Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5dbfe1-e49f-421b-a755-a983866070cb/1/0aJ0TmbValnwtKDjDNEUqusVJzM.mft
File: 0aJ0TmbValnwtKDjDNEUqusVJzM.mft (raw, json)
Hash identifier: CyKry5TBtqKAGZTw2tdHiNVaxSVdY2/iAM064kBC9Rg=
Subject key identifier: FB:47:F8:36:08:C8:D2:F7:C3:1F:46:6B:6D:0C:02:4B:CA:5E:6F:2F
Authority key identifier: D1:A2:74:4E:66:D5:6A:59:F0:B4:A0:E3:0C:D1:14:AA:EB:15:27:33
Certificate issuer: /CN=d1a2744e66d56a59f0b4a0e30cd114aaeb152733
Certificate serial: 019FACE4903CFAF5BB54397F3DA282FD2DE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0aJ0TmbValnwtKDjDNEUqusVJzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5dbfe1-e49f-421b-a755-a983866070cb/1/0aJ0TmbValnwtKDjDNEUqusVJzM.mft
Manifest number: 24
Signing time: Wed 29 Jul 2026 08:01:27 +0000
Manifest this update: Wed 29 Jul 2026 08:01:27 +0000
Manifest next update: Thu 30 Jul 2026 08:01:27 +0000
Files and hashes: 1: 0aJ0TmbValnwtKDjDNEUqusVJzM.crl (hash: 66p/wJCrQ39sAlhzRc2vg4IcbvGnlrfuziGvhlywLhQ=)
2: ceyUVnmYWQ_dIwIKpX64k6Y4OLY.roa (hash: ptX3G2iVrVq3xSTlraGgIQKayhp9ftrtJBYKoRwKsRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5dbfe1-e49f-421b-a755-a983866070cb/1/0aJ0TmbValnwtKDjDNEUqusVJzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5dbfe1-e49f-421b-a755-a983866070cb/1/0aJ0TmbValnwtKDjDNEUqusVJzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0aJ0TmbValnwtKDjDNEUqusVJzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e4:90:3c:fa:f5:bb:54:39:7f:3d:a2:82:fd:2d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1a2744e66d56a59f0b4a0e30cd114aaeb152733
Validity
Not Before: Jul 29 08:01:27 2026 GMT
Not After : Jul 30 08:01:27 2026 GMT
Subject: CN=fb47f83608c8d2f7c31f466b6d0c024bca5e6f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5a:92:cf:2e:f7:8c:9d:1a:e4:ef:8d:99:7a:
f0:c2:3e:ed:a3:9f:9e:53:68:60:0d:e6:ca:e2:22:
b0:6e:e4:51:ad:e5:d2:19:10:a9:16:93:7f:c0:53:
a9:77:22:7a:55:1c:66:61:65:da:85:f7:54:fa:76:
3f:2e:8b:0a:7f:e4:fd:e7:a2:cb:e2:52:2b:d3:60:
05:cc:a5:39:82:10:c4:9e:3e:16:2e:88:2b:ca:45:
fd:ab:ed:e9:92:64:2c:46:b2:9e:de:c6:28:b4:56:
29:fd:58:6f:90:ed:2a:db:2c:0a:b4:51:27:50:e0:
df:88:8d:1b:2a:fb:5d:4a:b7:fb:08:df:08:11:fb:
62:d6:40:f1:ef:c3:ca:6c:2b:a0:ce:b3:28:cb:19:
f2:4d:40:61:16:39:d4:c6:ff:2d:46:11:2d:77:22:
e1:31:d3:36:b0:fe:62:03:d8:fa:aa:0f:71:72:ca:
c1:7e:f5:2a:6c:59:de:51:f1:6d:1a:08:5c:3d:f3:
69:5e:b3:f6:1c:cc:ab:11:14:ec:50:7f:cb:21:e2:
8d:42:42:6e:e0:37:cf:a6:ca:ca:7a:db:eb:6b:6d:
b9:b0:5d:ad:10:4b:02:de:42:3e:49:eb:05:7a:74:
fb:9b:06:c4:69:ab:11:68:f1:ab:da:e5:0d:48:a2:
d8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:47:F8:36:08:C8:D2:F7:C3:1F:46:6B:6D:0C:02:4B:CA:5E:6F:2F
X509v3 Authority Key Identifier:
keyid:D1:A2:74:4E:66:D5:6A:59:F0:B4:A0:E3:0C:D1:14:AA:EB:15:27:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0aJ0TmbValnwtKDjDNEUqusVJzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5dbfe1-e49f-421b-a755-a983866070cb/1/0aJ0TmbValnwtKDjDNEUqusVJzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5dbfe1-e49f-421b-a755-a983866070cb/1/0aJ0TmbValnwtKDjDNEUqusVJzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:31:39:1b:5e:b0:81:7d:23:2c:11:4e:79:75:00:f9:d4:ef:
d4:9d:04:c2:ab:91:7b:68:1d:12:4d:48:f6:2f:12:a8:6b:7e:
91:4e:31:6a:b7:ab:1a:ce:a0:b3:33:a1:d6:97:6a:79:33:e2:
98:e2:fc:98:0d:c0:bb:8b:93:bb:57:a5:d5:49:30:91:94:b3:
93:a3:a6:ce:5c:a0:f9:14:58:62:d3:f9:c9:e4:61:8c:76:a4:
2d:b3:cd:d3:23:02:5b:f1:bf:ad:86:07:1f:45:e4:6f:dd:09:
a9:8f:83:86:05:5f:86:09:05:84:c0:d0:16:9c:7e:9a:11:03:
41:ca:b8:ba:ed:31:cd:3f:a1:85:d5:4b:45:b2:30:2b:9b:2b:
97:f1:ee:b6:2a:cf:da:45:b5:aa:6d:75:6e:e7:58:b9:6a:c6:
99:77:ca:cd:d7:45:49:ee:94:76:47:e0:d6:62:f2:bf:7c:4b:
97:e4:05:45:31:ab:f8:80:cc:6d:9e:a3:5d:6c:58:3b:50:6e:
ec:c5:7b:56:fa:65:c2:db:28:23:b4:d9:eb:a4:d9:eb:ff:6a:
50:b5:7e:e1:b4:9c:7f:6d:ae:22:06:1a:e0:60:4e:bb:a7:39:
d2:c7:65:7a:69:81:39:22:f6:71:09:e4:8c:bd:9b:83:1b:e4:
cc:79:87:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:05:09 2026 by rpki-client