Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/66b77e-5a29-47b5-b5a7-007e08b3af8f/1/DmuhOkKdJETI5sfYf-vxnVD-dQo.mft
File: DmuhOkKdJETI5sfYf-vxnVD-dQo.mft (raw, json)
Hash identifier: 0K1izmLTUKMUltERQH5WNzSttO9floGiKI1H3jmfPDo=
Subject key identifier: 4D:1E:8F:85:82:C7:44:85:6E:F1:18:C4:01:74:CB:02:B8:4C:8E:BD
Authority key identifier: 0E:6B:A1:3A:42:9D:24:44:C8:E6:C7:D8:7F:EB:F1:9D:50:FE:75:0A
Certificate issuer: /CN=0e6ba13a429d2444c8e6c7d87febf19d50fe750a
Certificate serial: 019F17545C5027E8D4C89528FD77BAF02C36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmuhOkKdJETI5sfYf-vxnVD-dQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/66b77e-5a29-47b5-b5a7-007e08b3af8f/1/DmuhOkKdJETI5sfYf-vxnVD-dQo.mft
Manifest number: 1984
Signing time: Tue 30 Jun 2026 07:00:32 +0000
Manifest this update: Tue 30 Jun 2026 07:00:32 +0000
Manifest next update: Wed 01 Jul 2026 07:00:32 +0000
Files and hashes: 1: DmuhOkKdJETI5sfYf-vxnVD-dQo.crl (hash: VS8usptewlqAgtbS69AIgPVUDJuaXqPyBrBECoGS9HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/66b77e-5a29-47b5-b5a7-007e08b3af8f/1/DmuhOkKdJETI5sfYf-vxnVD-dQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/66b77e-5a29-47b5-b5a7-007e08b3af8f/1/DmuhOkKdJETI5sfYf-vxnVD-dQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DmuhOkKdJETI5sfYf-vxnVD-dQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 07:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:54:5c:50:27:e8:d4:c8:95:28:fd:77:ba:f0:2c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e6ba13a429d2444c8e6c7d87febf19d50fe750a
Validity
Not Before: Jun 30 07:00:32 2026 GMT
Not After : Jul 1 07:00:32 2026 GMT
Subject: CN=4d1e8f8582c744856ef118c40174cb02b84c8ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:41:d1:97:22:bc:17:46:ae:1a:23:5c:b0:b8:
f2:f7:b9:8a:ab:d8:39:0c:6c:ea:2f:08:91:34:42:
25:f7:22:1e:bc:6b:f8:ef:1b:ff:e6:7a:67:07:8d:
9b:6c:35:e4:b1:83:72:69:d5:a1:03:71:4d:9b:7d:
91:e3:4a:9e:7b:fa:8d:34:fa:12:26:3b:2c:fb:79:
80:88:46:2b:ef:65:ad:b5:df:9d:aa:11:4e:2d:57:
da:fb:66:d0:01:7a:3d:4a:cb:55:cc:2d:a0:d8:fa:
0f:fd:04:57:04:86:3f:2f:3d:8c:2c:0a:d4:f9:ca:
cf:3a:45:ab:bc:98:00:aa:5a:e9:15:72:3f:30:b7:
7d:5e:02:05:9a:0e:bb:60:04:c1:d6:0c:79:e6:94:
63:a5:58:53:78:06:2e:7f:57:82:3c:9c:d7:af:c2:
1d:10:1e:eb:c9:53:e4:43:17:00:28:89:f0:1f:19:
52:2a:4a:54:dc:b6:f2:4b:28:87:53:59:bd:2d:e2:
98:7c:74:ef:99:3a:1f:72:ba:71:43:d8:1a:45:6c:
51:a7:a5:4a:1a:f0:ca:7d:ba:6b:fe:65:4e:0c:4b:
8c:cd:09:92:c6:5a:d5:cf:de:36:73:cf:14:84:68:
a0:f2:ec:05:d4:92:f2:71:92:62:29:0c:18:f5:44:
d4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:1E:8F:85:82:C7:44:85:6E:F1:18:C4:01:74:CB:02:B8:4C:8E:BD
X509v3 Authority Key Identifier:
keyid:0E:6B:A1:3A:42:9D:24:44:C8:E6:C7:D8:7F:EB:F1:9D:50:FE:75:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmuhOkKdJETI5sfYf-vxnVD-dQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/66b77e-5a29-47b5-b5a7-007e08b3af8f/1/DmuhOkKdJETI5sfYf-vxnVD-dQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/66b77e-5a29-47b5-b5a7-007e08b3af8f/1/DmuhOkKdJETI5sfYf-vxnVD-dQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:fd:c4:26:41:a6:3e:c1:f1:77:99:58:eb:2e:48:f9:ea:19:
36:0f:88:e1:bc:55:cd:93:2d:30:e9:a5:a2:db:f6:15:76:be:
02:95:6f:91:48:fd:22:ed:59:88:4c:a7:38:da:fa:c5:6a:1a:
2b:9d:0a:18:ca:9d:a4:db:b5:54:56:54:83:d8:9e:68:38:5b:
7f:c4:84:75:ae:d4:d9:4a:f0:64:71:ef:b4:c4:61:52:ab:a2:
63:9c:71:50:ca:71:9d:6c:cf:6b:5b:81:54:59:c6:66:62:d7:
1b:1c:df:60:14:6b:20:2e:4f:96:c4:e4:35:0c:7c:54:c8:c2:
84:8d:48:fe:35:50:82:45:da:98:ac:08:1e:fd:74:01:fb:b7:
5f:0b:1e:b5:4d:fc:50:04:a4:b2:43:69:c3:8f:45:9c:ee:3c:
e6:22:62:d5:73:81:a5:c4:c9:7c:27:e5:7f:04:49:c9:05:d6:
d5:2d:1f:9e:58:86:85:13:a9:30:32:10:c9:e5:7e:87:73:57:
66:54:0a:ac:4d:b2:0c:a2:e0:1e:5d:95:4b:a8:95:85:11:90:
f9:95:98:eb:34:04:f4:52:e5:59:f5:1a:8a:1f:eb:2e:b1:aa:
c7:00:cf:f0:c0:3c:56:f3:db:57:9d:93:a5:1b:5f:0d:ef:cc:
f9:0a:6e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:22 2026 by rpki-client