Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
File: D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft (raw, json)
Hash identifier: IX9YZfWdR9xYJxG9PTYdtTUMPj0IAgImxm9I79nc19w=
Subject key identifier: 6B:85:F3:86:56:89:D7:49:DC:8A:54:31:14:F0:42:41:80:2F:24:43
Authority key identifier: 0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D
Certificate issuer: /CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
Certificate serial: 019F18303B24F36BABC91AB0BCF22BE7DDBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
Manifest number: 1866
Signing time: Tue 30 Jun 2026 11:00:41 +0000
Manifest this update: Tue 30 Jun 2026 11:00:41 +0000
Manifest next update: Wed 01 Jul 2026 11:00:41 +0000
Files and hashes: 1: D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl (hash: /8fDJxWSGgd1frnjG7LhptLtPTlBamx8PW5PHHicW6Y=)
2: gM2StpLZVmvayJcUvILE4XZXuLw.roa (hash: KQMOAlvZrGCc1yTty62TEDax5SGCNvxrkbvizSS1atc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:3b:24:f3:6b:ab:c9:1a:b0:bc:f2:2b:e7:dd:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
Validity
Not Before: Jun 30 11:00:41 2026 GMT
Not After : Jul 1 11:00:41 2026 GMT
Subject: CN=6b85f3865689d749dc8a543114f04241802f2443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:21:40:41:f9:bb:15:3a:b5:5a:f4:32:d5:cb:
3f:17:16:cf:79:7d:15:4e:9f:34:58:24:fd:5f:52:
73:bd:8b:a0:6d:5b:5b:32:20:a0:1c:1c:ec:5e:1a:
57:68:72:96:e9:60:3b:f8:c2:f4:34:14:ea:83:79:
6a:5d:ca:0c:ef:5f:2f:6a:a1:2b:e7:c5:59:57:11:
05:4b:0c:64:cd:b3:cd:7b:8e:82:90:66:1a:30:62:
37:32:b5:64:32:13:84:6c:28:d6:f7:b6:b5:22:d7:
bb:9c:87:cf:2b:19:f9:e3:14:0c:c4:23:91:5c:53:
0f:76:ec:76:09:2d:aa:08:ed:d3:aa:06:05:45:ea:
3d:89:b4:5e:43:70:3d:57:8f:2f:cc:ae:d7:b0:c1:
8f:36:20:2d:d9:ec:68:29:58:0e:96:66:8c:4a:0c:
c4:f6:9e:02:1a:59:24:67:16:43:4c:3e:7b:5c:f4:
59:77:cb:ea:be:2e:5e:29:28:d2:fa:8f:5a:2a:03:
ab:c3:70:26:9c:01:97:b7:d0:64:fc:b5:c9:15:e0:
78:b9:82:cb:54:dc:2d:1c:bb:50:cc:2a:23:0e:a7:
b7:e3:ea:36:62:8a:80:d2:9d:91:a3:2f:63:ae:27:
af:e3:48:e0:b5:aa:4e:af:86:1f:05:89:38:8b:e4:
6d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:85:F3:86:56:89:D7:49:DC:8A:54:31:14:F0:42:41:80:2F:24:43
X509v3 Authority Key Identifier:
keyid:0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:d4:55:95:0c:ab:98:2d:23:b6:c4:30:f1:32:84:b9:10:ea:
67:65:b3:b3:87:c3:21:ef:ec:bb:e9:9a:42:6c:a5:65:aa:b4:
b2:a2:e3:fa:a5:3f:d9:d9:d0:92:e6:20:4a:12:2a:b7:e9:cb:
2a:16:e3:25:db:4f:cd:2d:b0:0d:83:54:58:af:7a:ca:3e:98:
3d:83:dc:57:6b:0e:76:3d:08:a7:97:78:5e:82:83:a5:ef:ef:
16:bb:70:91:21:f1:32:9f:44:85:82:0c:09:2d:4e:f8:4b:32:
94:66:5d:44:c3:45:d0:77:df:0e:ff:3a:3e:47:50:76:15:7b:
87:ff:8c:2d:b5:8d:14:d7:07:a0:91:4a:d8:8d:0a:7c:41:16:
d1:94:1d:5b:64:a9:eb:ec:f2:70:a9:e6:19:5d:6a:bd:d6:b9:
99:32:5e:2f:9f:bf:96:e7:b0:0b:27:66:27:7d:05:69:04:25:
a6:3b:82:e0:5c:bc:79:f1:bb:c8:da:74:5a:68:99:fa:55:58:
e9:1f:55:dc:53:8a:30:03:33:9a:e6:81:63:a3:77:54:18:74:
fe:e6:cd:4e:f7:32:14:d7:36:fc:6b:0d:23:6e:5b:d5:9e:ca:
c6:f6:61:41:62:5f:32:70:11:ae:08:8d:bd:0b:2c:a1:5a:fc:
85:68:ef:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:53 2026 by rpki-client