Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
File: Dp842O8xOufFpwiU9m6HGjMYA_8.mft (raw, json)
Hash identifier: bzY4Dxg1T+0WWul4KGSv69DVHPaY6jyZCb6VOozwLRg=
Subject key identifier: F6:37:8C:B7:83:DE:B6:8B:CD:C3:8F:72:1F:11:C8:E3:64:E2:3A:87
Authority key identifier: 0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF
Certificate issuer: /CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff
Certificate serial: 01A0024A82F9670A361487A6DE8B4F120E68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
Manifest number: 19FE
Signing time: Fri 14 Aug 2026 22:00:32 +0000
Manifest this update: Fri 14 Aug 2026 22:00:32 +0000
Manifest next update: Sat 15 Aug 2026 22:00:32 +0000
Files and hashes: 1: Dp842O8xOufFpwiU9m6HGjMYA_8.crl (hash: uwLPEdTR8pSWWEwf7/8C4zWjM/atCn5s5rL5IaqFQrc=)
2: HxYUvq4j2kjQjb7fshoqtr7XjZM.roa (hash: cwIpRvWEll/venDzRwZfRL54RVOPqOWPtG5IFPsqVFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4a:82:f9:67:0a:36:14:87:a6:de:8b:4f:12:0e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff
Validity
Not Before: Aug 14 22:00:32 2026 GMT
Not After : Aug 15 22:00:32 2026 GMT
Subject: CN=f6378cb783deb68bcdc38f721f11c8e364e23a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:35:f3:a3:21:15:9f:77:35:0f:02:4e:a4:7f:
c8:ed:12:0d:b2:a1:a7:94:44:c7:7a:21:ee:0a:1b:
0f:5c:be:8c:e8:4c:ba:79:c9:3d:17:b5:f4:10:0d:
02:c0:08:12:05:4c:ff:e9:03:df:e7:83:4e:8e:e8:
30:b1:1b:bf:eb:98:31:b6:89:08:38:a4:ea:84:52:
33:34:e9:e8:49:ab:ee:5c:01:88:9b:be:16:b4:9b:
29:b7:24:e6:ca:c7:44:1b:c3:d5:07:ad:14:96:61:
e9:94:60:dd:6c:b4:9c:7c:84:76:7a:c1:93:7d:e1:
77:fd:9b:a9:48:36:1b:14:b7:19:0e:0d:10:ab:c9:
f4:d7:72:12:50:3f:d6:27:04:46:8f:7d:c2:cf:56:
c1:e1:28:e9:5a:50:b6:15:ac:46:b5:0f:b7:0a:88:
0f:51:43:da:41:3f:ee:13:67:5d:43:6b:70:c9:18:
66:7f:49:e9:a3:ec:28:7c:41:ae:a3:82:95:ac:ab:
d6:b6:2e:11:1c:43:d0:f5:35:51:d5:71:a0:eb:26:
d7:21:b6:4a:68:d7:a6:ea:2f:67:e7:6a:38:f5:73:
67:39:d2:4a:6d:39:39:28:3e:18:b5:4c:7a:46:2f:
18:5c:47:f6:89:ad:08:8d:f3:58:b1:56:22:d7:b9:
e7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:37:8C:B7:83:DE:B6:8B:CD:C3:8F:72:1F:11:C8:E3:64:E2:3A:87
X509v3 Authority Key Identifier:
keyid:0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:c3:ef:a8:5a:96:e7:13:57:8d:e4:1c:0e:7e:b3:61:35:2a:
4d:15:3c:25:6b:c8:d3:9f:9b:44:25:55:1e:0d:2c:59:db:d1:
a5:2b:f4:eb:00:f6:a8:b5:15:6d:cf:1e:18:2e:81:36:59:d8:
9d:3a:f4:14:40:88:0f:9c:bd:f0:ff:5f:d6:e9:5c:0b:ab:e1:
82:27:8a:c1:12:2b:07:9c:c6:d5:76:38:c9:3a:8d:83:32:54:
90:6a:13:02:a4:1f:8f:ac:f4:48:6b:59:13:18:5a:f3:9e:7c:
17:04:c4:37:15:a5:3c:fd:e4:0d:a7:9a:00:ec:b8:e7:bf:7d:
00:9f:a3:a5:50:57:0f:16:dc:36:0b:1c:e9:3a:db:8a:15:41:
fe:27:27:54:ec:89:92:81:40:55:4f:4b:02:69:b5:94:2b:a3:
6a:f4:c3:2d:b5:4a:04:b9:62:1b:1f:49:16:85:44:2f:cc:57:
6d:88:96:da:59:4c:b3:a9:58:01:0d:4a:98:f5:82:c9:d7:0d:
a7:2a:50:69:30:e5:a9:7f:0c:d9:31:d8:bf:75:7d:e4:53:24:
6b:d1:53:01:cf:db:53:df:96:4d:e2:56:72:08:88:15:6c:2b:
f1:5b:44:a3:f1:f6:d0:53:e0:28:e9:55:fe:74:19:5a:bf:fb:
1c:01:0d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:31:38 2026 by rpki-client