Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
File: DtjJoWGXLWi0RTPg4x9R5NzlunU.mft (raw, json)
Hash identifier: 1XUBmmzBtHaOFVzWWOBeohkmxDsiayU/m/ENEvFoAQ4=
Subject key identifier: EE:75:F0:87:35:10:FB:CF:B8:74:F0:43:3E:B0:09:F2:1C:08:F0:57
Authority key identifier: 0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75
Certificate issuer: /CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
Certificate serial: 01A00101A7AB423DDA9AE47F3EAB00778873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
Manifest number: 19FB
Signing time: Fri 14 Aug 2026 16:01:20 +0000
Manifest this update: Fri 14 Aug 2026 16:01:20 +0000
Manifest next update: Sat 15 Aug 2026 16:01:20 +0000
Files and hashes: 1: DtjJoWGXLWi0RTPg4x9R5NzlunU.crl (hash: nlqcpqEvRf6Lu5MzPyj1V53W3Eq9MpvdmN/vICpdwfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:a7:ab:42:3d:da:9a:e4:7f:3e:ab:00:77:88:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
Validity
Not Before: Aug 14 16:01:20 2026 GMT
Not After : Aug 15 16:01:20 2026 GMT
Subject: CN=ee75f0873510fbcfb874f0433eb009f21c08f057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f6:95:71:ad:2f:24:b8:c5:80:f0:c7:3d:b7:
4b:ca:da:bf:13:b0:84:3b:8c:8e:1f:a8:81:9b:2d:
ed:45:c5:b8:06:62:e3:6e:e7:9a:e4:49:76:d7:d0:
2a:3c:da:4f:e2:02:2e:fc:db:d5:d3:5e:5f:58:cb:
37:a3:2f:cd:a2:31:e4:a9:6e:34:49:20:5d:6b:39:
20:fe:00:77:1b:9b:89:ee:d9:fc:c8:4d:51:aa:75:
23:59:aa:97:7e:94:65:90:f2:68:c6:9b:86:e4:3a:
23:b2:d5:78:34:1a:2e:7a:d7:79:2b:49:ab:48:ff:
30:8e:88:e9:b0:ba:cb:ce:ee:47:bd:d9:95:c4:52:
59:62:95:8a:09:27:7b:ba:3d:e3:5f:3f:89:54:0c:
da:88:35:2c:dc:6c:9a:f2:77:df:30:01:5f:8e:9f:
b4:9a:be:fd:58:9d:31:5d:d8:6f:c7:a8:de:4c:89:
8d:f8:95:cb:3f:cd:75:49:88:f2:d6:70:80:33:12:
f7:9a:42:ce:5b:54:98:3b:50:30:2d:24:e9:d7:55:
33:10:2a:8c:e1:c3:e6:cd:60:eb:6a:b1:41:39:c4:
e9:1d:d3:94:cd:56:2d:c3:59:ed:03:3b:a8:1f:0a:
ca:fa:6f:40:35:a8:fe:82:9e:0c:21:bb:11:32:94:
cf:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:75:F0:87:35:10:FB:CF:B8:74:F0:43:3E:B0:09:F2:1C:08:F0:57
X509v3 Authority Key Identifier:
keyid:0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:99:8e:cc:97:78:1b:c2:17:0f:32:bd:f4:ad:a0:b5:ac:be:
b9:56:f2:0d:38:7b:21:8f:6b:fd:ca:bf:0a:75:fb:9e:1d:20:
2b:71:5d:96:29:14:4c:4f:5e:3f:6d:e2:a7:63:09:db:68:bc:
da:7f:a0:0c:47:d0:b4:8d:f0:ed:c8:73:11:e6:7b:7a:ba:0f:
b4:94:84:25:6c:36:aa:21:b7:a0:88:cf:62:e5:4a:c0:8d:ff:
10:e5:8f:07:ed:00:f5:96:3b:da:95:1b:f0:5c:5a:5e:4b:f7:
6b:48:16:f0:79:24:c0:b7:28:2d:5c:bc:85:73:18:4d:a3:ea:
75:89:f8:83:cb:29:50:50:9c:7d:26:dd:61:80:27:ab:0e:ac:
3d:79:6c:4d:56:49:88:b8:d1:53:af:eb:12:ad:75:77:bf:48:
64:c4:7a:32:e7:ed:b1:2b:75:a9:d6:39:54:ea:c2:15:98:58:
5f:20:76:02:c8:69:cd:4a:a0:4b:e5:0f:d7:49:84:90:bc:20:
14:70:fa:35:67:5d:c6:13:da:d1:22:63:76:e0:89:bc:f9:7e:
69:9e:5d:78:df:22:2d:a3:f5:f2:45:c6:23:91:0c:7b:0d:c4:
c4:ff:65:de:2c:8a:9d:d3:f3:21:6c:7b:f5:dc:1c:5b:13:9f:
46:09:00:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:27:08 2026 by rpki-client