Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
File: 0rtm-96q__Q7llCx9svk8p7a9Yw.mft (raw, json)
Hash identifier: 0Dse9aq4cAlXgeeFVD/1mWqH/+FUDXEh9zcvxYgsO/4=
Subject key identifier: 35:7E:F7:9A:14:04:B6:4B:43:3F:55:72:2D:CC:60:D2:89:78:E1:83
Authority key identifier: D2:BB:66:FB:DE:AA:FF:F4:3B:96:50:B1:F6:CB:E4:F2:9E:DA:F5:8C
Certificate issuer: /CN=d2bb66fbdeaafff43b9650b1f6cbe4f29edaf58c
Certificate serial: 019FA7BDAF0326A37B4065DABD03CA7F802A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 08:00:53 +0000
Manifest this update: Tue 28 Jul 2026 08:00:53 +0000
Manifest next update: Wed 29 Jul 2026 08:00:53 +0000
Files and hashes: 1: 0rtm-96q__Q7llCx9svk8p7a9Yw.crl (hash: s5865MJLPFLt6Cv5MVAbfQt2sZixxLeRpdRA+JdgKBo=)
2: eIIxqZskipAH_XpPhKjF9X-64rY.asa (hash: VTutP00cFHBg9CdpBAccd7neZzunWQqoCOHiZUhg2dY=)
3: eqRZK_JGFaT4pOqnhAyJvjkUCoA.roa (hash: jItvJdxi3E9SOd6i/gjBeEHoNNhvY/8u3V8hrLU5X7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:af:03:26:a3:7b:40:65:da:bd:03:ca:7f:80:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2bb66fbdeaafff43b9650b1f6cbe4f29edaf58c
Validity
Not Before: Jul 28 08:00:53 2026 GMT
Not After : Jul 29 08:00:53 2026 GMT
Subject: CN=357ef79a1404b64b433f55722dcc60d28978e183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:77:8a:d7:ba:67:6c:43:55:95:f5:ca:ca:d2:
ea:4c:07:fa:73:ab:95:bf:01:6b:95:ba:b8:94:3b:
78:24:bd:01:3e:37:98:16:ce:64:df:ee:e3:9b:6d:
ef:0d:5d:90:39:b4:79:86:0d:a7:b0:eb:b4:fe:f3:
aa:51:75:7a:69:f2:71:f5:96:29:b1:c2:68:1e:56:
bf:d2:df:0f:a2:e9:c1:c0:a9:4e:b1:97:23:a2:73:
a6:4b:2e:fe:12:a4:2b:de:fb:23:4b:a6:a2:c4:97:
97:be:7e:5e:b2:ee:7c:a0:69:c7:ad:6c:b3:30:7d:
b6:de:a4:fc:5f:39:f6:77:e7:a9:33:41:2c:27:b5:
3e:58:db:b2:ff:4f:84:30:6d:c0:1b:b0:66:e4:fd:
40:d3:25:74:f8:1d:76:67:a3:cb:2e:43:07:12:10:
eb:0f:ec:11:32:9a:d7:84:bc:b5:05:b7:df:9b:69:
c3:dd:66:b5:14:c8:25:b5:28:a6:57:51:8a:8e:c1:
42:e4:e1:43:74:9c:d5:26:82:ac:85:48:1d:e0:49:
8f:78:35:1b:5d:a4:24:5b:80:ed:56:b0:66:b6:d2:
13:99:d8:b6:d1:57:4a:3f:e2:58:2a:65:1e:96:f0:
9b:89:8f:4e:9e:24:24:32:74:3a:a4:75:3b:3d:d1:
7c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:7E:F7:9A:14:04:B6:4B:43:3F:55:72:2D:CC:60:D2:89:78:E1:83
X509v3 Authority Key Identifier:
keyid:D2:BB:66:FB:DE:AA:FF:F4:3B:96:50:B1:F6:CB:E4:F2:9E:DA:F5:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:19:c7:5d:32:c2:1f:67:a6:dd:c1:21:f4:4d:98:d8:a8:2f:
f6:a8:fe:40:ed:b4:3a:5e:15:c4:d2:0e:ee:c7:cc:b3:07:8a:
e1:74:d7:c0:86:3e:be:4a:3d:6f:02:b8:50:49:cc:3b:19:0b:
b6:55:2d:e5:dd:b3:97:d1:ac:5b:d2:25:c5:99:6a:31:67:e0:
9f:8e:16:82:8d:6f:be:5d:fa:73:68:95:c2:fa:c8:d0:ac:24:
67:c5:69:53:bd:35:fa:d7:5b:38:5e:6b:b9:db:b8:19:ab:d1:
11:8c:69:a0:84:1e:78:0b:50:3e:32:eb:e7:5f:97:f2:75:97:
97:36:29:05:d9:4e:c2:2d:48:77:c3:79:66:1e:45:eb:34:87:
99:f5:59:8e:80:ab:72:0d:b1:79:45:81:7c:77:d3:ed:a5:b5:
31:0e:3a:b0:96:95:55:79:8c:9a:b8:db:54:da:27:85:86:2a:
1d:b7:21:e3:f9:03:6c:5f:dd:af:7f:29:fe:6a:a2:f3:de:0b:
04:96:4f:33:47:47:2a:b0:77:c0:ec:60:f1:32:2a:62:4d:81:
55:c8:86:50:4e:2e:c8:a5:00:92:04:ec:2e:e9:ce:61:8b:6b:
5c:c3:8a:93:e3:a3:e4:e3:1f:78:6e:5c:d4:27:0b:e8:b7:9e:
68:45:8a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:56:03 2026 by rpki-client