Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
File: DwxSlP25wrH3QxZPyWDAB-a_5gE.mft (raw, json)
Hash identifier: M5ZiMt+poGjXgcalq4Q7utZKi9SUkJsqr5nNOEMWkrE=
Subject key identifier: BA:66:AA:C7:9B:DA:18:17:35:79:8F:51:16:22:5D:57:D4:93:33:3C
Authority key identifier: 0F:0C:52:94:FD:B9:C2:B1:F7:43:16:4F:C9:60:C0:07:E6:BF:E6:01
Certificate issuer: /CN=0f0c5294fdb9c2b1f743164fc960c007e6bfe601
Certificate serial: 01A001011B8A7B71D7D89069E5948716A176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
Manifest number: 19FD
Signing time: Fri 14 Aug 2026 16:00:44 +0000
Manifest this update: Fri 14 Aug 2026 16:00:44 +0000
Manifest next update: Sat 15 Aug 2026 16:00:44 +0000
Files and hashes: 1: DwxSlP25wrH3QxZPyWDAB-a_5gE.crl (hash: ZyzbBEKFP7ryS0YGC9U8i2p92Qltg2cGtT6xAtL1hDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:1b:8a:7b:71:d7:d8:90:69:e5:94:87:16:a1:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f0c5294fdb9c2b1f743164fc960c007e6bfe601
Validity
Not Before: Aug 14 16:00:44 2026 GMT
Not After : Aug 15 16:00:44 2026 GMT
Subject: CN=ba66aac79bda181735798f5116225d57d493333c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bb:f9:3b:5a:4e:79:23:e7:6b:bd:73:1f:38:
fc:9f:3c:65:75:08:40:e9:a8:a6:04:07:09:da:53:
4c:79:5c:78:b3:17:5d:d6:e2:25:08:bb:49:14:ad:
e2:9b:03:bf:53:95:a2:2e:82:f0:5f:1c:8a:af:41:
72:15:04:a2:2c:30:9c:3d:14:d1:80:d8:40:93:c0:
16:fe:ae:f7:47:4e:a8:77:65:63:f7:c2:8e:af:a9:
e3:6f:e8:4b:e8:53:65:29:4c:21:dc:20:cb:73:05:
96:f4:92:f1:22:a8:2b:f5:45:ef:12:21:55:ed:44:
ed:f5:1a:9e:38:bd:fa:7c:99:23:ec:62:2a:22:fe:
30:fa:7c:06:6f:69:c2:43:e8:e2:b1:eb:42:74:fa:
de:c5:be:b0:9b:fa:9d:fa:1e:c7:0e:58:02:8d:da:
5b:a4:33:dd:6b:0c:8d:29:cb:19:17:7a:30:31:1d:
2c:47:da:27:d6:76:7f:d7:b9:dd:2b:89:6d:81:8b:
fe:b6:f1:55:ea:19:a1:e4:5f:ac:33:06:08:b9:ba:
35:93:d6:b0:f0:ab:9d:d3:3e:cf:7d:e4:c0:7a:04:
60:ea:fd:cb:f5:7d:d1:69:5c:11:b5:f1:5a:81:42:
e8:f8:81:2f:64:71:d7:aa:2f:e6:78:b5:3c:40:3a:
0b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:66:AA:C7:9B:DA:18:17:35:79:8F:51:16:22:5D:57:D4:93:33:3C
X509v3 Authority Key Identifier:
keyid:0F:0C:52:94:FD:B9:C2:B1:F7:43:16:4F:C9:60:C0:07:E6:BF:E6:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:87:36:38:03:1a:e2:98:c8:63:d4:9c:f1:a1:4a:13:6b:31:
f9:ee:88:41:b0:00:ca:f1:da:90:ac:a9:5f:b6:de:e2:4e:44:
c2:0f:32:1d:6e:c8:c5:9f:bc:d6:15:f3:4d:d0:9a:a0:15:31:
3a:8d:60:2f:27:7c:11:12:e7:84:f7:dc:99:d3:09:41:5a:a0:
61:7b:6b:95:72:18:7e:d0:34:42:c8:b7:1c:b2:fb:e2:49:61:
df:96:de:56:94:14:10:21:06:f3:40:4d:7e:08:2e:2b:a7:e9:
a1:4d:12:7f:0d:24:93:93:e3:b2:8d:b5:87:95:6f:9e:e9:74:
3c:00:aa:5d:56:e9:8f:a3:74:94:44:f2:61:71:a1:d8:0d:ea:
dd:f0:83:48:ad:c5:45:2f:4b:aa:39:b9:a1:3a:78:d4:f0:37:
c9:5b:db:ad:c5:93:5a:3d:b7:a8:86:c4:f5:7b:8b:6f:af:98:
e6:e1:dd:4c:c2:25:62:4f:99:d0:6c:6f:b7:5d:b8:8a:c0:c5:
8d:49:80:18:95:ff:38:4e:cd:dc:e8:3d:f9:7e:ee:ab:12:26:
52:c2:4b:82:8e:4f:4c:01:1a:43:04:c9:72:03:a1:dd:45:56:
fc:1b:07:86:df:87:a1:08:be:fd:26:db:d5:18:34:72:d8:55:
d2:a5:5e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:21:23 2026 by rpki-client