Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.mft
File: D1PmC9pkZYSIzqajMPBcd0nVucY.mft (raw, json)
Hash identifier: By0NBX1oLPF5I1sTxSSOzlfv4JjKkuBOo+zE2ugcF4Q=
Subject key identifier: C5:FB:A9:DF:21:0A:56:2D:22:C7:EA:4E:D4:CB:A4:5E:FA:A0:EB:C9
Authority key identifier: 0F:53:E6:0B:DA:64:65:84:88:CE:A6:A3:30:F0:5C:77:49:D5:B9:C6
Certificate issuer: /CN=0f53e60bda64658488cea6a330f05c7749d5b9c6
Certificate serial: 019FA1BB6E59375BA677C39B34B35004CF92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1PmC9pkZYSIzqajMPBcd0nVucY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.mft
Manifest number: F4
Signing time: Mon 27 Jul 2026 04:00:42 +0000
Manifest this update: Mon 27 Jul 2026 04:00:42 +0000
Manifest next update: Tue 28 Jul 2026 04:00:42 +0000
Files and hashes: 1: D1PmC9pkZYSIzqajMPBcd0nVucY.crl (hash: Q0pMwH0TomjSvZaSs4+5ZL/v9uHS34FTveq16eVcgc0=)
2: _tT1XC7nkQRWgQdxKibbMXrzVoc.roa (hash: zg0b/n4wXZx1538KhR67xdLnhn+vJRWK90TV+fz8uiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1PmC9pkZYSIzqajMPBcd0nVucY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:6e:59:37:5b:a6:77:c3:9b:34:b3:50:04:cf:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f53e60bda64658488cea6a330f05c7749d5b9c6
Validity
Not Before: Jul 27 04:00:42 2026 GMT
Not After : Jul 28 04:00:42 2026 GMT
Subject: CN=c5fba9df210a562d22c7ea4ed4cba45efaa0ebc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:76:8c:ef:99:d4:6a:c1:98:0b:b0:1f:03:dd:
e5:fc:64:72:de:14:19:d4:93:58:6a:4f:9c:e2:ce:
d5:b4:69:55:ba:23:50:f8:2b:d6:51:c2:df:79:91:
61:3d:44:de:ce:6c:50:0f:08:ed:9b:fc:e0:d1:ee:
fb:d6:c1:f3:ce:dd:e0:45:bb:da:a5:75:8a:b5:84:
e7:cd:dc:5f:72:f4:56:90:c4:a0:da:1f:89:2e:ea:
f4:4c:6e:a7:3c:4a:a8:94:29:41:28:1e:07:a5:04:
fb:34:3f:1b:20:59:0f:23:68:f8:be:08:30:eb:97:
16:a0:4d:ab:ab:a9:e2:8b:fd:a5:be:03:e6:33:a7:
4b:0b:8f:60:38:6e:96:d4:45:3c:66:ad:e1:1a:13:
7e:5e:59:11:94:55:ba:9c:25:ba:df:84:61:06:31:
66:1c:4d:d6:1b:7f:56:0f:42:cd:47:8c:cb:d3:f2:
5d:c9:c9:62:48:45:a9:f4:63:4b:e8:5a:3d:99:37:
b2:6f:9a:30:ba:2b:c9:99:68:d2:f8:5b:6e:47:ae:
25:0d:32:38:36:9f:31:18:b0:ae:d1:e8:2a:e1:19:
96:c6:9e:93:5d:d5:a2:1b:be:66:26:ec:d6:ca:59:
93:33:5a:ca:e6:47:0f:b1:72:80:40:e9:42:a4:6f:
52:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:FB:A9:DF:21:0A:56:2D:22:C7:EA:4E:D4:CB:A4:5E:FA:A0:EB:C9
X509v3 Authority Key Identifier:
keyid:0F:53:E6:0B:DA:64:65:84:88:CE:A6:A3:30:F0:5C:77:49:D5:B9:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1PmC9pkZYSIzqajMPBcd0nVucY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:3a:8f:bf:ae:02:04:f3:6d:22:bf:58:dc:06:78:54:97:65:
ae:c8:f4:79:dd:d8:c2:99:9a:0d:c6:38:e9:c8:16:9b:31:4f:
e4:ed:69:11:35:24:ab:b5:20:74:d0:72:d7:db:29:fb:2d:b5:
80:72:ae:c5:35:f8:91:56:d4:39:2a:24:a6:9e:10:49:1c:47:
41:68:6e:8c:bc:d4:da:df:0c:db:d4:d6:62:45:45:85:0c:71:
d8:16:d8:d5:e9:99:3b:d9:a8:56:00:d1:b3:b1:04:e0:a0:ef:
2c:93:c3:ad:63:5e:22:05:27:92:1c:a9:ad:c5:71:3d:99:14:
c5:f1:e9:a7:5e:2f:6b:26:ca:1f:92:f9:98:b6:02:81:7e:6d:
d3:10:58:c2:ef:d8:e3:74:80:21:4d:f8:5e:f2:4b:de:ca:1f:
f5:a8:90:e1:de:93:94:80:6a:fb:d9:7a:15:ba:95:78:74:ae:
b0:67:d0:a6:79:56:88:53:ca:4c:0a:49:74:fb:6a:21:4a:8b:
79:27:1b:b8:b0:d8:73:08:dc:b6:f7:87:98:8e:7c:fd:87:e5:
d7:5d:e7:54:74:84:a3:4c:73:b3:0c:a4:75:3b:94:d3:f9:63:
47:42:24:7d:45:f7:52:20:79:fe:88:5d:65:70:76:37:5b:5c:
02:20:ad:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:46:44 2026 by rpki-client