Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
File: D_HA6RHM5MRT_sKxaPbBPTbg34U.mft (raw, json)
Hash identifier: AIP8nAtCB1IhWyPagc2L1okN13MT6opoZUovUIEOqnQ=
Subject key identifier: CD:A1:65:60:92:1B:F5:E3:F3:ED:72:D4:18:8C:DA:22:C3:F9:17:D1
Authority key identifier: 0F:F1:C0:E9:11:CC:E4:C4:53:FE:C2:B1:68:F6:C1:3D:36:E0:DF:85
Certificate issuer: /CN=0ff1c0e911cce4c453fec2b168f6c13d36e0df85
Certificate serial: 019F81F95C973C66C551B47E6A9FEF5C45AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_HA6RHM5MRT_sKxaPbBPTbg34U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
Manifest number: 01D6
Signing time: Tue 21 Jul 2026 00:00:30 +0000
Manifest this update: Tue 21 Jul 2026 00:00:30 +0000
Manifest next update: Wed 22 Jul 2026 00:00:30 +0000
Files and hashes: 1: A2gg-MX124Lpmk4q6amGH364pI8.roa (hash: vW20LJAGKrZU5294D/w3GbyCDoxlRHd2AtS8gCcCOJ4=)
2: D_HA6RHM5MRT_sKxaPbBPTbg34U.crl (hash: kdkereXFZYHhXArLAPklI1zAHscqoe8nR4WQg8w2WRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_HA6RHM5MRT_sKxaPbBPTbg34U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:81:f9:5c:97:3c:66:c5:51:b4:7e:6a:9f:ef:5c:45:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff1c0e911cce4c453fec2b168f6c13d36e0df85
Validity
Not Before: Jul 21 00:00:30 2026 GMT
Not After : Jul 22 00:00:30 2026 GMT
Subject: CN=cda16560921bf5e3f3ed72d4188cda22c3f917d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e8:d5:51:22:63:fe:71:0b:d1:a8:2e:ea:0b:
ea:19:e1:8b:ad:87:4b:87:9b:50:02:d5:09:92:a2:
e5:c5:a6:52:01:b3:f6:bd:39:90:78:77:02:5f:fa:
5a:af:37:cc:5a:62:fe:be:b5:4c:27:8d:71:87:23:
c6:44:5c:ad:7f:56:c9:82:d2:e1:1c:17:41:28:4a:
19:35:39:85:13:53:1e:60:01:74:7a:8f:12:81:fa:
df:a4:a2:5f:d1:98:41:cb:24:3d:97:61:4f:a2:aa:
c8:40:c5:60:cd:d1:e0:e7:dc:7d:3c:fa:af:81:99:
c8:f0:81:63:89:95:37:a7:93:92:ad:2a:e6:0e:d3:
ec:27:9e:8f:20:f4:64:22:e5:3d:4c:04:db:6b:a5:
f0:02:08:51:f4:e1:d6:e3:e1:4e:ef:d8:17:04:2a:
b2:5d:e0:e6:85:de:08:9a:27:a2:9e:18:db:2b:52:
a0:28:af:e1:ab:24:36:b6:84:2b:a1:f6:41:87:1c:
74:52:d6:87:1c:50:e7:3f:20:d1:17:36:06:5a:6a:
64:c6:7a:39:51:54:30:a6:5b:d1:20:6e:88:36:d0:
14:48:4c:0f:ac:3d:ad:83:5d:dc:0b:9b:6b:23:4f:
10:bb:83:b1:0b:4b:7b:27:70:58:2c:f7:a5:2b:87:
06:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A1:65:60:92:1B:F5:E3:F3:ED:72:D4:18:8C:DA:22:C3:F9:17:D1
X509v3 Authority Key Identifier:
keyid:0F:F1:C0:E9:11:CC:E4:C4:53:FE:C2:B1:68:F6:C1:3D:36:E0:DF:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_HA6RHM5MRT_sKxaPbBPTbg34U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c9:c9:7b:fb:53:6f:32:e3:d4:a2:71:64:e1:b3:29:f2:42:
d2:0e:f7:92:e4:48:b0:cd:a3:32:4a:8c:a1:78:fc:0b:b3:c5:
b2:3a:8d:b4:f7:71:99:3f:1f:93:e3:4d:3a:86:84:1c:7d:82:
12:ee:d3:96:60:69:61:b9:11:18:8a:c8:ff:ed:5c:a1:05:a1:
ce:64:e2:17:e0:5b:45:e7:70:18:4a:60:f1:a0:68:48:af:71:
e9:8e:2f:62:0b:13:87:7d:2b:cd:35:22:2a:66:e7:12:a5:a7:
b2:d1:28:8d:ec:56:aa:bc:c7:63:62:a2:82:a0:48:cf:88:48:
cc:eb:78:28:13:df:24:22:3d:27:35:17:57:a8:b4:41:b9:f0:
bd:87:ef:48:46:75:c7:c7:2c:95:96:39:d9:c1:f7:44:90:44:
5d:b0:5d:03:46:82:7a:83:8e:a3:c5:6c:59:d3:b3:b7:93:6f:
87:c5:74:3a:7f:54:97:11:e3:25:68:2e:c9:a1:29:74:33:7b:
b1:65:6c:bf:f4:0e:e5:a7:2e:b2:87:46:c4:7d:eb:4c:d9:9b:
b9:85:87:5e:ca:28:7f:c0:2e:62:bf:51:3f:99:96:20:31:f2:
c5:9e:97:f3:cc:1d:f8:74:4e:73:99:c8:a4:48:87:83:e2:b7:
71:6f:48:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:08:40 2026 by rpki-client