Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
File: 0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft (raw, json)
Hash identifier: ZzS/X8sCBzmjq17Q3wFxQJeR52GFkvmu8MBAMfEbnvA=
Subject key identifier: 09:7B:76:AB:A1:A2:E7:8F:6A:B4:47:9F:8B:3C:D5:85:54:92:D2:1B
Authority key identifier: D2:DD:4D:DD:53:6F:18:A8:72:CB:AC:15:E5:89:54:2A:ED:CD:07:37
Certificate issuer: /CN=d2dd4ddd536f18a872cbac15e589542aedcd0737
Certificate serial: 019FAC76B6DBE78C995B5F5F51B8D220D001
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
Manifest number: 0BBE
Signing time: Wed 29 Jul 2026 06:01:28 +0000
Manifest this update: Wed 29 Jul 2026 06:01:28 +0000
Manifest next update: Thu 30 Jul 2026 06:01:28 +0000
Files and hashes: 1: 0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl (hash: T7Vh+1HOOU5jQ4if50WJ6VtwRpsZFVnEBneZjWC2pK8=)
2: X_8Np37khTcPCEtRXHbNQfqvQNE.roa (hash: XNLBBBK7IAMNXci8RcPDaNEkuHX48HSzOY+bMxN50u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:b6:db:e7:8c:99:5b:5f:5f:51:b8:d2:20:d0:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2dd4ddd536f18a872cbac15e589542aedcd0737
Validity
Not Before: Jul 29 06:01:28 2026 GMT
Not After : Jul 30 06:01:28 2026 GMT
Subject: CN=097b76aba1a2e78f6ab4479f8b3cd5855492d21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f3:f6:24:7e:3a:52:90:3e:68:f8:4b:e9:68:
ff:39:29:9d:ca:a6:04:be:e6:5b:dd:43:04:81:ad:
9a:db:c5:d5:4c:57:25:1f:ff:74:4e:46:92:50:df:
6f:b7:75:62:b2:2a:e1:6b:c6:4c:60:73:42:3a:a8:
65:64:a7:00:ed:1f:11:31:31:d8:79:f0:25:13:ab:
82:3b:c5:1e:65:b0:94:dd:6d:74:3c:6c:e9:6c:df:
cd:00:5b:62:4e:15:fb:ae:b2:ad:28:a1:bf:d6:0c:
36:c7:e5:fb:fa:28:3f:c3:84:ce:05:3e:d2:cc:10:
60:e3:31:95:1f:e8:db:ef:64:e3:5c:1c:4e:bf:57:
d4:ce:10:31:a9:61:a0:0c:17:f1:36:4a:4e:ec:9c:
60:ac:a0:53:c8:7c:b9:f6:10:7d:cc:f1:0b:2a:d7:
f2:d6:57:04:52:fe:eb:36:88:93:a3:3d:9b:3a:1e:
2a:01:e6:ce:c8:8e:5c:d5:61:45:b8:7d:ff:a8:a0:
99:44:af:99:b8:a2:17:ff:d9:52:ff:5a:ac:ac:b9:
b3:2e:58:db:04:a9:9e:6c:23:28:d9:62:e7:0c:bf:
5a:9d:b5:96:d6:58:ca:15:2d:55:9f:2e:13:a4:c9:
fe:65:cb:ac:8d:ad:cd:1f:f2:7d:2f:e8:8b:5a:6c:
d6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:7B:76:AB:A1:A2:E7:8F:6A:B4:47:9F:8B:3C:D5:85:54:92:D2:1B
X509v3 Authority Key Identifier:
keyid:D2:DD:4D:DD:53:6F:18:A8:72:CB:AC:15:E5:89:54:2A:ED:CD:07:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:16:b7:07:f2:98:70:1c:36:cb:ca:f0:6d:46:43:ff:98:78:
f0:7c:06:31:14:80:eb:2f:47:39:80:0a:ea:db:dd:9d:94:61:
f6:3a:55:a1:2a:d7:5d:c4:11:20:ea:a0:b9:7b:6b:d8:cd:d5:
7d:76:42:af:47:a0:27:9c:2e:74:45:49:89:90:4b:f7:5a:51:
19:66:05:a1:c8:15:50:7d:40:b1:f4:ee:0b:7f:61:bc:5e:7b:
82:0a:d5:b4:d4:94:b7:c2:dc:54:6c:a3:bb:40:c2:cf:cd:b8:
11:b0:18:f7:cd:16:12:14:45:ca:97:53:9c:9a:ef:06:65:61:
bf:54:ed:ac:37:71:d5:be:4b:df:f7:7c:42:a8:4a:9c:f2:6b:
e2:35:61:68:7e:26:88:c9:36:d4:46:9f:33:d1:3c:54:61:88:
dc:57:fb:b4:cc:82:29:0b:04:a3:c1:39:6b:2f:e5:b0:d1:6b:
d7:2a:5b:3f:43:04:52:58:49:3d:d1:5f:57:2d:46:cd:4f:39:
15:b5:3e:5e:b3:f2:22:dd:b5:0d:ef:01:f3:22:1c:c9:59:6c:
ae:f0:49:ba:55:c6:f5:6f:5b:a7:17:2a:c2:94:29:b3:38:89:
94:ca:ae:a6:b1:c9:0b:5e:9b:3a:bc:f0:8f:39:80:33:bc:1a:
e5:51:e0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:53:14 2026 by rpki-client