Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
File: DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft (raw, json)
Hash identifier: WYoaN5nGDswuhO30faoswtP7vstEwLGgH0VkEbhV+tE=
Subject key identifier: 8E:CF:32:52:2C:56:D0:47:D4:21:07:75:23:67:EC:47:12:83:4C:54
Authority key identifier: 0F:29:13:E3:15:31:01:9A:43:28:19:06:55:B4:5D:D9:6B:DD:2C:9E
Certificate issuer: /CN=0f2913e31531019a4328190655b45dd96bdd2c9e
Certificate serial: 01A00025B0E801F43550C3EC7295BAAE8488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
Manifest number: 0A19
Signing time: Fri 14 Aug 2026 12:01:05 +0000
Manifest this update: Fri 14 Aug 2026 12:01:05 +0000
Manifest next update: Sat 15 Aug 2026 12:01:05 +0000
Files and hashes: 1: DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl (hash: c82Y/sYJHeqpBvoiE+W3Ud778StVVHXFlJHF9zH3Rak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 12:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:25:b0:e8:01:f4:35:50:c3:ec:72:95:ba:ae:84:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f2913e31531019a4328190655b45dd96bdd2c9e
Validity
Not Before: Aug 14 12:01:05 2026 GMT
Not After : Aug 15 12:01:05 2026 GMT
Subject: CN=8ecf32522c56d047d42107752367ec4712834c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e6:b2:5d:cc:45:94:d9:39:d1:85:45:18:cd:
b6:e5:a9:f0:cf:b1:01:66:98:d4:fb:1e:ae:c2:db:
7c:a3:d6:97:3d:e7:14:b6:47:d2:74:f3:65:54:66:
d4:69:55:43:fd:97:d1:cb:1e:ff:f3:99:cd:15:05:
19:0a:ce:55:ec:57:d4:87:35:fa:b2:f4:47:d3:b2:
c0:8c:63:de:b6:05:43:50:33:4e:4c:d8:bb:99:f7:
6a:fa:98:13:c7:6b:65:69:ba:c4:a9:46:70:1b:0e:
1d:43:34:30:ad:b5:14:1e:3f:20:a3:48:71:f1:16:
b7:b6:5e:2a:7c:b6:e2:b8:72:0b:a7:ed:f8:e3:8e:
84:7d:36:2f:81:0b:23:e1:ad:03:f0:b2:c1:c9:a9:
23:a4:ae:1a:ad:10:93:e0:ef:ba:af:b3:da:a9:a3:
54:09:9e:c6:49:1b:cf:41:68:4a:01:14:be:40:8d:
fb:ce:e9:25:ca:71:ad:13:b9:08:70:f7:25:da:17:
a6:ea:98:18:97:21:00:4c:c8:f6:42:2b:07:19:68:
8b:1c:74:f8:e7:f0:9c:52:5c:40:05:b5:8f:f8:e7:
19:7a:f4:93:44:c1:f2:46:5e:1e:0c:a3:62:30:12:
62:b1:27:cb:00:bd:d1:17:f8:3c:66:fd:a8:13:bc:
db:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CF:32:52:2C:56:D0:47:D4:21:07:75:23:67:EC:47:12:83:4C:54
X509v3 Authority Key Identifier:
keyid:0F:29:13:E3:15:31:01:9A:43:28:19:06:55:B4:5D:D9:6B:DD:2C:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:dd:6f:80:b1:7c:71:20:c6:c7:d5:a0:9e:f0:9e:6c:6e:1a:
a0:d9:61:bb:bb:af:93:af:34:65:41:9d:b9:68:7f:bd:4f:06:
14:37:84:61:ae:85:4c:45:50:04:be:f3:4c:cb:49:5c:8a:b0:
62:47:61:50:b5:2c:db:25:b5:27:17:43:dc:21:82:ea:57:4a:
d8:71:e9:c3:ce:29:74:5b:af:2b:0f:26:38:36:3b:6e:ac:72:
34:b6:9a:1e:e6:f3:62:a9:13:b7:a2:c1:10:af:8a:cf:40:70:
c4:1f:64:be:26:b1:9b:7f:79:d5:f3:20:21:d3:40:12:0e:07:
dc:96:88:4c:8d:6f:76:19:c6:5e:1f:58:45:57:cc:29:37:8b:
31:f7:38:63:c7:99:15:71:69:da:6f:d6:8b:d3:28:9d:47:cf:
02:4d:69:bb:f3:ad:13:5d:74:78:02:ba:62:5b:9c:e7:86:cb:
46:84:35:65:44:94:0b:d0:c1:eb:fb:ca:9e:f3:f1:c4:2b:63:
35:9c:93:0f:21:53:c3:be:b5:c1:a6:d3:fb:46:7e:70:f2:96:
18:38:42:96:07:ac:f7:ea:ce:27:b6:59:8c:bf:0c:c7:5e:da:
7f:10:94:a0:cf:93:f9:3e:47:73:74:71:90:e5:42:08:4f:56:
17:67:b6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:30 2026 by rpki-client