Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
File: 0rvJBVXW0NNDK6u5W2DN7upYD1g.mft (raw, json)
Hash identifier: JggKg5H0YBLojDztz4rlJvzHBrHKQd27G64gLCe6XAU=
Subject key identifier: FB:7E:59:9C:D0:05:E2:AD:88:A4:8F:C0:6C:C5:7B:61:18:BC:2B:DC
Authority key identifier: D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58
Certificate issuer: /CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58
Certificate serial: 019FA9ABEB0F478BA054CE246514D4B0B50D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
Manifest number: 1868
Signing time: Tue 28 Jul 2026 17:00:43 +0000
Manifest this update: Tue 28 Jul 2026 17:00:43 +0000
Manifest next update: Wed 29 Jul 2026 17:00:43 +0000
Files and hashes: 1: 0rvJBVXW0NNDK6u5W2DN7upYD1g.crl (hash: rivYL19K6KrMh3dMJzh2doXalP1UNgb18cZAOqYxVbo=)
2: CuoNMY7Qq37VOjNaS3NSAgeASU8.roa (hash: oV7Za3ljWN5/ELZ5W0IrtTxHnlCCtRf76iTFx/48w6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:eb:0f:47:8b:a0:54:ce:24:65:14:d4:b0:b5:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58
Validity
Not Before: Jul 28 17:00:43 2026 GMT
Not After : Jul 29 17:00:43 2026 GMT
Subject: CN=fb7e599cd005e2ad88a48fc06cc57b6118bc2bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a0:78:2d:e1:ba:7e:b0:ed:e5:69:82:ca:82:
3d:78:2a:57:ba:ca:70:0a:35:ff:a6:57:ed:74:d3:
7a:61:ed:0f:72:38:54:63:6e:d9:9e:df:3d:a4:8f:
0a:d5:0d:be:f5:ce:f2:17:fc:b2:d7:8a:1d:2f:57:
f0:d9:c2:d8:20:9d:e4:5b:f5:35:dd:6c:51:70:69:
05:57:29:92:cc:74:6c:3b:32:87:5d:29:ed:9f:89:
ac:5b:79:4b:c5:86:37:23:b9:b5:4e:ae:fa:25:d6:
9b:9b:4b:37:ea:fa:d5:55:85:2f:30:ed:05:94:17:
3f:ab:b7:73:7e:a8:60:3c:df:ff:d5:e9:99:10:0b:
7f:59:32:c8:85:a9:e2:ad:16:4f:c7:a3:7c:6b:bd:
fb:0b:93:95:ee:2f:7d:39:58:8a:9a:73:f9:0c:22:
08:d2:f7:c4:09:1a:64:3c:17:85:99:ee:14:ae:3f:
c1:35:e6:5a:3d:80:f0:ce:a9:ce:e0:31:fd:ee:64:
e9:c4:a1:1d:cd:8c:7e:d4:37:ed:21:0f:58:4b:bf:
f9:8e:83:35:34:95:f6:86:91:60:53:68:2e:6d:8e:
11:4a:43:62:fc:e8:d3:f2:6f:62:fe:e0:7f:65:a1:
47:c4:4a:42:df:ad:2a:02:cc:a2:f5:0a:4e:e7:53:
f7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7E:59:9C:D0:05:E2:AD:88:A4:8F:C0:6C:C5:7B:61:18:BC:2B:DC
X509v3 Authority Key Identifier:
keyid:D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:11:04:9a:02:18:49:8d:aa:34:a3:ae:b6:dd:52:a6:9e:81:
fe:61:b3:f7:79:60:75:d1:a8:e9:15:1f:bb:51:06:99:c8:d8:
12:b5:6d:af:0e:ff:20:bd:ee:3d:04:54:ad:ff:17:db:e5:e9:
c4:8d:c2:7e:85:ff:89:6e:5a:7c:70:cc:26:91:e1:c1:90:3a:
a0:6e:f5:4b:72:2b:59:fe:20:87:60:2e:1b:e5:2f:53:af:17:
5a:32:41:9f:9f:76:28:b4:f5:7a:92:8c:a4:ff:68:7c:84:0e:
11:57:5b:ae:32:30:23:6d:ca:3c:80:18:cd:ea:73:32:9b:8d:
2e:0d:83:3c:61:9e:e7:e2:b3:a6:c0:31:d3:51:41:d4:9c:36:
01:e4:77:a4:24:90:e4:d1:00:fb:bc:fb:0c:03:6f:f9:2b:de:
70:ae:32:b8:8e:77:1a:3c:68:59:22:6d:82:75:ba:b9:66:1a:
81:98:ea:e6:b4:f2:13:99:15:1f:da:45:46:ab:88:79:cb:84:
02:1f:0c:e6:bf:f1:de:f4:fe:cc:c5:84:50:e0:d4:d9:34:4a:
87:38:33:a2:74:9b:3b:a4:a4:0a:06:58:fd:7a:03:7f:3a:c5:
36:45:cc:d9:7b:89:01:2e:ef:f4:76:52:3e:26:fd:42:9d:10:
75:76:5b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:13:09 2026 by rpki-client