Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
File: D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft (raw, json)
Hash identifier: RwpPOepltm8I8WJkd1qNFHMUEbufyVu0YPvwPfeyikQ=
Subject key identifier: F9:08:5B:B0:34:F6:E8:24:42:D8:87:59:29:28:9D:BC:43:F6:A8:2E
Authority key identifier: 0F:49:C4:9A:75:CF:6E:24:8C:9B:51:C7:05:4D:B2:F8:D9:DC:ED:CB
Certificate issuer: /CN=0f49c49a75cf6e248c9b51c7054db2f8d9dcedcb
Certificate serial: 01A149186E425515C3FAC254F1E7D1C8AAD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
Manifest number: 0FB5
Signing time: Sat 17 Oct 2026 09:01:40 +0000
Manifest this update: Sat 17 Oct 2026 09:01:40 +0000
Manifest next update: Sun 18 Oct 2026 09:01:40 +0000
Files and hashes: 1: D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl (hash: f9M32puCd/Jwr8U5ITsSMeDg0ZtDU6CpzhnJc63jqwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:18:6e:42:55:15:c3:fa:c2:54:f1:e7:d1:c8:aa:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f49c49a75cf6e248c9b51c7054db2f8d9dcedcb
Validity
Not Before: Oct 17 09:01:40 2026 GMT
Not After : Oct 18 09:01:40 2026 GMT
Subject: CN=f9085bb034f6e82442d8875929289dbc43f6a82e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5e:23:1c:af:19:44:c6:57:86:51:24:79:be:
c6:c6:5f:e8:2b:6e:ea:f5:0a:0d:49:9a:e1:ec:b0:
88:54:a5:20:72:54:5c:fa:60:0e:49:e7:40:52:f8:
df:c3:0d:8b:76:79:4d:6b:c8:cc:89:38:53:ed:3b:
91:e5:63:ea:6f:4d:7b:29:75:4a:53:56:af:b9:56:
85:5a:c0:be:69:a2:20:43:3f:1b:89:8a:b6:09:84:
9a:1e:fb:93:0f:bc:48:8e:6c:d7:31:22:60:f5:c5:
d6:ac:e9:3f:e0:1c:25:67:a8:2a:34:27:82:38:99:
46:86:38:df:d8:58:df:4b:d3:1a:0a:58:c7:1b:bc:
df:14:68:14:b2:89:27:42:6a:1f:b6:76:f2:e8:ec:
a8:72:53:8c:ed:29:16:40:38:d4:12:b4:54:13:8b:
c4:6e:22:89:fe:40:93:11:34:ac:74:d7:0a:9f:29:
9e:02:aa:f2:74:a5:e6:33:0a:03:6e:58:30:ab:15:
b8:fa:3e:0f:6c:3e:51:f2:15:07:38:f9:a0:1e:92:
81:ec:3f:ce:59:83:1c:97:43:03:36:5f:78:59:6e:
79:6b:84:6f:c4:8b:e1:63:3d:6a:a9:ac:d7:ac:01:
6e:79:7a:39:41:7a:e2:3f:cf:01:2a:d8:9d:6c:ac:
e6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:08:5B:B0:34:F6:E8:24:42:D8:87:59:29:28:9D:BC:43:F6:A8:2E
X509v3 Authority Key Identifier:
keyid:0F:49:C4:9A:75:CF:6E:24:8C:9B:51:C7:05:4D:B2:F8:D9:DC:ED:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:4a:46:48:46:30:b6:00:77:64:d0:dc:d7:d8:74:bf:b9:53:
5f:ae:7c:fc:56:6e:84:83:85:5b:55:53:ae:88:fe:5a:72:7d:
0a:1d:53:7a:f8:07:85:94:bc:b5:59:75:f9:33:7d:b7:8d:eb:
d9:f9:e3:a7:40:bd:d4:36:84:90:0c:a7:55:86:9b:43:69:88:
9d:f4:89:c7:0c:ad:a0:a9:d2:58:33:7d:c4:cf:7b:51:78:f3:
a3:37:62:31:13:73:3d:69:a9:36:89:0b:dd:56:d1:1a:98:dd:
8a:d9:2d:ed:e8:66:d8:c7:d2:06:ab:7d:0c:f7:39:c1:ef:4b:
51:a7:53:1f:df:e0:62:cc:91:b5:3f:d8:78:09:1e:8c:01:fb:
f5:56:ce:9b:a2:bf:51:10:8f:cb:c0:0a:29:12:2b:6f:d1:2e:
46:86:fe:1e:b6:87:67:bd:b9:95:b5:f3:e2:b1:22:cf:2d:6f:
69:25:ba:e3:ab:d2:17:9d:06:b1:63:54:74:1d:73:74:6c:46:
bc:16:0e:84:4e:4f:ea:6e:0d:89:aa:76:e6:95:b9:39:20:d3:
2a:a0:80:d8:67:2b:0f:99:a1:f9:6e:1c:38:48:28:6b:5c:88:
e9:1c:66:f2:0e:53:75:97:95:5b:d6:53:56:3f:6c:99:a6:c4:
3d:91:92:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 15:47:50 2026 by rpki-client