Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
File: 0lgUed7jtZlPEcnZVkYxv1pATAc.mft (raw, json)
Hash identifier: 0Hos7h5HQNFl+EPFJBU77porgNLDTv7KIECiurWNNoI=
Subject key identifier: 8D:A8:3A:41:A5:C1:21:8E:E4:EE:EA:50:16:16:56:FC:D3:B3:EF:64
Authority key identifier: D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
Certificate issuer: /CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Certificate serial: 019FA97599E663B79C485D7EFD977027645F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
Manifest number: 0AE0
Signing time: Tue 28 Jul 2026 16:01:24 +0000
Manifest this update: Tue 28 Jul 2026 16:01:24 +0000
Manifest next update: Wed 29 Jul 2026 16:01:24 +0000
Files and hashes: 1: 0lgUed7jtZlPEcnZVkYxv1pATAc.crl (hash: U3klgY9a3ZzSoH8tTxYU4sb6qh4WnTHwoZLOKzFTbVI=)
2: _anBuNNw0qAbfJJyR7NUzCXshEI.roa (hash: u/OzH4PvqgIz0IcQamVppLorgGwznO76WkLllc9zkBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:99:e6:63:b7:9c:48:5d:7e:fd:97:70:27:64:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Validity
Not Before: Jul 28 16:01:24 2026 GMT
Not After : Jul 29 16:01:24 2026 GMT
Subject: CN=8da83a41a5c1218ee4eeea50161656fcd3b3ef64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0d:2b:79:4a:c0:62:25:40:53:11:ef:6e:ee:
94:31:30:05:a5:2e:19:ca:60:59:a0:dd:bd:38:05:
ba:1f:66:fa:d2:51:2c:0d:d6:27:1d:bf:ed:08:ca:
da:b7:48:a6:84:4c:ce:8d:4a:8d:a6:67:e5:a4:00:
96:99:1b:93:b6:64:aa:a9:57:dd:e2:60:82:a4:6e:
03:47:8f:b7:8f:ea:1d:be:c6:5a:c3:37:28:a3:dc:
43:d5:4a:a7:59:58:57:1c:57:71:94:da:df:de:4b:
c7:82:c2:3b:64:39:93:94:d8:12:c2:c9:90:33:74:
d5:ee:53:89:87:21:49:67:2c:56:ba:0b:a2:8b:4a:
35:c5:2b:d3:f0:30:d7:31:60:ad:cc:9c:c5:a6:52:
34:40:d3:23:83:d2:ca:4d:57:bd:b3:c6:eb:ae:a7:
7f:50:7b:2b:68:f1:e5:8d:77:5f:f0:65:8c:f1:e0:
5d:0e:c8:46:c1:b0:4b:7d:1c:aa:cd:24:2c:e4:50:
4e:57:12:39:3e:61:00:8a:f0:23:1b:05:b2:54:1a:
c2:79:50:95:08:fb:b0:ce:05:47:b5:2f:b2:00:5b:
7d:83:32:63:bf:33:b0:0f:a0:77:e2:68:e3:d7:77:
e3:7f:c8:16:65:22:19:3d:28:7e:6c:1e:80:70:1c:
f6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A8:3A:41:A5:C1:21:8E:E4:EE:EA:50:16:16:56:FC:D3:B3:EF:64
X509v3 Authority Key Identifier:
keyid:D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:e1:2e:63:96:f3:4a:64:3b:9b:11:dd:f5:b2:6e:94:9b:5d:
d6:1b:74:d0:09:24:7c:8c:7a:c9:59:0e:87:71:f9:bb:11:ac:
47:0b:b2:be:87:5b:c0:71:bd:85:f7:5a:67:5f:f5:03:d9:23:
ba:25:ab:79:4d:b6:be:c0:77:6d:3b:9a:99:95:7c:f4:4c:f7:
1f:f8:03:06:87:c2:4f:08:18:bf:7e:76:0b:63:41:4e:36:29:
b0:07:81:0e:eb:76:75:12:d8:10:f8:63:e6:b8:0b:a8:2d:4d:
5a:f8:68:e7:dc:d6:e3:b5:49:a7:5b:c9:80:92:0a:7c:4b:fc:
de:3f:ed:72:f5:da:e1:ac:2f:27:60:bf:31:09:f4:4c:d9:98:
35:66:71:5a:f4:29:d6:a0:84:64:97:2b:ab:5f:7b:d1:0b:4c:
0e:12:8e:f2:dc:cc:c3:11:26:6e:d1:42:82:74:4c:a5:95:45:
5d:40:6c:b6:8c:13:e2:5c:5c:0d:89:a4:cd:6f:3e:10:ea:b1:
be:00:f5:e0:38:61:d2:ed:b3:6a:87:43:f8:ad:e6:ed:52:05:
a0:df:21:b7:d2:7b:db:0f:6f:22:c7:ec:54:38:8b:98:e4:c6:
d9:df:3a:36:b3:81:cd:03:2a:fb:5c:aa:e3:93:68:ff:79:2d:
e0:4e:f3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:52:43 2026 by rpki-client