Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
File: Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft (raw, json)
Hash identifier: WF7cZ6PDCtrjePlivImylyLSnLRc20mQnD212j0swfw=
Subject key identifier: E4:91:D3:7F:EF:40:E7:F7:2D:37:AD:E4:06:F2:19:50:4C:52:A1:DE
Authority key identifier: 0F:0D:94:EE:63:C7:0A:73:36:63:BB:C4:B5:B5:76:DE:60:7E:19:ED
Certificate issuer: /CN=0f0d94ee63c70a733663bbc4b5b576de607e19ed
Certificate serial: 019F17F9A088C3BD81A17B150FD6A6E58564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
Manifest number: 0AB8
Signing time: Tue 30 Jun 2026 10:01:03 +0000
Manifest this update: Tue 30 Jun 2026 10:01:03 +0000
Manifest next update: Wed 01 Jul 2026 10:01:03 +0000
Files and hashes: 1: Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl (hash: ArUYwgcoSIpmJzW9zPnI2cxWTxy8PGBGZOVgwNte3W0=)
2: eIMZBtMcWMvFB1hL6z_nOfKcJpw.roa (hash: fpooL7KmV8Sp+0vA+7uC8WsK6RO/CGya0r0FndhdjC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:a0:88:c3:bd:81:a1:7b:15:0f:d6:a6:e5:85:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f0d94ee63c70a733663bbc4b5b576de607e19ed
Validity
Not Before: Jun 30 10:01:03 2026 GMT
Not After : Jul 1 10:01:03 2026 GMT
Subject: CN=e491d37fef40e7f72d37ade406f219504c52a1de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:18:cb:8c:6f:8f:40:0d:72:d6:54:bd:11:80:
d0:27:72:5c:39:0c:57:74:78:70:fb:dc:11:01:70:
d1:f4:b6:7c:78:17:78:7e:a6:b8:e3:75:c2:35:be:
06:f1:b7:0a:3b:be:96:47:b1:b6:1b:d7:81:96:a5:
6f:c8:a1:d2:fd:7c:c3:4d:c6:39:cf:9a:37:a0:3d:
87:90:2f:b9:92:f3:9b:5d:4c:65:17:4c:7e:70:ed:
1b:45:0a:73:ed:fc:47:cf:f9:21:43:03:75:41:99:
32:e9:86:21:c9:12:11:14:2e:09:f1:71:11:04:c0:
87:22:e4:77:9c:25:b5:b6:6c:22:ad:5c:eb:85:69:
3f:36:e2:39:e3:ae:66:97:59:e8:43:9e:bf:e6:4e:
4a:a3:0a:7c:40:eb:43:0e:84:97:dc:3d:55:ca:85:
26:25:f1:3e:ee:2b:c7:02:b2:f2:51:44:68:f8:d9:
d2:be:3f:76:92:74:45:32:21:11:69:10:86:5d:36:
80:f3:24:59:65:fd:a3:c1:0c:96:de:5b:a8:9e:2f:
9d:e0:79:d8:2f:0b:9d:d2:03:96:ee:74:fc:50:83:
c9:8c:92:2d:c9:f7:10:c3:e4:54:58:6d:ba:f8:31:
74:ed:13:e6:c9:22:a2:4f:e7:74:71:08:d4:0c:8c:
15:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:91:D3:7F:EF:40:E7:F7:2D:37:AD:E4:06:F2:19:50:4C:52:A1:DE
X509v3 Authority Key Identifier:
keyid:0F:0D:94:EE:63:C7:0A:73:36:63:BB:C4:B5:B5:76:DE:60:7E:19:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:02:d7:78:48:8f:9c:1b:49:0f:a7:2e:e3:9d:21:2c:38:77:
27:9f:1b:a8:26:c9:11:33:66:54:59:85:9c:3f:57:72:cb:6f:
6c:2e:6b:84:9e:8f:62:0b:c6:f7:f7:9d:0e:5b:14:f2:4f:c4:
d3:14:23:ff:14:59:1c:18:5a:6d:56:f6:15:dc:ab:91:8d:fb:
10:1c:42:d9:10:db:02:0e:89:c8:67:d2:a4:b4:47:0d:d4:3a:
54:05:6b:be:cd:b5:10:97:7b:3e:e6:af:39:ae:fd:70:67:3f:
c3:48:b4:d4:85:5e:a3:13:3d:7c:13:f3:54:07:7f:9b:f3:27:
f5:5c:50:8b:40:99:a9:4d:84:df:f9:07:ee:59:1e:92:53:27:
a3:de:bd:03:7a:bd:dc:c8:cc:5c:0b:42:cb:4b:96:75:da:90:
c3:d9:cd:15:c6:23:3a:1f:29:60:3e:28:7c:e2:43:06:e3:86:
f8:82:8c:8d:30:6a:7c:fe:5b:1f:df:3a:f9:64:da:e0:cb:95:
a7:4c:f6:a8:63:6a:d4:c9:db:60:db:dd:25:64:94:ca:22:40:
fa:8d:c6:e9:4a:7a:23:94:71:80:f2:28:0f:46:35:4d:b5:d9:
c1:8f:9a:e9:8b:93:60:95:a0:ec:1b:da:f4:e5:12:21:64:1e:
cc:1d:af:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:19:16 2026 by rpki-client