Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
File: 0Q1bMLRse5ey28RYnOo2Iq11YVY.mft (raw, json)
Hash identifier: MaPQfPgdisbf5SLUdXvPvuRCKDw/fT4FWyyYLRBLAfQ=
Subject key identifier: 9D:A7:35:F0:90:05:18:75:D6:52:DA:A1:0D:22:40:A1:BF:1D:97:4D
Authority key identifier: D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56
Certificate issuer: /CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156
Certificate serial: 019FA9E330089A8645C9B69D7933DD3B9120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 18:01:06 +0000
Manifest this update: Tue 28 Jul 2026 18:01:06 +0000
Manifest next update: Wed 29 Jul 2026 18:01:06 +0000
Files and hashes: 1: 0Q1bMLRse5ey28RYnOo2Iq11YVY.crl (hash: EtHDCMK1pFqtDO4uWZUoWjowqrQ2rP7I6tQ0LZTfLK0=)
2: KJO5SafutHdx989Y4beR-MDi2-w.roa (hash: DcoFrISYVHpYfF3qhUpQz0nKOtSKRePG4GmzBfnkvzE=)
3: aoIheKr9cfwdkfPnA8io2rwnzUU.roa (hash: bd8EK0ErpEEUoneRY3CDUEglnwrfEtlsUHg/CzYtrqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:30:08:9a:86:45:c9:b6:9d:79:33:dd:3b:91:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156
Validity
Not Before: Jul 28 18:01:06 2026 GMT
Not After : Jul 29 18:01:06 2026 GMT
Subject: CN=9da735f090051875d652daa10d2240a1bf1d974d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a3:44:2e:8a:ed:ab:82:7c:58:7d:f1:bc:75:
6e:30:57:61:56:83:88:b4:fd:8c:07:fd:ae:48:7a:
e1:12:e8:a8:1e:f0:39:bb:a3:31:eb:a9:0f:c4:71:
03:8e:24:ce:a8:79:73:80:0c:1f:c4:6a:48:6b:35:
7b:bf:22:ca:32:68:a7:c2:2c:14:f5:3b:98:64:86:
b6:52:06:5c:16:1c:da:b3:eb:b1:dc:8d:0a:ae:f7:
a8:18:4b:00:c3:7a:97:15:f1:a4:9f:87:87:d7:47:
8d:8c:7b:6d:2f:32:b5:de:66:bb:5b:b1:8a:f3:02:
8a:58:90:eb:39:53:98:64:d8:09:c9:cd:95:e9:78:
cb:50:bd:6f:f1:5c:7e:31:3f:32:07:a3:0e:d0:ce:
32:26:3b:60:84:8c:a3:05:5c:fa:c9:5d:fc:44:47:
8b:d7:b8:56:78:df:39:39:af:ba:e3:a9:3a:d1:e9:
65:4d:35:75:8a:84:d3:bd:2a:99:35:90:26:7f:ca:
2e:6e:f5:15:b0:bc:a6:3d:49:b6:8d:e1:80:22:88:
1a:92:eb:84:b5:00:11:63:08:f4:ea:a4:3d:9d:6a:
f5:49:8d:40:0d:f8:2d:c0:24:16:00:8d:b9:8a:04:
0f:57:2f:5f:08:10:2c:5f:b2:4c:1e:62:a0:44:47:
7d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A7:35:F0:90:05:18:75:D6:52:DA:A1:0D:22:40:A1:BF:1D:97:4D
X509v3 Authority Key Identifier:
keyid:D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:5f:ce:0d:07:f0:85:70:5c:ed:7f:fa:6b:d7:cc:53:07:fb:
2f:c5:6b:14:7a:57:cb:36:e3:28:d2:14:4b:1a:84:a4:75:b5:
a1:b4:3f:fe:a2:10:37:9d:77:ce:8f:2a:5f:8b:0e:d7:6f:74:
a5:c8:01:8d:77:c7:50:11:9d:a7:18:bf:d3:df:c3:4d:ff:1d:
b9:40:dd:2b:2d:63:fb:73:ff:34:1d:e1:e1:24:0c:e6:3f:8b:
f8:c3:d0:6a:20:b7:b1:63:18:6c:3c:dd:05:8c:ea:e3:7e:6c:
68:b6:b8:91:f1:11:0f:73:df:18:39:ad:34:06:7e:4f:83:0f:
7a:21:8c:f3:a1:74:95:c5:50:ab:4a:20:14:c7:9b:f6:93:95:
b0:0f:a9:61:55:43:f4:5e:c9:7d:56:a1:18:bb:c6:ae:23:4a:
29:ad:49:bf:69:84:c3:1d:ba:21:85:dd:ae:bb:cf:0b:88:14:
39:c0:84:99:e3:c1:9f:2c:0c:1a:23:6d:d5:61:c3:ad:b9:82:
35:d0:17:69:c3:62:c1:cb:ad:92:8b:74:a5:9b:ff:7d:1f:66:
53:93:eb:48:43:82:97:19:64:4a:5d:7b:fb:4c:60:69:3f:87:
bf:c5:4b:88:04:4d:ef:64:18:34:72:89:60:4b:49:a9:b3:36:
07:38:40:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:33:46 2026 by rpki-client