Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft
File: D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft (raw, json)
Hash identifier: h5/z/PHkhpb2alxDSJTlBT+HxXCujoGsQXwjeN/XJTU=
Subject key identifier: 02:90:36:A1:BC:66:5A:9A:F5:CE:5F:B6:AF:27:AB:5C:39:DD:4F:B9
Authority key identifier: 0F:B7:F1:FD:87:68:E2:11:63:54:2A:FC:F5:5A:83:C6:98:02:15:A3
Certificate issuer: /CN=0fb7f1fd8768e21163542afcf55a83c6980215a3
Certificate serial: 019E30725CB969215DAF199981DAF9838A76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7fx_Ydo4hFjVCr89VqDxpgCFaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft
Manifest number: 0A6A
Signing time: Sat 16 May 2026 11:01:01 +0000
Manifest this update: Sat 16 May 2026 11:01:01 +0000
Manifest next update: Sun 17 May 2026 11:01:01 +0000
Files and hashes: 1: D7fx_Ydo4hFjVCr89VqDxpgCFaM.crl (hash: GlcdyBTApxMTwJuZt/KEMQsstps+ctdnE4Ujl0Qk4Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/D7fx_Ydo4hFjVCr89VqDxpgCFaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:5c:b9:69:21:5d:af:19:99:81:da:f9:83:8a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fb7f1fd8768e21163542afcf55a83c6980215a3
Validity
Not Before: May 16 11:01:01 2026 GMT
Not After : May 17 11:01:01 2026 GMT
Subject: CN=029036a1bc665a9af5ce5fb6af27ab5c39dd4fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e2:e1:a3:e6:f4:b0:e0:74:8c:10:5d:fb:b9:
ce:6e:fd:fa:12:23:da:2e:eb:fc:8a:af:bf:74:0d:
b0:c9:7b:af:0d:73:54:5e:b1:61:d6:da:93:4a:5d:
32:7f:7c:af:dd:71:a1:e2:71:8a:9d:83:61:b7:c9:
d4:04:f6:b6:f4:37:f2:66:b8:e4:27:3a:97:fe:bd:
fc:8d:f9:7f:18:22:2b:b3:ec:3c:46:0e:43:5d:ab:
58:b3:3c:cc:62:c7:3d:f6:a4:80:4a:59:34:49:56:
05:9a:9c:64:3e:f4:5a:0b:13:8e:5c:be:e5:05:55:
91:86:5e:88:bb:a7:7f:df:41:5e:1a:bf:cd:a6:06:
d2:d4:1d:0b:f7:32:39:e2:2f:94:7d:e9:50:a2:8c:
8d:58:4e:9a:84:32:34:5a:22:52:0e:81:f5:a1:27:
75:5c:41:0f:78:69:b6:c8:59:a8:08:d6:eb:71:8a:
50:fd:37:04:c3:1e:0a:25:97:2f:eb:32:95:5a:9f:
4c:d1:12:7e:ee:a0:1c:8a:87:98:39:5a:a2:45:bb:
8d:94:95:93:62:4c:aa:98:bc:da:d9:6d:c9:a3:d8:
23:77:e8:66:48:f8:d4:7a:43:e2:0b:e2:2c:3e:c2:
90:a8:04:2a:a9:d2:69:3a:4b:79:72:3b:6f:5e:e8:
5a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:90:36:A1:BC:66:5A:9A:F5:CE:5F:B6:AF:27:AB:5C:39:DD:4F:B9
X509v3 Authority Key Identifier:
keyid:0F:B7:F1:FD:87:68:E2:11:63:54:2A:FC:F5:5A:83:C6:98:02:15:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7fx_Ydo4hFjVCr89VqDxpgCFaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:6c:9b:8c:ee:3e:02:2b:a1:f7:e7:e9:42:d7:8b:18:07:ac:
8a:9b:09:31:8b:84:af:9c:76:d2:d7:60:46:f1:3b:2d:e9:91:
03:ac:02:e6:8a:8f:67:96:30:c3:af:8e:5a:a8:c3:a0:9c:47:
e6:89:7a:25:15:95:66:a9:1c:14:fe:d1:d7:6d:87:36:f3:c4:
46:8b:fb:f6:7f:44:cb:04:79:0d:79:1b:df:61:4b:db:53:33:
e5:e5:d3:23:d1:2b:9e:08:2e:e2:5c:e6:35:c4:53:a3:ef:34:
b0:81:58:8b:ec:03:aa:98:51:cd:f7:f3:08:5d:b4:62:2c:17:
71:24:ce:7a:9c:3a:54:f3:80:eb:a6:0f:85:f2:9c:35:55:28:
ce:56:92:da:ee:a8:fc:dd:bb:7f:b3:e9:c3:4d:7d:16:dc:9a:
95:a5:3a:12:c3:3f:1a:0d:b2:f0:4d:6d:e5:02:d8:81:8e:aa:
8e:df:4f:4c:0b:4a:fa:5b:c2:44:46:5b:40:d3:e2:0e:38:8f:
ee:64:20:b5:39:c7:88:98:0d:65:9c:60:b9:66:86:10:98:1f:
4f:73:3f:d9:11:21:df:ff:f9:b7:c8:aa:fb:3d:44:e3:ac:d1:
71:c7:36:ca:d6:15:f8:7e:89:ec:4a:f9:10:70:9c:31:eb:f9:
24:c4:f8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:23:22 2026 by rpki-client