Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
File: D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft (raw, json)
Hash identifier: SjdiyLdYQL/zv13TcQ+s+oUPCkXKdjzm/9v03zlDfAs=
Subject key identifier: 73:C5:CA:26:1D:82:62:83:81:16:83:5C:BF:2C:DC:0E:A6:55:D1:CD
Authority key identifier: 0F:79:76:05:20:B7:C1:5C:2E:42:60:30:82:72:B8:49:F8:8E:D6:77
Certificate issuer: /CN=0f79760520b7c15c2e4260308272b849f88ed677
Certificate serial: 01A0013832567BB708EF647AD548BA8F702F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
Manifest number: 19FF
Signing time: Fri 14 Aug 2026 17:00:55 +0000
Manifest this update: Fri 14 Aug 2026 17:00:55 +0000
Manifest next update: Sat 15 Aug 2026 17:00:55 +0000
Files and hashes: 1: D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl (hash: 5zTrBc0D1pU7SwtmptZpokAT5T3l2LtdmXqXrb3l274=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:38:32:56:7b:b7:08:ef:64:7a:d5:48:ba:8f:70:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f79760520b7c15c2e4260308272b849f88ed677
Validity
Not Before: Aug 14 17:00:55 2026 GMT
Not After : Aug 15 17:00:55 2026 GMT
Subject: CN=73c5ca261d8262838116835cbf2cdc0ea655d1cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:6a:82:98:07:c7:12:4d:de:ed:d5:41:3f:32:
07:f5:12:58:83:e1:37:52:e6:e1:df:fc:cc:1e:1c:
f8:01:c6:9f:f6:31:99:3d:0e:1b:97:bd:c9:89:14:
d9:44:c7:4c:62:03:3e:63:2e:a8:3f:90:56:c4:a4:
26:a4:10:fe:77:1c:5e:26:a1:57:eb:f4:77:d9:92:
c9:82:4e:72:e1:7b:a4:99:58:af:3e:68:5f:ff:88:
33:f3:da:61:25:7e:ab:75:96:fc:6b:58:75:a3:c2:
cd:52:01:6c:f0:ec:00:9a:4f:32:d3:93:36:42:61:
17:31:43:67:d3:33:9b:0c:8d:ec:61:2f:53:0b:fc:
b6:1e:2c:29:d0:88:74:f2:2a:3a:cc:dc:7e:62:b2:
8a:96:0a:8e:d9:6a:f8:75:69:be:87:87:55:c6:89:
a0:0f:9f:ce:43:9d:37:e7:8b:27:d2:8b:3f:40:69:
71:23:69:dd:16:91:e4:e1:52:90:73:89:03:85:9f:
1c:93:f1:1b:91:4f:71:5a:5c:5a:a1:0c:7a:af:86:
66:72:a0:a5:72:c1:a1:11:0e:71:99:8b:9e:57:78:
8f:bc:53:26:6e:17:5b:a9:f3:f3:5c:fe:44:ca:02:
18:9b:2d:04:d7:ad:b2:e2:a6:ec:c9:41:c6:94:1a:
f3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C5:CA:26:1D:82:62:83:81:16:83:5C:BF:2C:DC:0E:A6:55:D1:CD
X509v3 Authority Key Identifier:
keyid:0F:79:76:05:20:B7:C1:5C:2E:42:60:30:82:72:B8:49:F8:8E:D6:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:cc:bf:b9:44:2a:f3:9c:3b:67:91:75:b3:e3:56:36:75:2a:
40:5c:9c:a9:df:7d:a6:1d:fe:d3:d9:23:7c:82:41:0f:d7:e3:
d3:8b:ae:d5:87:ee:30:0c:ae:0a:c3:6b:be:97:8e:14:4b:e8:
65:62:fd:60:a4:51:0a:a6:63:01:c2:5d:9a:b1:21:3d:d0:16:
0a:6d:d4:7b:c7:fc:ce:c4:56:e0:80:2b:be:32:0d:bb:f8:47:
a7:f7:f4:88:8a:c6:64:86:22:4c:04:2e:a8:b3:9c:e5:0b:81:
d1:22:f1:18:ad:c2:8c:04:c7:04:d5:9c:f6:d6:94:15:27:5c:
1c:ad:14:3c:d6:34:d5:85:e0:0f:11:e5:69:6e:71:44:a1:27:
a5:af:47:32:7b:ae:50:ff:bb:16:f7:9f:57:87:77:fe:ed:bd:
e6:55:40:b7:5c:d2:8e:12:6a:a6:5f:1d:2e:25:44:78:51:76:
1d:46:30:29:e6:be:e6:b4:7c:44:d3:47:c8:0e:96:35:38:c3:
e7:29:6a:a8:fb:02:65:41:72:a0:33:ac:8b:79:96:d6:a8:21:
f0:ee:4b:93:4a:d6:a5:16:e9:f3:be:55:5a:39:fb:91:63:28:
c5:c9:0b:ca:85:2e:ac:ae:44:a0:e8:26:2c:3c:69:56:b6:66:
59:94:88:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:20:03 2026 by rpki-client