Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
File: 0pigcUzBvyWsfH8c9sKIbIxhkqM.mft (raw, json)
Hash identifier: 6L7FBYGF9OYIb3ZTnQ9PglNZTFOX0S4X/+SItgMMscY=
Subject key identifier: 2D:53:E1:F4:79:25:29:CB:2B:3F:0B:CD:AD:BF:59:56:87:77:A3:3F
Authority key identifier: D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3
Certificate issuer: /CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3
Certificate serial: 01A0C8FD1DAEFD7504F0A8B63C9C610E1873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
Manifest number: 07E3
Signing time: Tue 22 Sep 2026 12:00:26 +0000
Manifest this update: Tue 22 Sep 2026 12:00:26 +0000
Manifest next update: Wed 23 Sep 2026 12:00:26 +0000
Files and hashes: 1: 0pigcUzBvyWsfH8c9sKIbIxhkqM.crl (hash: S8FKTZt89+GM4xkMkXqn4FhzwLCNb91minACV6yobHo=)
2: cMXu7WrvsmC-lThLKVR5Js2GYXY.roa (hash: EpVFpanfzZyTV+MCY5Rt4j7mVt0TS3sr2EacwZSVOVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:fd:1d:ae:fd:75:04:f0:a8:b6:3c:9c:61:0e:18:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3
Validity
Not Before: Sep 22 12:00:26 2026 GMT
Not After : Sep 23 12:00:26 2026 GMT
Subject: CN=2d53e1f4792529cb2b3f0bcdadbf59568777a33f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:14:aa:d3:8c:d1:a9:9f:fa:62:79:3e:5b:56:
cc:bc:1d:ef:7a:ca:34:f8:6c:5f:86:98:91:05:de:
07:3f:c4:5c:50:ba:21:f0:a1:b0:70:0c:dd:1c:83:
b6:8c:47:c9:19:4b:14:89:f0:4f:1a:8d:6f:c6:1c:
29:42:c9:f4:f0:2b:86:cd:20:4d:37:e2:54:52:b1:
fa:fb:3a:ff:c9:d8:55:51:83:58:2c:31:ee:db:09:
85:51:72:84:33:bb:0d:fc:3d:7c:f3:bc:22:f7:28:
55:dc:00:60:b5:f9:16:84:f0:98:17:89:ab:ed:41:
a2:d0:02:75:ba:2c:a7:1f:d3:31:9c:2d:fb:57:51:
80:7e:da:62:e3:34:d9:67:56:eb:25:3c:f5:6e:0e:
4f:47:8f:27:e6:38:f7:c7:19:4c:e3:01:0c:2e:50:
de:ef:3b:3f:1a:a3:d9:88:31:a1:c4:a5:02:bd:ab:
9f:97:a1:2a:f0:de:03:2a:02:14:26:e0:3c:1c:51:
5e:a9:79:4f:0e:7a:6c:74:18:7e:32:bb:c1:40:31:
97:db:cb:87:e3:e5:31:32:52:35:f4:6a:59:c5:fd:
60:de:80:86:ae:54:46:65:42:b5:5c:1d:d5:76:24:
53:31:01:94:a3:eb:8d:15:f5:b2:82:b1:32:1e:0d:
b6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:53:E1:F4:79:25:29:CB:2B:3F:0B:CD:AD:BF:59:56:87:77:A3:3F
X509v3 Authority Key Identifier:
keyid:D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:8a:89:b9:c8:96:7f:2d:a3:04:a3:d3:ad:8f:a9:21:49:6d:
ef:0e:39:66:12:d2:84:2f:11:a5:50:e5:b6:93:38:e3:d9:db:
4a:41:c0:d0:ac:e4:11:c5:8b:74:cd:28:be:4c:51:30:47:fa:
61:b2:d2:23:9c:2e:69:62:5c:56:5c:67:0f:65:66:d4:57:c5:
43:37:d3:67:d5:98:d6:f2:76:06:d4:aa:db:19:66:70:92:7d:
b6:dc:e9:08:b3:86:9b:0b:46:68:b7:00:5e:83:55:53:28:62:
4c:f9:77:db:c9:c3:03:b6:4d:db:63:4c:08:e9:08:2b:05:05:
10:f0:fd:ab:0f:65:1d:cc:68:32:3a:2d:0f:59:fe:5d:65:23:
41:da:6c:f1:6e:cf:e3:f5:11:7e:d9:c8:cb:6c:be:00:6e:e3:
83:db:45:ed:de:fe:5f:84:82:c6:ef:ac:45:bd:41:49:22:4d:
bf:6f:53:10:e8:5f:16:35:1f:c2:8c:36:23:f1:16:37:b0:65:
08:94:93:a5:24:fa:26:58:71:c2:5a:6a:89:53:3f:4b:4d:72:
c7:95:c8:43:48:3e:47:e3:10:56:c1:ae:ac:09:91:8b:c9:30:
4d:90:4d:28:e9:23:dd:78:94:88:77:12:ce:ae:46:67:08:3f:
b4:1d:d0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:38:27 2026 by rpki-client