Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
File: Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft (raw, json)
Hash identifier: LlZUxw8tK19Sql7CYsbUTuiZ4TNBaxFEzTzSLZfKStU=
Subject key identifier: 8D:F8:C9:82:59:49:0A:DC:41:BE:10:FF:23:F9:33:94:BC:66:63:48
Authority key identifier: 0E:87:E5:D3:3A:9B:28:BE:7F:1A:F8:BC:9C:13:8B:15:80:90:F1:89
Certificate issuer: /CN=0e87e5d33a9b28be7f1af8bc9c138b158090f189
Certificate serial: 019F18D6DF036AB1D1FF3DEB7ACB9E651A53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
Manifest number: 07F4
Signing time: Tue 30 Jun 2026 14:02:42 +0000
Manifest this update: Tue 30 Jun 2026 14:02:42 +0000
Manifest next update: Wed 01 Jul 2026 14:02:42 +0000
Files and hashes: 1: Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl (hash: TFMgNvw7aVj31agGIkiGDX7DWqCt0PwqsbWilTClmSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:df:03:6a:b1:d1:ff:3d:eb:7a:cb:9e:65:1a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e87e5d33a9b28be7f1af8bc9c138b158090f189
Validity
Not Before: Jun 30 14:02:42 2026 GMT
Not After : Jul 1 14:02:42 2026 GMT
Subject: CN=8df8c98259490adc41be10ff23f93394bc666348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f9:94:e7:97:f6:2d:33:1b:c7:d4:7c:20:1c:
dd:bf:d7:be:43:43:66:82:17:c1:1d:74:d8:18:69:
bc:88:83:fa:47:cb:35:0f:17:28:dc:97:98:47:5f:
02:a3:3f:9a:40:68:a6:de:9e:11:62:17:f5:30:e0:
ba:78:5f:55:58:c2:f5:b3:31:91:cd:3b:b0:e7:54:
50:dc:ed:1b:58:67:09:22:4e:b5:83:6b:21:3d:de:
5a:c9:c6:97:bb:03:97:d9:97:14:f6:93:ef:4d:fb:
c7:03:5f:9b:af:34:92:59:40:d2:2f:70:28:cf:21:
d9:78:21:ef:b6:19:24:3e:09:32:d1:98:4c:96:4f:
c6:b4:57:f7:3a:63:22:e9:d3:4c:d5:c9:51:de:7d:
b7:7c:56:e9:b3:7a:60:6d:2d:98:a0:7f:1d:cd:04:
5b:69:a8:91:5a:26:cc:15:8f:ba:aa:b2:ce:e1:15:
63:bf:a4:34:fd:f4:53:78:e7:e3:61:34:4a:35:6b:
68:5b:ce:35:be:47:2a:d5:cb:2a:f7:f8:5a:c6:43:
29:af:b7:21:76:05:e7:66:fe:ff:7c:67:e9:9b:57:
7a:d9:df:12:10:68:2e:e3:78:f9:51:6d:58:3b:9d:
65:a1:6a:d9:26:0f:98:50:af:19:32:5d:18:16:bc:
4a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F8:C9:82:59:49:0A:DC:41:BE:10:FF:23:F9:33:94:BC:66:63:48
X509v3 Authority Key Identifier:
keyid:0E:87:E5:D3:3A:9B:28:BE:7F:1A:F8:BC:9C:13:8B:15:80:90:F1:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b5:49:5d:54:9e:ac:0f:93:48:46:a3:d5:7a:74:ef:de:6a:
85:85:f2:72:2c:2d:9f:2b:d7:4c:de:8c:ac:26:f5:17:01:2e:
37:fb:07:bd:9e:ef:5f:7a:ef:fb:ba:bd:e1:0f:5e:82:38:3e:
af:8f:be:1a:c5:65:16:15:f8:06:d2:36:3d:39:3b:fc:8f:26:
e8:49:37:20:ed:79:52:59:5a:b4:b8:b6:0e:2b:17:db:5b:d9:
92:f0:4a:2a:c6:a0:58:6d:1b:6f:4e:80:38:ce:a7:6e:c1:f9:
6c:72:7f:53:f6:c0:64:fd:16:a9:f8:e4:f1:26:d0:43:05:6d:
b5:46:ad:84:31:13:a0:61:73:1d:cd:4b:6c:93:5e:fe:84:e2:
b7:3f:ac:ed:e1:83:72:c0:6e:b9:30:cf:7e:97:9c:70:79:ca:
c1:36:bf:31:e3:b7:c6:a7:28:cd:a0:06:da:81:2b:00:e3:52:
db:da:c2:b4:d3:3c:0a:87:aa:89:be:88:5e:07:51:b4:45:dd:
74:af:ef:7e:e8:d7:85:e6:5a:30:8e:de:cf:3a:89:52:dc:a8:
bd:97:5f:dc:52:9d:eb:59:3e:85:4e:76:53:26:40:7c:12:69:
cc:91:e6:70:93:30:cf:bb:aa:33:76:b7:aa:0c:c2:43:c4:d2:
83:ba:58:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:16 2026 by rpki-client