
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
File: 0TAReuHNwt8cWIFuAOVFH4fvs3A.mft (raw, json)
Hash identifier: z15CqQfxfpHeEH1rVAL922e8QLydYmeDn6t8gmoB0yE=
Subject key identifier: DB:33:12:55:AE:2C:7F:85:CF:D2:3E:DE:94:9D:01:C8:28:BE:D7:88
Authority key identifier: D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70
Certificate issuer: /CN=d130117ae1cdc2df1c58816e00e5451f87efb370
Certificate serial: 019FA89A42FEC595B9D977864F4BD7D23ED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
Manifest number: 0A61
Signing time: Tue 28 Jul 2026 12:01:49 +0000
Manifest this update: Tue 28 Jul 2026 12:01:49 +0000
Manifest next update: Wed 29 Jul 2026 12:01:49 +0000
Files and hashes: 1: 0TAReuHNwt8cWIFuAOVFH4fvs3A.crl (hash: gQp7sh0fybMlG2ZraMy7d1ZgpDa/uRTPLTCMmEcWj24=)
2: p9tR_YPIsnjcSaCfQzqt0nEYrrM.roa (hash: ELI33Gpd5gDnI+1hXpA3k3XALmGCvJJlHqj3mPxtk9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:42:fe:c5:95:b9:d9:77:86:4f:4b:d7:d2:3e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d130117ae1cdc2df1c58816e00e5451f87efb370
Validity
Not Before: Jul 28 12:01:49 2026 GMT
Not After : Jul 29 12:01:49 2026 GMT
Subject: CN=db331255ae2c7f85cfd23ede949d01c828bed788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:63:17:8f:06:73:4c:44:52:8d:12:84:80:dd:
7f:ac:82:39:47:3e:8f:36:47:95:e2:33:db:f9:69:
4c:b9:6f:dc:63:32:d4:a9:dc:52:c4:86:0a:48:85:
f9:ae:b8:65:d8:50:2e:53:9c:d4:b1:fa:32:84:c0:
47:2e:64:f1:91:20:bf:ef:11:dc:be:f2:a8:5e:62:
dd:ee:aa:7b:58:3b:bb:ce:26:11:01:df:09:27:5d:
75:ca:a4:72:b5:a9:c1:1c:e8:4f:12:83:97:16:80:
51:88:31:4f:57:7a:c2:fe:85:0c:38:10:1f:d8:12:
f5:22:9c:63:46:76:15:2c:de:53:b6:10:e0:d4:ee:
35:4d:f7:e7:27:37:b1:61:3a:81:b3:59:cb:4f:ed:
67:d3:6e:b9:2f:2d:d1:6b:7d:10:c9:dd:ff:41:cf:
6f:a7:10:f9:4c:6a:dd:e3:61:48:38:83:68:72:e4:
4d:7e:94:71:9b:cc:4c:26:2f:00:26:30:32:82:ca:
dd:21:2a:7a:dc:ad:0f:96:97:ac:50:60:4d:78:4d:
5b:9b:aa:ff:e6:c0:08:95:3e:94:44:07:4a:70:ed:
16:b1:e1:11:8c:19:3d:ee:8f:6a:05:8a:b5:a5:94:
c2:ca:c2:b5:8f:7b:24:24:bd:c1:42:0b:83:7f:f7:
dc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:33:12:55:AE:2C:7F:85:CF:D2:3E:DE:94:9D:01:C8:28:BE:D7:88
X509v3 Authority Key Identifier:
keyid:D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:16:46:6b:7d:39:40:d3:2d:e3:76:2b:7b:6f:09:29:6f:78:
8c:62:92:bb:d7:7e:ae:f5:10:a0:29:c3:fb:34:2e:bd:56:72:
7e:15:0a:a3:7a:f0:d0:6e:02:ab:9c:f7:91:40:01:9c:7f:42:
32:15:bb:01:8c:1e:8f:b9:5f:ad:fb:f6:1c:a3:2f:22:7a:43:
f1:4e:fe:0a:ec:2c:7a:48:e8:49:af:00:ed:de:41:a3:19:d6:
c5:ce:72:4b:ee:30:66:4f:84:71:40:c5:70:5a:64:c9:4a:81:
28:b4:4b:a6:36:3a:a1:e1:07:af:c3:b2:d2:ad:2b:79:6a:04:
8b:2f:a3:1e:0f:4f:a6:40:94:00:c3:b3:2e:aa:0f:dd:79:af:
9d:43:a2:be:b2:8d:a6:9d:83:f9:4a:7c:5a:ab:db:12:53:df:
b8:c3:56:29:df:48:5c:a8:44:84:bf:5d:01:f2:eb:1a:29:08:
85:55:2e:30:cb:98:43:30:39:87:4c:e1:fd:26:e1:f9:39:b2:
74:fb:1a:3d:f5:03:a4:38:88:df:65:af:a9:5a:6b:78:9a:91:
8d:d1:8a:f9:1f:22:2f:3f:14:e5:08:f1:55:e4:44:db:bf:91:
cf:de:c3:02:e8:f7:b5:f9:e6:8b:1a:24:ce:22:13:13:6c:ef:
08:12:3c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:31:39 2026 by rpki-client