Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
File: DR7vsZI4vpruN5lb700q_Ref8sw.mft (raw, json)
Hash identifier: KY+3K6PV7zDOfWCrzlVAJfPL51kb7PvowzpVxJBagQ4=
Subject key identifier: 3F:A0:1B:96:3A:B1:B1:EB:04:F5:9C:1A:B0:AB:32:A2:35:E8:A3:FB
Authority key identifier: 0D:1E:EF:B1:92:38:BE:9A:EE:37:99:5B:EF:4D:2A:FD:17:9F:F2:CC
Certificate issuer: /CN=0d1eefb19238be9aee37995bef4d2afd179ff2cc
Certificate serial: 01A00101BF8BF421C480D04BB54FF1298EE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DR7vsZI4vpruN5lb700q_Ref8sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
Manifest number: 10A4
Signing time: Fri 14 Aug 2026 16:01:26 +0000
Manifest this update: Fri 14 Aug 2026 16:01:26 +0000
Manifest next update: Sat 15 Aug 2026 16:01:26 +0000
Files and hashes: 1: DR7vsZI4vpruN5lb700q_Ref8sw.crl (hash: 7XT2FbmkZ+qHmExHDKjXRQBeLCBkP/VKKu0pDqpdtfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DR7vsZI4vpruN5lb700q_Ref8sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:bf:8b:f4:21:c4:80:d0:4b:b5:4f:f1:29:8e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1eefb19238be9aee37995bef4d2afd179ff2cc
Validity
Not Before: Aug 14 16:01:26 2026 GMT
Not After : Aug 15 16:01:26 2026 GMT
Subject: CN=3fa01b963ab1b1eb04f59c1ab0ab32a235e8a3fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:25:6c:08:5e:b0:b9:be:c3:98:96:d6:61:d4:
52:a5:71:d5:0e:b8:2a:91:bc:3d:a8:55:01:79:37:
a5:d7:c5:0c:99:5a:52:72:c6:78:28:7e:57:9f:9f:
78:9c:7e:d5:d5:15:60:45:bf:1c:4b:82:df:42:fc:
76:ee:5b:08:72:78:75:4d:8e:dc:6e:4b:68:ad:d0:
b9:e4:b7:8f:7c:f9:ba:08:ef:b7:3d:53:d9:a8:c4:
6d:2c:a6:fa:2a:33:4b:df:93:26:68:4f:bb:b3:77:
45:c4:04:b7:76:73:ff:cc:50:26:02:e7:d0:2b:8d:
c5:58:c0:b3:ee:83:26:3c:45:09:22:06:a4:8f:24:
a0:5b:0f:40:db:0a:14:90:39:cb:fb:be:3a:54:fd:
5a:ca:55:5b:03:c9:86:c2:a1:d7:ac:60:81:7d:00:
25:48:69:0c:38:6f:af:5b:04:a6:bb:04:09:24:b3:
6b:25:00:ca:8f:c2:34:2d:23:c2:27:0e:39:49:94:
de:e4:da:0e:15:6b:44:dd:67:39:7c:57:23:d9:1c:
63:7c:2d:d3:b5:06:f9:9a:db:d3:65:9f:54:67:e5:
96:cd:9f:29:28:f2:b4:82:f6:89:53:e9:9b:ea:78:
6c:47:4d:e1:6e:b5:a2:09:a9:8f:ac:f1:dc:9d:95:
99:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A0:1B:96:3A:B1:B1:EB:04:F5:9C:1A:B0:AB:32:A2:35:E8:A3:FB
X509v3 Authority Key Identifier:
keyid:0D:1E:EF:B1:92:38:BE:9A:EE:37:99:5B:EF:4D:2A:FD:17:9F:F2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DR7vsZI4vpruN5lb700q_Ref8sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:89:c6:8b:be:95:a5:ec:f4:35:03:03:c1:91:16:eb:1d:f9:
53:89:6e:59:88:59:0a:ee:6a:96:be:aa:dc:31:95:53:eb:c5:
c7:8e:a8:0e:a8:bc:af:4f:0d:f5:2b:67:0a:b1:92:f8:fb:b9:
d5:f3:5a:80:7a:d2:5a:84:b8:0b:7a:c9:3d:2a:2b:f0:60:7c:
96:70:31:7d:1a:7c:0c:18:80:a6:2e:5e:1b:a1:91:8f:e9:60:
3d:d4:33:63:6b:56:49:5c:a6:65:03:cf:73:d4:05:30:47:16:
ad:6b:9c:97:a2:76:48:e4:28:73:15:8b:ea:dd:a9:08:2d:a1:
41:31:19:d2:ac:d6:7a:22:13:c7:16:9f:c0:1a:c9:43:be:8c:
86:ba:12:e8:71:36:ee:64:1e:f4:a1:79:4c:92:f1:28:af:65:
a8:d2:66:fc:65:29:b6:9e:40:69:97:3c:2c:ec:3b:b2:d6:f7:
a2:90:9a:a1:54:27:aa:8d:a7:0d:77:86:84:ee:fe:1c:29:54:
e9:89:f6:1e:32:65:67:db:f9:4a:8e:23:45:8d:b2:35:b6:e5:
09:bd:76:b1:66:75:61:1e:4d:58:03:7c:34:82:ab:0c:44:ee:
8f:3d:66:29:01:ea:04:df:ac:c6:9d:7e:b6:f2:60:82:63:ce:
ea:62:be:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:46 2026 by rpki-client