Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/DetjQ3Fdym7urXHUKMibOzgJzUc.mft
File: DetjQ3Fdym7urXHUKMibOzgJzUc.mft (raw, json)
Hash identifier: Wm22xNMrMNtzemMHJKQN9EKuqD8XlaXUNKmM32oKP4o=
Subject key identifier: 0C:B6:48:87:F1:D6:A9:98:21:39:69:AD:4D:AA:FB:DA:B7:BB:06:38
Authority key identifier: 0D:EB:63:43:71:5D:CA:6E:EE:AD:71:D4:28:C8:9B:3B:38:09:CD:47
Certificate issuer: /CN=0deb6343715dca6eeead71d428c89b3b3809cd47
Certificate serial: 019F36A99CE189DF9AA012B49FE6336502E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DetjQ3Fdym7urXHUKMibOzgJzUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/DetjQ3Fdym7urXHUKMibOzgJzUc.mft
Manifest number: 11
Signing time: Mon 06 Jul 2026 09:01:53 +0000
Manifest this update: Mon 06 Jul 2026 09:01:53 +0000
Manifest next update: Tue 07 Jul 2026 09:01:53 +0000
Files and hashes: 1: DetjQ3Fdym7urXHUKMibOzgJzUc.crl (hash: 5/jz3fPDVQOyvawGrxhn2+nxOcdmafzByDUtyym2IH8=)
2: G6dJoJ39O-fLTDtD6JIbMwF7ld0.roa (hash: bib4ZpLdsyDWiYUwlUY26x1Y7yfsb0kp608wF2HOHyw=)
3: hjSkcT4dUsQlkcGR3OpdzIdJHb4.roa (hash: Fb23YmsCtrnbbYbPw2ty48vk03FuV8GOgY8t/uDWTmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/DetjQ3Fdym7urXHUKMibOzgJzUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/DetjQ3Fdym7urXHUKMibOzgJzUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DetjQ3Fdym7urXHUKMibOzgJzUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:a9:9c:e1:89:df:9a:a0:12:b4:9f:e6:33:65:02:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0deb6343715dca6eeead71d428c89b3b3809cd47
Validity
Not Before: Jul 6 09:01:53 2026 GMT
Not After : Jul 7 09:01:53 2026 GMT
Subject: CN=0cb64887f1d6a998213969ad4daafbdab7bb0638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d0:91:01:11:af:61:42:cb:0d:19:49:65:9a:
6a:7e:d7:11:ac:e4:21:a8:3e:bf:b7:cd:61:da:b9:
90:75:87:b9:10:d2:17:b1:06:a9:cf:b1:af:d4:56:
6f:e4:da:56:7f:f8:b8:96:d0:73:b4:9d:46:82:5d:
12:24:a5:34:53:86:4f:78:c3:bd:5f:1c:cc:15:26:
4e:71:92:33:11:6c:8c:db:c4:9d:fb:67:7e:f1:21:
82:aa:cb:bc:a6:66:e5:c5:64:03:11:42:65:bf:8f:
e3:45:38:8f:5e:fa:14:06:0a:f8:c6:1f:ea:d7:1a:
97:f5:82:71:1e:54:9f:32:b2:09:46:ed:0a:21:07:
85:c1:f4:d1:6d:dd:49:a1:fc:05:cb:29:1d:d9:ad:
d0:9a:c4:dc:63:cf:aa:c5:3f:04:22:64:95:7d:4d:
71:76:47:86:63:72:be:c0:36:ee:32:28:b0:3c:d3:
40:2d:90:c6:6a:a4:ea:b1:7b:21:79:cd:03:a2:d7:
42:a5:29:77:e5:dc:36:ac:b3:c5:01:48:30:f6:4e:
d7:31:4f:05:41:18:12:aa:ba:6d:2d:4d:49:a9:cb:
0a:e2:47:32:cc:a0:7a:b9:1d:fd:84:65:4c:bb:13:
cb:fa:ab:e1:6d:4d:08:0b:4c:40:5e:37:fb:a8:b4:
a8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B6:48:87:F1:D6:A9:98:21:39:69:AD:4D:AA:FB:DA:B7:BB:06:38
X509v3 Authority Key Identifier:
keyid:0D:EB:63:43:71:5D:CA:6E:EE:AD:71:D4:28:C8:9B:3B:38:09:CD:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DetjQ3Fdym7urXHUKMibOzgJzUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/DetjQ3Fdym7urXHUKMibOzgJzUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/DetjQ3Fdym7urXHUKMibOzgJzUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:4d:3a:ab:cf:7f:84:c0:20:80:07:cd:e4:86:29:4b:a8:92:
95:ff:ed:a8:1a:78:f9:ac:b7:d6:49:ed:46:58:9b:63:8e:81:
46:10:2d:82:db:2e:dd:6f:64:60:1e:0c:d3:a7:0f:1e:f1:7e:
3e:6b:ee:54:9b:63:a2:75:23:f7:ca:aa:25:f5:ff:b9:f6:21:
82:d6:7a:c2:d6:99:bb:c2:0f:33:19:1e:88:c6:75:30:87:50:
e7:dd:07:d0:49:8d:e1:50:e0:70:9e:ed:df:eb:bd:e2:79:36:
70:5b:29:1a:d3:06:1a:f6:f5:ca:a3:6e:1b:0e:ca:34:71:ec:
96:1a:b3:aa:ae:10:b3:a0:4a:54:9b:01:8e:43:b3:b6:03:fd:
9b:20:11:35:72:71:ca:5d:81:67:fc:c2:fa:fc:47:bc:75:4f:
3d:25:c3:96:4a:25:45:eb:3b:f5:ec:49:6e:43:9f:a4:c7:d1:
5a:55:d8:71:36:de:03:17:3a:46:0c:d7:d2:a8:cd:e3:3b:ef:
1d:09:84:54:3c:59:06:f6:03:14:fd:83:ff:f0:27:eb:51:28:
11:2e:94:2e:22:2f:40:45:3a:2c:dc:34:c8:58:1e:41:1f:37:
28:1a:b5:e7:35:7e:c9:47:61:ae:97:b2:21:a9:bc:84:0b:e0:
95:9c:b2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:03:25 2026 by rpki-client