Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
File: 025dcJNbjLw3zyFsRGaX1MJ6mT4.mft (raw, json)
Hash identifier: /K3aJ5WiOr9fOMBFdzf+tzPXgZAckVuUBkku437f54g=
Subject key identifier: B0:FA:0A:4E:E1:60:F0:ED:BF:DF:FB:12:27:EB:B9:F2:68:AA:52:B0
Authority key identifier: D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
Certificate issuer: /CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Certificate serial: 019FA8D01F66F73597D300925D20218F911B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
Manifest number: 06C0
Signing time: Tue 28 Jul 2026 13:00:39 +0000
Manifest this update: Tue 28 Jul 2026 13:00:39 +0000
Manifest next update: Wed 29 Jul 2026 13:00:39 +0000
Files and hashes: 1: 025dcJNbjLw3zyFsRGaX1MJ6mT4.crl (hash: tLjienep4kjcysszPI9Vx+A9BEiHvyOVHBOOZMK1Dyw=)
2: XBji1wvFGdJSRKGHAuv-z87ZKv0.roa (hash: +vvqUnTon4CrLAZnScSQr1zxyNsLsp1x+AMPRSFSlEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:1f:66:f7:35:97:d3:00:92:5d:20:21:8f:91:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Validity
Not Before: Jul 28 13:00:39 2026 GMT
Not After : Jul 29 13:00:39 2026 GMT
Subject: CN=b0fa0a4ee160f0edbfdffb1227ebb9f268aa52b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9e:36:e2:cf:06:32:85:29:d5:ec:fd:94:b1:
3c:c3:49:64:3d:d4:7f:57:5d:e0:84:88:95:a8:c1:
44:a4:b6:e2:e6:a4:2e:bf:51:58:ae:63:3b:ca:cf:
84:5e:6f:04:3c:93:76:6f:76:a6:40:99:dc:dc:0e:
4a:a8:87:1a:22:d5:1d:d2:c0:91:11:4a:47:c2:54:
da:c5:cb:ab:90:67:67:c0:35:6e:47:8d:ce:3a:06:
4b:9c:fa:8c:33:c8:7c:1b:6e:0e:c7:68:ba:22:56:
f3:06:bb:9f:1c:0b:d0:d9:a6:62:c1:04:1e:6f:02:
48:ef:62:67:89:e5:96:b8:25:7e:c7:13:45:c3:f2:
53:8c:0c:06:bc:f8:25:5e:64:65:69:b1:e1:c4:b8:
ea:3b:01:26:8a:b9:64:91:66:0e:80:50:38:e2:69:
44:0d:52:31:0a:09:fe:23:59:9b:b6:9c:5d:eb:98:
d2:ca:65:99:80:e3:9d:64:bd:86:1f:28:8f:73:f2:
d5:8c:ef:35:0f:18:d8:db:e2:67:49:30:60:ef:f1:
ed:14:97:9b:59:f3:95:d6:e9:eb:0f:d0:c4:5f:df:
81:43:d8:7a:0a:59:d5:a0:89:37:61:e3:79:61:b5:
c0:bd:8c:6a:28:69:58:48:5a:9b:f1:0c:41:b1:08:
a3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FA:0A:4E:E1:60:F0:ED:BF:DF:FB:12:27:EB:B9:F2:68:AA:52:B0
X509v3 Authority Key Identifier:
keyid:D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:fd:18:41:79:d5:6e:fa:7a:15:6b:bf:c1:d5:88:db:b7:41:
c5:f4:39:10:3a:da:96:9f:f9:af:f7:71:ad:71:a7:de:6c:ed:
04:9b:84:41:0d:af:91:d1:ec:f7:ce:d3:86:7d:df:84:7f:86:
d2:29:a6:d8:6f:b6:59:04:75:06:06:0b:4d:87:71:dc:a9:9c:
a2:0e:f5:c1:04:0a:36:9b:67:d9:7c:0c:6d:e7:b1:cd:ff:52:
fd:d3:8a:dc:94:83:6f:38:c1:8a:cc:d0:4e:d7:0f:eb:f8:d2:
9a:a9:9f:0e:01:f4:4c:54:d6:a2:55:ef:7f:0f:72:51:e8:b9:
c4:6e:32:a4:09:66:ac:cb:07:a8:da:9d:e3:e0:45:17:b0:ac:
54:a6:11:6f:37:63:2b:ff:01:0f:c4:cf:da:8e:23:1f:38:dd:
2e:8d:88:a9:fd:92:07:78:6e:ba:fd:c0:3c:b9:a5:ab:dd:af:
b8:b2:a7:2b:a2:48:28:7c:d7:ce:8e:85:e7:7b:0c:65:0c:8e:
15:0d:c6:de:c7:5d:d6:6f:7a:ba:bd:24:73:b0:79:7a:6d:26:
ea:2a:35:4b:ba:9a:e8:65:a4:63:a9:39:cb:12:20:eb:bc:41:
f7:7e:3b:e0:29:4f:18:69:ea:9b:40:00:a6:a0:6d:40:1b:9b:
dc:a2:25:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:38:26 2026 by rpki-client