Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
File: 0PT6gHWHU7JDohZe3ep12-7oJsQ.mft (raw, json)
Hash identifier: iqX/qIRqDzMUJ/n30E0dVn1RZECphLl6wMpYSGHg4Io=
Subject key identifier: D9:55:5F:9E:C2:97:46:F6:AD:CD:EB:1E:32:47:AF:6D:02:B5:38:FA
Authority key identifier: D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4
Certificate issuer: /CN=d0f4fa80758753b243a2165eddea75dbeee826c4
Certificate serial: 019FAA19FCBC4F281C0139FAF99BA43C4FB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
Manifest number: 14BF
Signing time: Tue 28 Jul 2026 19:00:57 +0000
Manifest this update: Tue 28 Jul 2026 19:00:57 +0000
Manifest next update: Wed 29 Jul 2026 19:00:57 +0000
Files and hashes: 1: 0PT6gHWHU7JDohZe3ep12-7oJsQ.crl (hash: yhKzT9lfgp0bR0Ny07uCvV/shwIpc6PZmBpLJWEqa4Q=)
2: pLi1qq2wcSmdgCiUnjjCoQErQdA.roa (hash: 7prO26MADaOtqZ/YBeNHajM4pUEvbdbYtkMA592/T+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:fc:bc:4f:28:1c:01:39:fa:f9:9b:a4:3c:4f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f4fa80758753b243a2165eddea75dbeee826c4
Validity
Not Before: Jul 28 19:00:57 2026 GMT
Not After : Jul 29 19:00:57 2026 GMT
Subject: CN=d9555f9ec29746f6adcdeb1e3247af6d02b538fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d1:64:cb:70:f3:ad:8b:73:7f:7b:9e:25:5a:
de:49:69:b4:f1:d0:41:e8:b4:b9:7f:61:17:8b:70:
e5:ea:16:7a:9c:c5:58:b8:71:bb:cf:49:82:77:78:
3f:ed:4c:f9:50:e6:de:71:39:e6:4d:9f:0d:3e:9a:
92:57:a8:0b:4a:bd:2f:32:b4:dc:47:37:6c:c4:09:
c8:69:38:93:8d:ba:38:19:c6:de:d9:c2:b0:88:e3:
eb:50:a9:66:2a:6f:c8:5d:64:f9:28:40:2d:6b:66:
71:73:b1:a7:3f:03:00:44:57:d2:e3:6d:b4:ac:46:
42:c6:05:40:48:8a:e3:3b:65:d2:0d:28:c3:9b:97:
fb:b9:f0:f4:d4:35:10:38:5b:e1:a1:12:b8:50:7f:
09:23:ef:21:7c:f7:20:77:66:ea:44:af:6b:91:b2:
3a:8d:b0:76:1a:d4:5b:3a:97:0e:f6:8b:fa:bc:9d:
96:89:26:49:51:ee:60:a3:31:2d:7f:71:ce:af:ac:
b1:26:6f:f3:1c:fc:fb:24:a3:76:9e:2b:1c:55:ba:
87:4a:71:79:af:8c:f1:01:4f:86:7e:d3:ad:65:f3:
80:1a:9e:4a:86:0a:58:95:c1:a4:4d:2a:32:59:dd:
99:50:e8:0b:1d:8c:bd:df:21:bb:03:ff:82:c5:a7:
a1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:55:5F:9E:C2:97:46:F6:AD:CD:EB:1E:32:47:AF:6D:02:B5:38:FA
X509v3 Authority Key Identifier:
keyid:D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b4:0e:79:9a:c1:10:e6:93:ea:2f:00:f2:3d:ff:e7:5c:31:
14:0b:8e:fa:57:7e:ec:14:0e:6b:be:aa:f9:9f:63:2b:e1:fb:
86:4f:6d:83:1e:71:fc:4d:a6:96:15:76:3f:e8:96:c6:81:37:
ff:0c:ea:f5:d0:08:74:00:e1:14:a3:7a:b5:96:2c:cd:4a:ab:
ae:e4:86:0f:c5:f5:46:21:ce:eb:45:ad:4b:57:6c:3f:ff:38:
5f:1f:5a:6b:59:7f:7f:7a:8d:5c:21:ab:18:58:a6:57:a6:9a:
89:80:e4:39:74:db:bc:7a:55:f5:26:da:f4:e1:54:39:57:29:
f4:c9:c9:b8:00:a4:ef:9d:f6:18:d0:fd:6e:f4:eb:ae:07:a6:
29:17:9b:e1:a7:dd:77:c3:eb:13:1f:c1:66:02:29:b4:45:d2:
8c:43:1f:31:f3:6c:ae:7a:d8:98:b8:5c:15:46:f8:43:03:5d:
e1:d2:1e:ba:8a:5b:6d:af:ff:12:41:0a:29:e2:94:ca:e5:e8:
04:54:1f:41:01:46:a2:95:ca:bc:32:15:3b:4e:a7:33:c3:d5:
f2:79:a4:f7:78:f6:91:95:3f:b5:bc:b9:5a:e0:21:90:65:31:
f3:e8:95:37:8d:8f:60:53:2e:fe:18:28:6b:90:39:74:8b:fa:
23:55:d0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:43:59 2026 by rpki-client