Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
File: 81ROkj2IO6zkqj9-9wByr-NRHyg.mft (raw, json)
Hash identifier: ref1pncbINXgyxhcQP03KSVIplwe+dae8IhLtr0DFGQ=
Subject key identifier: BA:24:F6:5E:80:0E:E7:DD:53:13:13:B6:61:6C:74:D5:15:9A:AF:4B
Authority key identifier: F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28
Certificate issuer: /CN=f3544e923d883bace4aa3f7ef70072afe3511f28
Certificate serial: 019FA9AB849D9B6175B4027CCB11DB882D67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
Manifest number: 0712
Signing time: Tue 28 Jul 2026 17:00:17 +0000
Manifest this update: Tue 28 Jul 2026 17:00:17 +0000
Manifest next update: Wed 29 Jul 2026 17:00:17 +0000
Files and hashes: 1: 81ROkj2IO6zkqj9-9wByr-NRHyg.crl (hash: nB1zIPNJzYRLq1e4MhfvTCds9irF3SmloPkCKYHs8I0=)
2: TrhXkCJb8q-vuCZF4exUSreBB7E.roa (hash: EGX2grrS3l79QBgl+a645PR4w0grZD/PxlFuVBj36pQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:84:9d:9b:61:75:b4:02:7c:cb:11:db:88:2d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3544e923d883bace4aa3f7ef70072afe3511f28
Validity
Not Before: Jul 28 17:00:17 2026 GMT
Not After : Jul 29 17:00:17 2026 GMT
Subject: CN=ba24f65e800ee7dd531313b6616c74d5159aaf4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3f:ff:d8:17:1c:0f:7f:42:d1:46:00:ee:c0:
77:00:83:03:66:3c:b1:be:d8:c9:17:c0:bc:8d:65:
3b:95:bd:6c:20:96:a9:b5:7e:6e:e9:a1:90:9e:09:
b1:cd:f2:87:e4:48:44:c3:a5:70:0f:db:44:74:2b:
88:b6:2c:4a:2c:b6:07:8c:64:30:5e:11:c6:8f:47:
9f:36:43:ea:86:9b:09:c7:f2:57:4c:37:ff:5b:9b:
21:b1:d1:21:3a:c9:7f:05:71:3e:b7:a0:c8:9f:7c:
2a:74:4f:9a:60:42:b5:2e:6c:dd:b0:ab:fb:70:02:
41:cc:a9:ce:00:a4:dd:52:88:ce:aa:48:27:75:0b:
60:19:36:26:d7:01:2d:65:6b:b3:8e:8a:08:de:40:
ee:85:b5:b8:72:18:06:62:6d:77:e1:83:e1:a8:c9:
d8:92:06:1c:ff:39:90:08:3a:d3:50:aa:78:25:b0:
ab:7a:1d:e8:05:97:51:b7:31:ae:00:cc:6f:5f:42:
0e:58:b6:54:9f:de:6e:21:9f:e5:59:1a:a9:7c:78:
74:b5:65:2a:7e:3c:c1:7e:a3:4d:af:f8:bd:91:57:
b6:06:4f:5a:f9:84:8e:69:ff:33:52:f8:b2:95:d5:
89:50:46:e2:35:f8:a3:7e:31:ec:67:2e:a8:74:be:
60:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:24:F6:5E:80:0E:E7:DD:53:13:13:B6:61:6C:74:D5:15:9A:AF:4B
X509v3 Authority Key Identifier:
keyid:F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:fe:2c:22:e2:78:b1:01:99:d7:a9:be:8a:b0:96:3e:10:0c:
b4:cf:11:9a:af:84:fa:0d:04:92:c2:47:ce:73:d3:5a:36:64:
1c:6b:8d:c6:e6:8b:2c:a6:16:a8:bb:d6:7d:18:6c:75:97:1f:
78:f1:db:9f:7b:93:79:88:4f:77:04:1c:53:bc:00:d9:ec:9a:
5b:78:ff:e5:af:af:f0:0d:1d:8b:87:af:1d:fa:19:5f:0b:16:
77:e2:25:b9:4b:42:20:f6:00:fe:61:ae:f7:26:71:6c:04:f7:
7a:fb:0a:52:62:7a:98:fd:13:68:d8:a6:61:e6:4f:c4:9e:da:
c0:21:5f:17:10:25:e4:b4:7b:7e:07:d3:f2:9d:6d:4e:6d:c7:
86:e8:db:e7:90:7a:a9:83:3a:19:aa:5f:eb:e4:79:c2:d3:b7:
b5:5f:08:11:84:bd:94:07:4e:47:a3:d8:bd:7a:a1:47:17:9a:
ca:68:c8:0a:2a:91:f4:87:89:a2:29:3b:8e:fa:56:df:9f:b9:
d2:35:37:16:fc:91:99:a2:23:99:6b:7d:d5:f9:32:e6:fd:7b:
59:0a:79:2a:d5:02:c9:2e:40:fd:43:68:5b:62:e5:ba:e2:bb:
f0:29:9c:7f:b8:63:e5:9b:1b:3c:fa:aa:71:d2:1d:25:3b:cd:
f1:55:b5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:40:57 2026 by rpki-client