Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7fd85d-0152-4ef2-9ebf-1e240b97d2c4/1/0tiRsOMo58hWrUt6B2TYLYVgltY.mft
File: 0tiRsOMo58hWrUt6B2TYLYVgltY.mft (raw, json)
Hash identifier: oTiPwndg1DmIwj9TiI9FSKu1exBZ2h98uSZpAPWfPmE=
Subject key identifier: B1:34:42:8C:AB:EB:31:32:47:5D:CA:62:B1:0F:AA:EA:97:B2:58:DB
Authority key identifier: D2:D8:91:B0:E3:28:E7:C8:56:AD:4B:7A:07:64:D8:2D:85:60:96:D6
Certificate issuer: /CN=d2d891b0e328e7c856ad4b7a0764d82d856096d6
Certificate serial: 019FA975023F2E4DA612558C206CB7433820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0tiRsOMo58hWrUt6B2TYLYVgltY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7fd85d-0152-4ef2-9ebf-1e240b97d2c4/1/0tiRsOMo58hWrUt6B2TYLYVgltY.mft
Manifest number: 0626
Signing time: Tue 28 Jul 2026 16:00:45 +0000
Manifest this update: Tue 28 Jul 2026 16:00:45 +0000
Manifest next update: Wed 29 Jul 2026 16:00:45 +0000
Files and hashes: 1: 0tiRsOMo58hWrUt6B2TYLYVgltY.crl (hash: r6toSbDSK6pIUU2jYykTxezhpTZRX3ApfzW7hZ2beYE=)
2: UCdWTcnF4ZVDrSnBvN43rU1Zk3A.roa (hash: Qw45xlTVvhAH55/GToKQCdfRTF8PLXCZ9h0uBYEUVtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7fd85d-0152-4ef2-9ebf-1e240b97d2c4/1/0tiRsOMo58hWrUt6B2TYLYVgltY.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7fd85d-0152-4ef2-9ebf-1e240b97d2c4/1/0tiRsOMo58hWrUt6B2TYLYVgltY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0tiRsOMo58hWrUt6B2TYLYVgltY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 16:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:02:3f:2e:4d:a6:12:55:8c:20:6c:b7:43:38:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2d891b0e328e7c856ad4b7a0764d82d856096d6
Validity
Not Before: Jul 28 16:00:45 2026 GMT
Not After : Jul 29 16:00:45 2026 GMT
Subject: CN=b134428cabeb3132475dca62b10faaea97b258db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e2:8b:b1:c6:2a:b5:3a:8c:97:7e:9b:ed:71:
1f:b8:07:79:02:1b:bc:36:0b:1c:54:69:8d:6f:4c:
23:bd:99:37:c0:ed:64:ae:be:30:ae:b5:44:2d:49:
bb:33:90:02:7f:fb:2b:82:89:71:56:0e:f9:3f:99:
ed:08:86:55:56:17:a7:e5:ee:6e:93:dd:4a:11:7e:
d1:b6:a6:20:1f:56:19:08:6a:d6:19:fd:34:f1:14:
9f:8a:19:47:f2:84:61:45:5f:88:68:a0:c6:38:31:
5a:bc:4c:c9:59:27:83:84:8f:60:e3:f4:f7:3f:52:
ab:a6:dd:6c:af:ae:24:97:73:97:b9:74:8a:c2:e6:
f8:92:07:ef:fd:14:c2:0d:a3:ff:11:25:07:2b:02:
b0:08:b9:b8:f4:9a:4f:5b:14:fc:e3:ea:e3:6e:48:
21:06:c5:8e:2c:2b:43:53:ac:9f:a9:6c:a6:c8:67:
9e:05:1a:f8:e9:ce:4c:df:12:1c:e9:4e:db:58:13:
ca:b0:4c:75:ef:f9:6d:6a:a6:ad:98:29:f6:c3:21:
47:c4:a6:59:12:2b:b1:d6:49:cd:d5:51:de:f0:55:
83:9a:4e:33:a1:c9:58:e9:c9:be:b1:15:06:a7:51:
e1:a0:c8:b1:22:72:44:8c:be:ce:5f:f1:a0:29:2e:
77:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:34:42:8C:AB:EB:31:32:47:5D:CA:62:B1:0F:AA:EA:97:B2:58:DB
X509v3 Authority Key Identifier:
keyid:D2:D8:91:B0:E3:28:E7:C8:56:AD:4B:7A:07:64:D8:2D:85:60:96:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0tiRsOMo58hWrUt6B2TYLYVgltY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7fd85d-0152-4ef2-9ebf-1e240b97d2c4/1/0tiRsOMo58hWrUt6B2TYLYVgltY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7fd85d-0152-4ef2-9ebf-1e240b97d2c4/1/0tiRsOMo58hWrUt6B2TYLYVgltY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:13:58:12:d7:56:f8:d7:3a:94:ab:bf:16:90:4e:0e:87:45:
2b:6e:6b:47:51:ef:41:dd:d3:e0:61:cd:e6:7c:2b:6d:30:70:
db:6f:d1:e2:c2:11:da:88:23:9e:42:36:0b:1b:82:5f:a9:65:
ac:42:72:7f:4b:8c:f9:8b:63:8d:f1:28:fe:ba:76:35:de:32:
fb:c8:e5:e9:7b:8b:4d:e5:50:48:1e:c5:6d:f8:c4:24:4f:94:
01:dc:e2:c3:fe:01:8d:4f:b2:52:8c:47:0a:be:05:46:92:a8:
b5:eb:6f:c0:59:e6:56:3c:24:80:c4:7e:75:ba:cb:7a:aa:ca:
4b:b5:2f:86:78:db:a7:c4:77:4c:b8:a9:5d:c7:95:7c:f0:48:
31:ee:d3:50:ad:91:14:d2:1d:91:fa:d7:04:af:03:25:ca:28:
fb:c0:b3:fd:5a:7a:99:13:0b:6e:a8:6c:08:77:04:5b:fc:67:
66:4e:57:62:20:ad:ab:cd:df:47:47:45:d4:40:a0:69:ac:bb:
3c:11:15:2b:a3:fc:d0:45:9b:43:84:cd:3a:0c:58:91:d3:e1:
e2:57:49:2f:bb:31:ca:2a:e7:f8:71:1e:85:44:ba:77:57:1e:
3b:00:63:31:73:75:53:03:67:35:99:b2:71:3a:ee:ce:4d:5a:
a2:d4:61:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:22:08 2026 by rpki-client