14 16:00:57 2026 GMT
Not After : Aug 15 16:00:57 2026 GMT
Subject: CN=d2b821af6e916afb82f5f88905cfafba7168c233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:55:f1:b3:0c:7f:e1:0c:6f:d5:af:7a:2e:2d:
62:71:16:e2:f1:2c:86:61:f3:e0:1f:ee:ba:b2:57:
33:91:ae:b5:67:8a:99:d6:15:03:8f:f9:ba:49:b6:
ae:52:d4:ff:72:8a:f1:f1:cc:cb:c3:95:ff:c5:15:
64:c2:8e:18:50:92:75:5c:88:c3:72:93:f7:98:9d:
5a:c0:6b:02:bb:55:7f:98:99:21:54:b6:04:4b:2f:
24:73:09:4c:ee:13:e9:dc:81:d3:bc:99:e7:7a:c8:
ab:c0:4b:14:b2:f0:16:b9:4b:5e:9b:4f:1f:db:b6:
f6:95:13:31:96:42:dc:97:65:15:93:58:f2:66:dd:
e8:62:6e:58:47:37:2f:7e:03:6c:f8:32:fe:e5:ac:
3a:c9:26:fc:81:5e:5d:ea:27:7d:5c:af:f9:7d:2d:
cd:c9:52:b8:4a:58:37:9a:84:29:a1:14:b4:11:fc:
92:ee:f5:c8:fb:36:aa:bc:91:13:e4:cc:b1:f4:af:
b5:fd:82:1a:3d:4e:60:e5:cc:3a:ed:4e:b0:9f:a2:
3d:b7:92:35:93:df:a3:6e:b3:b4:d8:9a:74:7b:ab:
54:4b:c0:9c:53:00:fe:2f:e8:ae:c8:d0:c6:fc:04:
4f:15:95:e9:90:77:8b:f2:06:e9:e9:ec:4d:f2:ca:
ba:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B8:21:AF:6E:91:6A:FB:82:F5:F8:89:05:CF:AF:BA:71:68:C2:33
X509v3 Authority Key Identifier:
keyid:0D:49:42:7D:8A:44:77:CD:B7:68:08:61:A9:EC:50:DC:73:21:69:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUlCfYpEd823aAhhqexQ3HMhaYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/89dd25-546c-4f18-acc4-7a4057314167/1/DUlCfYpEd823aAhhqexQ3HMhaYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/89dd25-546c-4f18-acc4-7a4057314167/1/DUlCfYpEd823aAhhqexQ3HMhaYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d9:84:d0:cf:ad:72:1e:86:da:9d:53:65:3c:ac:20:35:04:
cc:6a:57:4e:83:a0:bd:5f:e4:78:79:a9:cf:de:d6:06:7f:bc:
e2:75:e2:a6:cf:b2:d6:6c:8b:13:8f:f7:5e:39:83:5e:69:a5:
a3:cf:94:fe:61:c0:d2:db:52:cc:77:9d:c5:fe:1d:5c:5f:83:
cf:ef:5f:3f:74:f0:ac:f7:90:d8:33:58:fb:d1:d8:a9:58:1b:
ad:05:d5:61:67:08:c8:34:01:61:d7:8c:8f:6d:10:cd:1d:ed:
d2:c2:a1:da:73:05:21:de:65:63:43:2f:d5:c0:cf:5f:a6:b8:
97:32:a7:15:bd:5a:83:e7:35:24:97:d0:57:28:28:3b:85:90:
8c:8f:78:af:be:6b:8e:28:a3:35:28:af:56:89:33:85:09:bf:
55:a5:e1:c3:31:2d:b9:09:15:c5:0c:20:82:bb:cd:df:18:84:
a9:e4:d3:da:4d:5d:a0:45:ed:80:c0:20:3f:1d:16:62:d5:88:
89:00:a0:b4:30:c0:56:b8:5b:0c:86:93:3f:8a:51:55:66:f1:
41:3d:a0:58:f5:aa:93:b7:67:3a:bd:34:b4:11:40:56:a9:22:
02:f2:48:69:46:2a:9c:83:cb:49:b9:83:5b:b8:83:cc:92:a3:
64:ba:d8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:22 2026 by rpki-client