Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
File: 0rtm-96q__Q7llCx9svk8p7a9Yw.mft (raw, json)
Hash identifier: WcytGRivzV0ofnNrxxijd4SH8X9MngkxMjlCIliFNO8=
Subject key identifier: AB:F5:D8:94:ED:7B:7C:8E:21:84:B9:88:4B:B1:24:E4:A1:B2:39:40
Authority key identifier: D2:BB:66:FB:DE:AA:FF:F4:3B:96:50:B1:F6:CB:E4:F2:9E:DA:F5:8C
Certificate issuer: /CN=d2bb66fbdeaafff43b9650b1f6cbe4f29edaf58c
Certificate serial: 019FA9AC4F0EC80D95E013122877D353D582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 17:01:09 +0000
Manifest this update: Tue 28 Jul 2026 17:01:09 +0000
Manifest next update: Wed 29 Jul 2026 17:01:09 +0000
Files and hashes: 1: 0rtm-96q__Q7llCx9svk8p7a9Yw.crl (hash: 77Lk5YV4zWGtXbLDd622IXi3HQRgocgWHidHheEKBQk=)
2: eIIxqZskipAH_XpPhKjF9X-64rY.asa (hash: VTutP00cFHBg9CdpBAccd7neZzunWQqoCOHiZUhg2dY=)
3: eqRZK_JGFaT4pOqnhAyJvjkUCoA.roa (hash: jItvJdxi3E9SOd6i/gjBeEHoNNhvY/8u3V8hrLU5X7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:4f:0e:c8:0d:95:e0:13:12:28:77:d3:53:d5:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2bb66fbdeaafff43b9650b1f6cbe4f29edaf58c
Validity
Not Before: Jul 28 17:01:09 2026 GMT
Not After : Jul 29 17:01:09 2026 GMT
Subject: CN=abf5d894ed7b7c8e2184b9884bb124e4a1b23940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7e:98:68:0a:6a:f6:14:d0:b7:47:9e:91:d3:
04:5e:2f:f1:ec:96:8e:a8:13:69:33:a9:02:35:53:
35:0e:da:b7:62:cd:fb:13:15:b8:9e:f7:97:98:5b:
c6:55:64:cb:0c:ca:9e:4c:ee:28:fb:94:4f:c3:d5:
9e:a2:5e:9f:cf:f1:87:a7:22:25:23:6e:b8:c0:f3:
b4:9e:d6:25:43:d7:90:08:c8:c5:ab:88:7c:6d:4f:
e5:14:5a:e3:6c:c1:fe:b2:b6:e1:08:21:d4:cf:a3:
4c:6b:7a:f5:65:4a:a8:1d:c7:35:d4:d3:98:69:b2:
f7:e2:21:e1:80:d2:4d:8f:2e:50:95:7f:ba:8a:30:
54:c7:77:fd:8a:3f:8c:4a:cb:f6:b9:59:0b:38:e0:
be:e9:ad:70:8c:02:3d:2a:a4:59:7f:ad:e1:5c:30:
d0:6a:0f:ab:aa:28:fc:60:be:da:64:e5:ff:a5:2c:
f4:84:d7:d0:c4:d9:ec:40:f3:f6:1b:16:64:77:de:
74:8c:e2:d0:c2:d8:8f:ce:89:e5:96:86:6d:86:79:
5b:7c:ed:6b:6a:22:2d:8c:56:5a:78:5e:f5:82:88:
db:a1:d8:2f:85:5a:5d:1c:c0:10:0d:86:fc:95:a0:
dd:44:e4:58:b5:51:21:ab:97:e8:5a:d6:53:de:1f:
8c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F5:D8:94:ED:7B:7C:8E:21:84:B9:88:4B:B1:24:E4:A1:B2:39:40
X509v3 Authority Key Identifier:
keyid:D2:BB:66:FB:DE:AA:FF:F4:3B:96:50:B1:F6:CB:E4:F2:9E:DA:F5:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:3c:00:f6:64:97:d8:d7:30:01:7d:34:db:9a:d7:3f:d6:b7:
2a:f0:fa:37:06:95:5e:1c:5d:67:8a:f3:28:52:8c:42:7c:c7:
9d:d4:b4:35:b4:66:7a:cc:98:2d:d6:71:38:fb:a1:9e:8d:d1:
f2:99:ba:70:64:88:b8:fe:d1:ff:d4:fe:2c:6c:70:9a:b0:5d:
57:18:e9:a9:b3:63:db:fe:6f:26:ef:3d:c0:55:65:da:e4:72:
a7:77:78:c0:e5:5d:28:22:54:30:35:0a:e8:e3:98:cd:ac:c3:
0d:ca:35:31:b4:2b:70:24:c5:ca:5c:38:ae:83:90:d7:cf:93:
cd:fc:94:df:ac:56:47:59:6e:f9:be:6c:dd:6a:ca:3a:73:ad:
0f:00:9d:24:f7:b4:c3:75:42:90:83:53:0b:87:ce:52:61:ca:
48:7c:2d:cf:0f:6d:1c:a3:ab:a9:29:5c:c3:86:09:b0:fc:af:
75:ef:21:b7:db:c7:65:b3:47:cb:44:e3:48:f0:1c:24:8a:09:
5a:24:a3:9c:11:94:df:e0:15:0d:19:b9:d9:d5:db:4a:ee:ca:
40:d6:2d:4f:a4:aa:5f:d7:8b:38:07:fa:b8:72:7a:c0:d7:f7:
24:81:39:8e:a5:6c:1f:27:2c:5c:ed:a5:1e:75:f7:b3:91:8d:
a9:97:42:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:00:10 2026 by rpki-client