Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
File: 0DjDOLEo-Drewvadk8MsU1PKA5g.mft (raw, json)
Hash identifier: G5fTkOaQX04KCLNXLH9lJQMZ08u7m+K1ASEJKNRi2KA=
Subject key identifier: 01:FB:57:0F:CA:77:50:C2:C0:70:22:39:05:48:B0:86:87:E7:C5:6D
Authority key identifier: D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98
Certificate issuer: /CN=d038c338b128f83adec2f69d93c32c5353ca0398
Certificate serial: 019FAA1AAAA0203A7D09B6F451AA1468551E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
Manifest number: 1671
Signing time: Tue 28 Jul 2026 19:01:41 +0000
Manifest this update: Tue 28 Jul 2026 19:01:41 +0000
Manifest next update: Wed 29 Jul 2026 19:01:41 +0000
Files and hashes: 1: 0DjDOLEo-Drewvadk8MsU1PKA5g.crl (hash: KT0TKBoHNe0AOKE+hFDxoXQQXj1o+3HZzMBbz0TnKtU=)
2: iYtloRWl9kFypd8JJUfmPgfj4cA.roa (hash: S73CmXUZ6HVY4mwA83JVTETkq549rHQpfRMzqNjQiJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:aa:a0:20:3a:7d:09:b6:f4:51:aa:14:68:55:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d038c338b128f83adec2f69d93c32c5353ca0398
Validity
Not Before: Jul 28 19:01:41 2026 GMT
Not After : Jul 29 19:01:41 2026 GMT
Subject: CN=01fb570fca7750c2c07022390548b08687e7c56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:95:4c:ed:51:a1:e8:7a:9c:8a:e4:a7:0d:96:
96:7e:7a:5b:5b:81:9b:23:25:ab:7b:2a:70:08:d5:
62:c0:58:d0:58:13:c8:f3:1f:88:b9:1c:5d:39:94:
29:3c:a1:a8:e0:ee:74:72:2e:98:61:37:50:70:65:
c9:49:e6:12:f0:ae:5e:96:5b:5d:74:f6:ff:7d:8b:
ce:0d:ad:00:74:31:f6:f9:07:3b:78:62:0e:10:27:
fc:74:3e:50:f9:b5:3d:59:a8:9d:77:d6:89:9b:5f:
1d:86:ac:79:bb:d4:f0:c8:fc:35:5a:58:a0:d8:9a:
f1:61:11:cf:e8:09:2d:e6:1c:41:b6:ec:6a:90:d6:
2e:79:20:44:60:98:36:50:a9:7b:73:2b:d8:9f:ad:
d8:45:33:e6:c7:7f:39:14:27:de:9f:08:6f:74:a7:
2c:af:84:fb:2b:31:ef:1f:7d:da:30:b4:ec:d1:66:
92:b5:bf:89:ee:9c:72:28:ba:dc:54:d6:4a:48:22:
09:8a:b1:89:23:ce:4f:df:0d:c3:27:9c:b6:4b:41:
77:b2:f2:21:3d:17:29:7e:f2:bd:86:e8:fa:bb:7f:
e5:4b:c2:88:26:73:ba:24:78:93:d4:16:c3:e9:5c:
6e:40:ab:3c:ed:c4:90:29:0e:a0:0e:28:35:a4:06:
93:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FB:57:0F:CA:77:50:C2:C0:70:22:39:05:48:B0:86:87:E7:C5:6D
X509v3 Authority Key Identifier:
keyid:D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:fb:b1:91:8e:89:7f:50:37:25:08:71:9e:e4:c9:d1:cb:79:
71:9c:a8:89:2a:7a:43:76:71:ff:e9:31:bd:f8:00:5c:05:d1:
9b:80:9b:97:24:dc:63:7a:82:24:22:bc:1b:de:05:db:df:ea:
0d:d3:e1:b7:89:f7:4d:27:e2:2d:b7:6d:2f:e0:e1:8a:e0:8a:
e3:b0:13:da:ee:06:9d:7c:e8:6b:ba:b4:8f:0d:a7:79:d3:dd:
cb:5c:05:fb:bc:31:a1:9b:b4:54:41:9c:bc:b2:7b:30:ff:11:
84:32:30:81:9f:9a:4b:d5:ea:1b:de:45:5c:8f:26:06:52:6a:
26:07:f7:a0:b2:c5:be:66:3c:65:06:53:0f:55:0a:a8:da:b4:
bd:6a:25:ed:72:37:25:eb:59:fc:72:6a:2d:bf:a6:db:94:0a:
b6:dc:02:5a:f8:5e:6a:2d:26:f2:8c:2f:19:94:a3:40:af:38:
b2:70:92:fb:56:2b:23:88:11:fc:5c:97:f8:9c:e3:b3:11:5f:
13:ff:f3:7d:69:4d:4a:de:67:49:8d:bd:1a:65:8c:9c:04:09:
04:68:82:06:46:20:d3:17:5b:4a:f5:a5:1d:d0:55:05:58:05:
42:8d:91:19:88:74:d4:69:16:db:55:1a:04:0a:87:93:a2:22:
1a:bf:f4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:51:03 2026 by rpki-client