Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
File: D5JWkWA5A-8kSFy0vzXigweGe4M.mft (raw, json)
Hash identifier: K+cia5BfQa641DD2yVa3BiOkm40OnWNppDRburnfBC8=
Subject key identifier: 9B:47:42:87:7D:EC:64:2A:EA:4F:32:6F:7E:36:94:C7:29:08:5F:9C
Authority key identifier: 0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83
Certificate issuer: /CN=0f925691603903ef24485cb4bf35e28307867b83
Certificate serial: 019F17F95255A0D6BCD8E4147849AE7CFE04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
Manifest number: 0796
Signing time: Tue 30 Jun 2026 10:00:43 +0000
Manifest this update: Tue 30 Jun 2026 10:00:43 +0000
Manifest next update: Wed 01 Jul 2026 10:00:43 +0000
Files and hashes: 1: 80qBnu2XnhFRiBmZiF038oU110Q.roa (hash: LIRyJNKQ/3u7PO7ipf6wdyHbe0bKIPQwJsid3/CO5Lg=)
2: D5JWkWA5A-8kSFy0vzXigweGe4M.crl (hash: HX8FtjJDn0Xj9oyTlR3ASFKLYtYFi3ikki0OaKgsyHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:52:55:a0:d6:bc:d8:e4:14:78:49:ae:7c:fe:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f925691603903ef24485cb4bf35e28307867b83
Validity
Not Before: Jun 30 10:00:43 2026 GMT
Not After : Jul 1 10:00:43 2026 GMT
Subject: CN=9b4742877dec642aea4f326f7e3694c729085f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:88:e8:d6:e8:a0:df:cd:a9:24:f2:aa:02:b2:
b7:86:2f:3e:92:6a:53:80:0e:d3:6d:ab:23:d8:12:
df:e3:14:46:bb:3f:e6:4d:72:fe:dc:d9:73:85:69:
6b:2f:e9:fc:f8:2e:b0:76:bd:90:d8:b1:ae:93:71:
89:7f:33:97:2f:8c:d9:46:9e:58:48:59:e7:bd:54:
bc:d2:98:68:53:54:7f:f3:c0:86:91:15:0e:15:49:
52:79:6c:28:0f:a7:91:aa:7b:0c:6b:37:38:80:d9:
46:cf:77:cd:3e:62:db:cd:ba:25:f4:de:19:22:0a:
90:e7:7a:52:ea:9d:ea:d2:f1:b1:b2:56:d2:10:29:
e6:d0:7b:f5:02:4f:8b:60:6d:6c:55:6f:06:d7:bc:
00:83:da:fb:ac:65:97:5f:fe:ef:5d:8c:a6:1f:91:
48:bd:68:44:77:6c:8d:3f:00:ad:06:09:b7:92:3b:
0b:0d:a7:f5:f9:58:6c:13:3b:05:94:5b:be:cb:92:
4a:ea:b6:7b:3f:4d:8c:23:ca:69:49:79:75:5b:64:
5f:72:aa:e3:5a:cd:93:44:31:98:38:53:a0:d6:6f:
58:c9:33:a5:8c:f4:a1:e5:87:29:95:c2:0f:00:5b:
9e:ee:b1:37:8f:e6:42:5c:a1:81:28:32:33:ec:c7:
33:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:47:42:87:7D:EC:64:2A:EA:4F:32:6F:7E:36:94:C7:29:08:5F:9C
X509v3 Authority Key Identifier:
keyid:0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:06:33:9b:2f:60:7c:d1:aa:93:2d:ce:db:0f:52:8d:93:2d:
5a:da:e0:3f:a1:f8:e0:8b:81:51:e8:52:bc:0a:70:7c:1d:af:
3a:72:6e:7e:0d:4f:92:4d:54:e6:b8:4c:09:d4:f2:b9:3f:d9:
a4:e9:af:3b:d2:2d:f3:c5:ad:f2:96:11:57:d3:31:da:7b:93:
79:01:c6:b2:d8:c6:33:93:fe:29:8d:3f:04:26:9e:6b:23:41:
a6:be:1d:e5:47:69:cb:92:16:13:13:11:5e:1a:9f:3b:84:9e:
f9:8a:a8:ce:c6:08:9c:6f:e2:ea:41:59:e8:60:96:42:f3:0d:
ed:91:a4:78:5e:d8:74:c5:c9:94:30:c4:e7:f1:63:4d:b8:6a:
3e:74:e3:bc:f8:fb:ee:b1:d4:23:e9:56:5f:5b:d4:00:62:d0:
8b:7d:df:5b:48:a0:6a:0e:80:1d:ed:c0:84:1f:44:0b:e6:3d:
b0:fd:ca:05:a0:7b:d8:73:4f:ea:3d:18:96:ae:1e:bd:b4:ef:
7c:f1:44:82:e8:b8:f3:ea:48:3d:fd:12:a3:68:96:24:9e:26:
ff:b4:7b:e9:cd:af:73:01:74:c1:29:2e:af:16:32:dd:c5:0c:
93:3a:db:cd:e7:eb:ff:09:f0:e9:b7:bb:a6:4b:58:40:b1:88:
1a:51:30:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:50 2026 by rpki-client