Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
File: 0pigcUzBvyWsfH8c9sKIbIxhkqM.mft (raw, json)
Hash identifier: FEm8QmQ2gOS2JSK12xbM0zLG3xH7+PV8KfRFci79ICo=
Subject key identifier: 87:DF:F9:A4:AB:64:63:6C:BE:F3:BE:ED:A6:F8:FD:CC:6C:5F:02:93
Authority key identifier: D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3
Certificate issuer: /CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3
Certificate serial: 019FA93E1EE83232F650A2D48953ED259A2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
Manifest number: 074E
Signing time: Tue 28 Jul 2026 15:00:48 +0000
Manifest this update: Tue 28 Jul 2026 15:00:48 +0000
Manifest next update: Wed 29 Jul 2026 15:00:48 +0000
Files and hashes: 1: 0pigcUzBvyWsfH8c9sKIbIxhkqM.crl (hash: 7dhx7vmRRZidmM0rzp7KfXGZxDyECzEBeJYhPm2qQhA=)
2: cMXu7WrvsmC-lThLKVR5Js2GYXY.roa (hash: EpVFpanfzZyTV+MCY5Rt4j7mVt0TS3sr2EacwZSVOVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:1e:e8:32:32:f6:50:a2:d4:89:53:ed:25:9a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3
Validity
Not Before: Jul 28 15:00:48 2026 GMT
Not After : Jul 29 15:00:48 2026 GMT
Subject: CN=87dff9a4ab64636cbef3beeda6f8fdcc6c5f0293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:13:c2:5a:41:d6:cd:ed:c1:55:c6:d3:a1:63:
89:03:c1:92:17:2f:b5:ad:45:23:c9:d9:fc:37:6b:
5f:82:55:b5:ad:00:b6:42:46:2f:52:29:34:6b:46:
38:67:5b:5a:45:03:e7:15:55:8f:ab:15:dc:77:c7:
d9:91:60:2b:38:0b:d4:30:0b:8c:7e:90:24:c7:04:
65:23:1d:3d:88:ea:1e:9d:5b:df:7b:db:b0:d6:f9:
da:fe:85:27:a5:91:c7:3c:27:9c:7b:ce:75:67:06:
88:80:a0:8e:fc:10:9b:fc:a8:19:f3:f3:09:0e:2d:
64:b6:e7:e4:08:79:71:5b:ec:32:66:15:dc:ca:a9:
ef:d5:7b:e0:74:a7:fb:b4:ea:41:bb:45:34:a9:52:
bf:68:1f:b7:ae:1a:8d:e0:17:6b:6e:61:87:b4:ad:
99:a3:14:43:f1:88:21:f8:2d:be:cf:75:f4:2d:2a:
85:5c:82:67:75:44:d6:78:e3:30:c1:d5:ac:6f:07:
f1:94:59:d3:09:93:4d:9b:bd:8a:eb:aa:20:c2:e6:
62:c6:29:d8:3a:e0:12:f7:82:48:c3:63:6e:c7:82:
9b:ae:44:e0:35:53:c4:3f:ea:24:59:a5:c8:6c:36:
ba:37:3d:52:7f:04:69:91:a2:c1:47:ac:36:48:21:
86:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:DF:F9:A4:AB:64:63:6C:BE:F3:BE:ED:A6:F8:FD:CC:6C:5F:02:93
X509v3 Authority Key Identifier:
keyid:D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:7a:55:cd:3e:a7:60:ca:f2:57:e8:c9:0e:4e:87:35:e8:d5:
a1:cc:e3:b4:9d:cb:80:cb:12:3f:c7:a9:4c:99:14:b4:3f:59:
a6:b8:ae:7d:b8:8c:9a:88:c9:76:ac:79:9a:11:25:bc:8c:b6:
80:79:85:5d:83:31:88:09:0d:31:30:d4:06:5a:95:f1:cd:f9:
7c:04:4d:53:4e:aa:b2:39:da:35:58:4a:4d:23:7e:2a:ef:e1:
40:70:96:e4:16:1f:77:c9:a4:f0:cd:ac:3b:3a:b9:b2:d2:8b:
a7:43:64:0c:51:11:7e:6f:f0:e1:12:e1:f5:d4:76:37:ae:93:
18:6b:b2:0d:72:00:0f:4f:31:47:cd:c7:a3:90:13:38:26:d8:
ca:5d:a9:23:43:c8:0c:41:92:85:62:80:31:b2:a1:3c:48:fc:
dc:99:33:ba:af:d6:d4:83:0d:e6:01:18:95:91:3d:e3:94:37:
d6:df:b9:ef:ed:0f:41:6c:9c:7a:96:f0:5a:66:40:7b:17:b3:
5f:07:56:50:b8:dc:64:43:73:37:37:34:a4:d4:83:73:a6:97:
3f:f1:f8:13:fa:fb:eb:84:2c:d1:34:ec:43:97:52:99:fc:9a:
84:6d:c3:4b:8f:d4:b7:3c:70:3b:b9:17:38:34:8e:9f:7e:65:
05:5a:5e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:36:19 2026 by rpki-client