Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
File: 0-2n3wX226CeOefUvex7rg7_urA.mft (raw, json)
Hash identifier: QHdk+NPcxayhkF0OIcDCPw/LV6sWti1C378MK+V/15g=
Subject key identifier: DB:B7:CC:51:6C:54:19:B1:67:71:A1:82:60:05:A0:BE:9B:7F:E1:44
Authority key identifier: D3:ED:A7:DF:05:F6:DB:A0:9E:39:E7:D4:BD:EC:7B:AE:0E:FF:BA:B0
Certificate issuer: /CN=d3eda7df05f6dba09e39e7d4bdec7bae0effbab0
Certificate serial: 019FA86298A36ED26BF46BD6F9F61D60457A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
Manifest number: 06DB
Signing time: Tue 28 Jul 2026 11:01:01 +0000
Manifest this update: Tue 28 Jul 2026 11:01:01 +0000
Manifest next update: Wed 29 Jul 2026 11:01:01 +0000
Files and hashes: 1: 0-2n3wX226CeOefUvex7rg7_urA.crl (hash: MfZls0BEt8aUXWLcN6WRi9rz9c+/uqtIqxYGUo3XNgA=)
2: qTWraqPBRkXUgfYW4gfB3AS-jm0.roa (hash: Rbt0ZTsq9hRwXO+cnDLn20WShDhAg5xFObZyVKiajFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:98:a3:6e:d2:6b:f4:6b:d6:f9:f6:1d:60:45:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3eda7df05f6dba09e39e7d4bdec7bae0effbab0
Validity
Not Before: Jul 28 11:01:01 2026 GMT
Not After : Jul 29 11:01:01 2026 GMT
Subject: CN=dbb7cc516c5419b16771a1826005a0be9b7fe144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c3:bc:d2:b7:32:2a:eb:71:97:7b:03:30:fa:
89:b5:40:27:c3:be:e1:54:c3:d7:cf:69:ba:a1:19:
93:61:9d:96:6a:08:0c:51:ca:72:2a:91:f1:35:c1:
7c:86:f2:43:b7:99:09:d6:28:17:4a:79:f1:16:ba:
f8:a4:49:a7:16:6e:0c:cf:00:20:11:92:cb:d8:f1:
03:d3:64:07:56:7f:14:20:a7:c6:bf:63:3e:10:f3:
7c:df:75:37:12:ba:26:fc:05:33:d0:04:8c:85:cb:
a4:c6:fb:e8:6e:19:8d:8a:88:ee:33:3f:07:16:0c:
25:60:8f:3d:89:97:e3:60:40:1b:95:be:a1:12:b9:
95:e5:45:04:15:97:7b:22:65:48:dd:ec:26:ed:6b:
15:9c:de:46:c2:07:a5:4a:01:6f:17:fa:1e:ab:28:
85:d1:bc:3c:b5:45:07:a6:e2:d3:fb:8a:e5:49:a5:
fa:a2:5e:2a:43:05:bb:ae:9e:98:2c:73:d8:98:5b:
4d:f8:81:f2:0c:cb:0d:4c:2f:c5:f4:89:25:93:81:
39:7f:d5:94:c3:71:f7:a4:bc:a8:d5:67:92:4a:02:
7d:4b:33:15:b5:f4:eb:6b:de:ab:47:9f:ea:fc:0d:
ff:f9:9c:d7:ca:ec:46:2a:d1:10:3b:b4:8e:7b:71:
18:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B7:CC:51:6C:54:19:B1:67:71:A1:82:60:05:A0:BE:9B:7F:E1:44
X509v3 Authority Key Identifier:
keyid:D3:ED:A7:DF:05:F6:DB:A0:9E:39:E7:D4:BD:EC:7B:AE:0E:FF:BA:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:6f:2f:4d:c0:b6:b5:14:d4:01:4f:16:e8:87:45:cd:f5:9f:
e0:d1:6c:8b:9b:1b:23:69:92:77:45:08:aa:6d:75:c4:8c:00:
20:72:41:f5:1e:42:9b:d3:86:19:ce:71:f1:8e:9d:bc:fc:90:
14:59:cc:00:83:b8:13:da:b5:30:2a:f6:da:0d:4c:3a:7f:f4:
32:2b:25:96:8e:af:95:44:db:ab:f7:b2:9c:9b:39:b8:35:b0:
bf:c4:fd:0b:08:f6:02:00:f0:27:83:ab:fc:72:e8:d5:7c:a6:
86:f1:bc:5e:b9:ae:a8:bc:e5:6c:ce:8f:85:6b:74:78:83:4f:
a1:5b:8e:27:85:66:a1:e0:06:b0:a0:cd:13:4f:50:90:44:8d:
48:7c:ef:2f:c5:ed:c1:95:a7:58:2f:e3:6b:f1:01:3e:1f:dc:
7f:7e:ac:02:31:b0:c2:5b:ce:14:f7:99:73:61:81:36:57:1e:
86:ff:22:3b:85:44:5d:ba:e1:48:d6:c0:11:62:d7:77:41:3c:
49:7d:09:68:02:e7:20:8c:7a:04:e1:99:7b:7f:9b:48:0c:42:
30:8a:b0:aa:18:6e:0f:5f:0a:87:80:6d:23:96:80:69:a4:94:
1e:cc:c9:ae:47:08:fc:1e:f5:e0:29:9e:21:a6:a2:44:b3:0f:
a0:b0:52:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:39:33 2026 by rpki-client