Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
File: 0gsI5gdmjgYFAITuN5KKHAsDVJI.mft (raw, json)
Hash identifier: +rvHlnKiPNGcXHOedjmNIiiRlEjACVksQ47xWM8xa9g=
Subject key identifier: 13:DC:67:25:B9:08:F8:E0:8D:66:29:44:2D:41:8B:56:28:CF:83:47
Authority key identifier: D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
Certificate issuer: /CN=d20b08e607668e06050084ee37928a1c0b035492
Certificate serial: 019FA9749EDA52588B0B0BDA73A9299A1A36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
Manifest number: 0702
Signing time: Tue 28 Jul 2026 16:00:20 +0000
Manifest this update: Tue 28 Jul 2026 16:00:20 +0000
Manifest next update: Wed 29 Jul 2026 16:00:20 +0000
Files and hashes: 1: 0gsI5gdmjgYFAITuN5KKHAsDVJI.crl (hash: ty6vZH/ryKA6IX5Vwfjiu+ZksiQLA5MA1w5jNPiK/Ss=)
2: Gm-t-lh2E0gK3CSrIU-gJkije_Q.roa (hash: Ono4+T4YpgzQm0xFxMzJXZM1mWa8sfDRC5aPTIXlCxg=)
3: HOPT3iuIJW2Ca5RKaQZ_7H8DEUg.roa (hash: Z7lWxJ3V5i6LgJFHNccxxl1xQSA36VYmA9LTVT4CQFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:9e:da:52:58:8b:0b:0b:da:73:a9:29:9a:1a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d20b08e607668e06050084ee37928a1c0b035492
Validity
Not Before: Jul 28 16:00:20 2026 GMT
Not After : Jul 29 16:00:20 2026 GMT
Subject: CN=13dc6725b908f8e08d6629442d418b5628cf8347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e1:a9:00:bf:99:be:11:23:10:3b:72:37:9c:
95:17:f0:1b:b8:d2:4c:11:8c:5a:dd:51:26:8e:cc:
36:b0:f1:9f:60:6a:f0:bf:f6:df:20:23:c1:67:49:
50:af:ac:7b:bf:70:7f:e2:57:b0:cc:ee:25:76:92:
42:6c:7c:8e:15:b6:9f:1d:ea:d9:35:ad:ff:22:cc:
3b:70:1a:9e:e7:f3:20:23:93:63:9e:f1:07:3c:8f:
4d:45:82:39:9a:19:0b:0f:ad:8d:20:22:8c:bd:45:
a0:64:67:27:24:61:4b:6b:04:3f:91:db:28:1a:3f:
7f:9e:8c:a7:b4:16:0d:94:2c:f8:dc:c8:28:9a:85:
0e:51:a8:2a:3b:68:81:77:fb:fb:6c:cb:fe:29:e7:
79:38:d2:dc:f9:cf:9c:21:67:a8:70:d2:db:29:b4:
5d:63:53:b3:46:32:38:27:d3:67:2b:06:94:79:0e:
90:6f:ee:b6:ab:5f:65:a5:1c:cc:bc:8d:e7:97:0f:
00:13:81:b3:d6:ad:66:90:78:52:42:8f:0d:d2:08:
63:cf:87:7e:7a:f4:36:94:bd:bc:db:11:ba:9b:8e:
ae:5c:4c:52:09:3e:ec:a1:8b:6c:88:20:c9:31:cc:
15:2d:9b:27:65:b4:53:81:be:6b:be:1f:91:28:e9:
76:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DC:67:25:B9:08:F8:E0:8D:66:29:44:2D:41:8B:56:28:CF:83:47
X509v3 Authority Key Identifier:
keyid:D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:bd:ef:0c:d0:31:b0:1e:77:fe:2a:e7:e9:dd:c9:3f:6f:91:
46:77:3d:90:ea:fd:b3:53:4f:e4:e5:f0:c2:60:5e:50:b0:9d:
73:2d:88:40:61:c5:f2:b1:ee:fe:7d:b0:6e:34:40:54:ae:bc:
fd:8b:a9:ec:65:49:a5:0d:27:e9:93:36:f1:a3:89:e6:f7:bd:
03:90:dc:63:f3:4f:19:fd:45:aa:55:41:a6:8f:9a:3a:9c:6d:
bc:8b:55:74:cf:f4:ad:50:12:40:de:8e:e0:de:ff:30:5b:a5:
c0:f0:0d:be:5d:84:d6:ae:e4:e3:38:44:22:b1:36:07:b9:4e:
a5:73:f6:38:2f:3b:7d:c9:b8:6a:58:1e:7b:1d:df:86:5a:a4:
9c:f0:15:ac:09:6b:ea:a2:b2:f9:19:bd:cd:16:ce:f0:08:e1:
a5:76:c2:eb:fb:b0:14:4b:80:50:9d:67:cb:1c:4c:2e:fa:64:
b3:ad:c6:c3:7d:27:69:fa:02:6f:6c:80:4b:c7:9c:bb:8a:f1:
ed:c9:fc:40:97:13:c8:9e:db:c4:69:45:14:a5:e1:82:ce:01:
50:bb:19:d9:1d:5a:77:0f:30:81:0b:cb:7f:b6:55:a4:aa:1e:
38:91:8c:0b:a3:bf:32:e9:87:29:77:f7:a2:b8:c2:29:79:37:
94:22:0d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:02:04 2026 by rpki-client