Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
File: 0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft (raw, json)
Hash identifier: Z6TuX8JIRbn9mil+4lQIetyqHOcCcpT0Mi1zngq3oDk=
Subject key identifier: FF:E4:51:AB:AA:8D:D1:D4:87:82:48:07:AB:C0:2C:43:D1:62:EC:14
Authority key identifier: D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06
Certificate issuer: /CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06
Certificate serial: 019FA899CB1964F4A02D9CA24152952BCE74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 12:01:19 +0000
Manifest this update: Tue 28 Jul 2026 12:01:19 +0000
Manifest next update: Wed 29 Jul 2026 12:01:19 +0000
Files and hashes: 1: 0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl (hash: QfqFYyLfCh4q9apfwCBhlSfe7ytFT2An+3NFaME5Q7g=)
2: lNZ8b2GqipxFmFvx0Lw_q8EwfSo.roa (hash: qDLpSNqlibtH6zRBXzlD7tUyev4dQUA/1eIb4IG63oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:cb:19:64:f4:a0:2d:9c:a2:41:52:95:2b:ce:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06
Validity
Not Before: Jul 28 12:01:19 2026 GMT
Not After : Jul 29 12:01:19 2026 GMT
Subject: CN=ffe451abaa8dd1d487824807abc02c43d162ec14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:be:d3:1b:43:cd:10:bd:ad:ad:95:d3:0a:9d:
da:61:ad:42:a0:e5:e7:2f:a0:76:a0:e7:50:d6:f9:
6b:57:35:95:8d:a2:25:92:28:6b:0c:93:5f:bf:c0:
00:c7:dc:86:f6:5f:e7:38:f8:09:61:bf:28:27:ce:
a3:3f:ef:45:12:7f:65:84:5d:c5:b7:19:f0:f8:a3:
30:74:2b:54:7a:01:bf:ba:55:1f:d6:a9:76:51:64:
e3:43:37:e8:77:7e:42:d9:f9:ca:98:0b:b6:e7:7d:
10:41:5f:42:ed:7b:bb:b6:0c:c5:ed:43:42:75:08:
e5:61:bb:ae:97:50:9d:07:0b:ee:ce:84:e4:7c:64:
bb:10:ba:fd:4e:81:1f:53:64:24:ac:9b:cb:bd:25:
c3:d8:9b:1f:4a:ee:2b:98:5d:f2:28:73:3c:9b:6f:
fa:56:13:38:35:ca:09:71:b8:2c:ce:4d:b2:60:2a:
21:37:22:81:03:06:27:1d:48:94:59:2e:37:f3:07:
ba:80:bd:7b:58:de:33:2c:6a:a7:38:15:56:ab:0e:
08:e6:59:6a:cc:4d:c4:7c:0c:bf:d7:54:27:4c:9e:
09:af:8a:8a:e0:08:07:1c:6d:f7:03:98:93:ef:60:
81:52:2b:97:89:64:6a:4c:84:dd:dc:fb:0c:a4:49:
2d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E4:51:AB:AA:8D:D1:D4:87:82:48:07:AB:C0:2C:43:D1:62:EC:14
X509v3 Authority Key Identifier:
keyid:D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:3d:22:7c:5a:b1:eb:b3:ac:97:2b:e6:ff:d9:02:13:5c:4c:
34:09:3f:2b:61:10:50:60:69:52:92:e1:33:6a:39:96:8b:23:
e8:9f:0e:69:bb:00:54:53:1c:ae:48:9a:7e:49:b9:11:27:0c:
35:40:27:5d:21:dc:0a:84:55:9b:a8:a3:6e:62:94:ff:59:01:
68:bf:d8:4c:09:0a:1e:b7:03:cc:83:e4:b6:60:ef:e7:69:9b:
c8:5a:b5:30:e1:90:be:cf:3a:4a:ae:dc:2c:ad:fc:2a:4b:c7:
ed:1a:3d:ef:56:fb:95:67:3c:51:8c:a2:0b:d3:46:c6:6b:69:
35:21:5b:54:75:4b:d8:63:9b:86:c9:70:f0:7d:86:40:6e:d8:
d0:03:48:20:d1:20:18:10:b1:04:e3:fe:ec:fa:c5:51:0b:ef:
23:ee:0e:1b:04:47:13:6e:ba:63:80:48:2f:be:44:05:d3:43:
50:fa:d2:1b:7d:af:c7:73:64:10:56:95:42:62:ea:22:d0:e9:
dd:15:40:b2:42:53:e0:81:d3:e4:ed:32:a8:cf:0b:08:9b:ad:
68:6a:e9:f3:d4:9c:d3:ea:72:4e:d8:9c:eb:30:22:a2:38:60:
2b:a5:71:e1:1a:05:12:70:df:55:8e:ba:05:b5:01:19:7b:e5:
90:67:e0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:31:09 2026 by rpki-client