Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/671bac-9f98-440e-87b7-f094069675e3/1/D2HrqF8lrXvk2foP9UUoqUorNjc.mft
File: D2HrqF8lrXvk2foP9UUoqUorNjc.mft (raw, json)
Hash identifier: WAdB1lM4limkfvVWMF2oqG3yD2kKC2k20fuH7e3YDsc=
Subject key identifier: 42:12:6C:F8:A9:17:78:AC:52:12:C8:06:2F:72:C2:B1:F2:06:B3:87
Authority key identifier: 0F:61:EB:A8:5F:25:AD:7B:E4:D9:FA:0F:F5:45:28:A9:4A:2B:36:37
Certificate issuer: /CN=0f61eba85f25ad7be4d9fa0ff54528a94a2b3637
Certificate serial: 01A0412A758754FE6DB204D66FDAAD276E32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2HrqF8lrXvk2foP9UUoqUorNjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/671bac-9f98-440e-87b7-f094069675e3/1/D2HrqF8lrXvk2foP9UUoqUorNjc.mft
Manifest number: 0590
Signing time: Thu 27 Aug 2026 03:01:36 +0000
Manifest this update: Thu 27 Aug 2026 03:01:36 +0000
Manifest next update: Fri 28 Aug 2026 03:01:36 +0000
Files and hashes: 1: D2HrqF8lrXvk2foP9UUoqUorNjc.crl (hash: XbsVopUONa0RfumjprQFyE1zXv0ljTfA8NvJeu/JBJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/671bac-9f98-440e-87b7-f094069675e3/1/D2HrqF8lrXvk2foP9UUoqUorNjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/671bac-9f98-440e-87b7-f094069675e3/1/D2HrqF8lrXvk2foP9UUoqUorNjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2HrqF8lrXvk2foP9UUoqUorNjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:2a:75:87:54:fe:6d:b2:04:d6:6f:da:ad:27:6e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f61eba85f25ad7be4d9fa0ff54528a94a2b3637
Validity
Not Before: Aug 27 03:01:36 2026 GMT
Not After : Aug 28 03:01:36 2026 GMT
Subject: CN=42126cf8a91778ac5212c8062f72c2b1f206b387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c7:7e:38:88:7c:07:23:32:59:43:87:65:b7:
16:6b:f6:f8:e2:61:20:c4:d7:7e:33:11:5b:f6:21:
bf:36:0f:e6:47:3b:e7:7e:31:5a:54:4d:8d:f7:3d:
d4:a2:c2:d7:39:9b:85:c7:81:06:5a:19:04:8f:86:
ce:cf:ae:07:15:05:a3:e3:e9:5b:c7:18:57:5b:5c:
74:f9:f5:84:79:c9:a4:46:cd:09:8b:07:85:be:c1:
45:7e:9b:bd:59:3c:4a:9c:51:bf:c9:96:3a:2d:1c:
24:94:58:8e:61:73:3d:02:4b:a6:e7:53:ac:b8:c3:
f5:22:12:54:6c:f8:56:29:77:78:e2:c4:aa:f2:03:
2e:cf:ac:8b:c7:68:08:84:36:5f:0d:ad:23:20:cd:
c8:ec:3b:df:e4:c8:98:e7:17:a4:aa:b6:44:3f:d0:
66:7a:67:c2:4e:60:06:f5:05:7f:3a:e5:2d:a8:11:
b2:b0:35:f6:a1:9a:13:e0:d3:71:c4:48:69:32:e7:
47:cb:ea:46:bc:d6:c7:6e:8f:cb:02:a7:9e:6c:9b:
9a:30:62:33:d8:fd:e0:ca:31:83:65:9c:e9:3e:ad:
8e:2e:08:bd:5f:6e:2f:a3:01:1d:2c:65:06:8e:05:
9b:01:cf:e9:7c:29:13:bf:bd:05:cc:a8:73:f0:62:
0b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:12:6C:F8:A9:17:78:AC:52:12:C8:06:2F:72:C2:B1:F2:06:B3:87
X509v3 Authority Key Identifier:
keyid:0F:61:EB:A8:5F:25:AD:7B:E4:D9:FA:0F:F5:45:28:A9:4A:2B:36:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2HrqF8lrXvk2foP9UUoqUorNjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/671bac-9f98-440e-87b7-f094069675e3/1/D2HrqF8lrXvk2foP9UUoqUorNjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/671bac-9f98-440e-87b7-f094069675e3/1/D2HrqF8lrXvk2foP9UUoqUorNjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:5a:05:e9:b8:b7:e7:2f:fb:21:4d:fb:a9:05:d3:a3:79:d6:
7a:5e:9b:82:55:6b:d8:4d:37:76:06:bb:8d:e9:2a:60:12:eb:
3b:33:9e:66:76:94:73:42:12:64:77:54:82:8f:03:5d:8a:aa:
ab:38:f8:06:dc:75:bf:9a:1f:7a:8d:94:ff:42:6e:64:9c:6b:
1f:3f:aa:c9:5f:4c:e7:1f:db:f1:de:be:b9:b6:bd:a7:29:68:
51:26:b8:f0:db:34:a8:3b:ce:e2:02:88:1d:25:fc:54:0a:09:
e6:d3:05:17:5d:50:be:8c:ae:85:26:c6:c9:ab:39:fd:96:cc:
b4:d7:a3:86:13:d3:2b:81:7a:42:96:eb:93:33:07:a6:41:8c:
09:5a:a6:90:96:4f:df:c2:b0:25:da:91:3c:9f:42:d5:1e:8b:
16:5b:a1:33:81:15:97:88:73:4d:53:b0:24:0f:3d:0e:26:eb:
4c:dc:e3:7e:82:48:eb:30:f0:19:7f:8f:ab:c2:60:f0:ab:5e:
5a:9f:2d:dd:a3:5a:b7:28:b5:92:ef:52:c1:dc:cc:26:e1:ba:
d5:f2:68:2c:da:ed:0b:44:72:38:e5:fa:f3:4e:bc:8f:ba:a7:
d6:08:cd:8d:7c:8d:f8:19:a6:e5:8b:74:03:ed:77:5e:4d:cb:
77:e5:58:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBBKnWHVP5tsgTWb9qtJ24yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNjFlYmE4NWYyNWFkN2JlNGQ5ZmEwZmY1NDUyOGE5NGEy
YjM2MzcwHhcNMjYwODI3MDMwMTM2WhcNMjYwODI4MDMwMTM2WjAzMTEwLwYDVQQD
Eyg0MjEyNmNmOGE5MTc3OGFjNTIxMmM4MDYyZjcyYzJiMWYyMDZiMzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocd+OIh8ByMyWUOHZbcWa/b44mEg
xNd+MxFb9iG/Ng/mRzvnfjFaVE2N9z3UosLXOZuFx4EGWhkEj4bOz64HFQWj4+lb
xxhXW1x0+fWEecmkRs0JiweFvsFFfpu9WTxKnFG/yZY6LRwklFiOYXM9Akum51Os
uMP1IhJUbPhWKXd44sSq8gMuz6yLx2gIhDZfDa0jIM3I7Dvf5MiY5xekqrZEP9Bm
emfCTmAG9QV/OuUtqBGysDX2oZoT4NNxxEhpMudHy+pGvNbHbo/LAqeebJuaMGIz
2P3gyjGDZZzpPq2OLgi9X24vowEdLGUGjgWbAc/pfCkTv70FzKhz8GILawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEISbPipF3isUhLIBi9ywrHyBrOHMB8GA1UdIwQY
MBaAFA9h66hfJa175Nn6D/VFKKlKKzY3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDJIcnFGOGxyWHZrMmZvUDlVVW9xVW9yTmpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi82NzFiYWMtOWY5OC00NDBlLTg3Yjct
ZjA5NDA2OTY3NWUzLzEvRDJIcnFGOGxyWHZrMmZvUDlVVW9xVW9yTmpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi82NzFiYWMtOWY5OC00NDBlLTg3YjctZjA5NDA2OTY3NWUz
LzEvRDJIcnFGOGxyWHZrMmZvUDlVVW9xVW9yTmpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPloF6bi3
5y/7IU37qQXTo3nWel6bglVr2E03dga7jekqYBLrOzOeZnaUc0ISZHdUgo8DXYqq
qzj4Btx1v5ofeo2U/0JuZJxrHz+qyV9M5x/b8d6+uba9pyloUSa48Ns0qDvO4gKI
HSX8VAoJ5tMFF11QvoyuhSbGyas5/ZbMtNejhhPTK4F6QpbrkzMHpkGMCVqmkJZP
38KwJdqRPJ9C1R6LFluhM4EVl4hzTVOwJA89DibrTNzjfoJI6zDwGX+Pq8Jg8Kte
Wp8t3aNatyi1ku9SwdzMJuG61fJoLNrtC0RyOOX68068j7qn1gjNjXyN+Bmm5Yt0
A+13Xk3Ld+VYsQ==
-----END CERTIFICATE-----
Generated at Thu Aug 27 05:36:33 2026 by rpki-client