Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
File: 0lE5LNfm5ApFwbikR5iA7vlg8zA.mft (raw, json)
Hash identifier: 0UCkeOeRYpD0pAu2NOgPsiZU5ecxk8Rm4J0pRLf8wwA=
Subject key identifier: D3:68:87:E7:DF:77:24:6F:19:BB:99:B4:C3:2D:FA:61:10:A9:C1:38
Authority key identifier: D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30
Certificate issuer: /CN=d251392cd7e6e40a45c1b8a4479880eef960f330
Certificate serial: 019FA974ED6C042D1811F6EC0FF4A244D766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 16:00:40 +0000
Manifest this update: Tue 28 Jul 2026 16:00:40 +0000
Manifest next update: Wed 29 Jul 2026 16:00:40 +0000
Files and hashes: 1: 0lE5LNfm5ApFwbikR5iA7vlg8zA.crl (hash: Y6W5++Mvvb6mKV9sF7erpHU6+/vqWwLHJNDiqvezoVY=)
2: 12mV3ZosY8cTKWpFfBQEfwnx0BM.roa (hash: sqnV6smhnureA54M31ulMVSP8a9WYb/7AIpEIZop+fE=)
3: w-By4YicrBafnG_nw52slsPB7Mo.roa (hash: EbrbjE7k8b3TDf5vDoluKgnOO0qKqQeCgXWBufBzO7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:ed:6c:04:2d:18:11:f6:ec:0f:f4:a2:44:d7:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d251392cd7e6e40a45c1b8a4479880eef960f330
Validity
Not Before: Jul 28 16:00:40 2026 GMT
Not After : Jul 29 16:00:40 2026 GMT
Subject: CN=d36887e7df77246f19bb99b4c32dfa6110a9c138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7e:89:0a:69:df:a0:43:cb:d6:8f:51:db:4d:
9f:a1:b8:b1:53:fe:60:de:51:54:64:68:ff:4a:a0:
f3:6d:3f:3b:b1:60:fd:22:ac:e3:57:43:aa:de:08:
32:7d:3f:6f:b8:74:c1:08:0d:f5:4e:d8:cd:c0:90:
56:b6:e6:2c:ef:25:2b:c0:b0:29:32:52:bd:38:00:
e8:ef:44:b9:a1:95:98:fc:01:c7:5e:45:a0:33:42:
d3:f2:0a:d7:46:58:37:9e:28:31:fa:96:08:ee:e4:
3c:c2:e6:5e:99:0d:cc:97:3b:15:ad:4f:cc:3d:6d:
5f:a6:c6:d1:f8:f0:e2:3a:f8:0e:b0:31:24:04:3c:
fb:40:31:86:3c:60:9a:02:19:cb:04:6e:f2:4c:0f:
c5:71:95:26:52:c4:54:cf:34:c4:4c:55:29:b5:ac:
1f:7a:67:ea:22:9a:92:c6:9a:83:a9:5d:6f:86:4f:
7a:be:ab:1f:61:91:3d:b7:55:48:bf:7d:f3:2c:c4:
a5:1d:10:51:f4:b0:90:88:33:c8:e7:49:05:58:4d:
2c:c2:49:e1:2c:71:43:b0:c1:15:5c:3b:44:4d:ba:
a9:73:93:29:cf:6c:79:53:d5:91:02:e0:a6:f1:e2:
aa:2f:2d:4a:9e:9d:77:60:39:33:d4:b2:a9:36:80:
ef:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:68:87:E7:DF:77:24:6F:19:BB:99:B4:C3:2D:FA:61:10:A9:C1:38
X509v3 Authority Key Identifier:
keyid:D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:8d:84:d4:f7:1a:c6:3b:e4:e0:9e:79:7f:84:10:94:a5:81:
4c:dd:1d:9c:5b:05:4c:1a:06:af:d9:cd:6f:bc:ca:e8:e9:1e:
ec:56:0a:1e:e5:34:b1:43:e1:40:34:c8:d9:09:62:8a:93:bd:
bf:9b:16:2f:35:e9:94:3a:cc:c1:08:0f:31:7b:87:31:74:1c:
fa:50:e3:e7:a4:9c:01:2e:38:85:e3:8e:16:6c:89:25:94:5a:
50:14:fe:d0:2c:33:eb:f6:67:75:5b:d8:9b:f1:ce:0b:98:97:
0e:73:fe:9b:0a:58:ea:a6:b5:35:54:12:83:da:d8:77:c6:82:
68:ca:f3:c0:3b:63:5a:a3:31:90:b1:9b:ea:26:0a:63:78:3e:
be:71:de:da:bc:44:b7:7b:46:01:8c:ec:62:1b:18:1d:78:7b:
8c:04:7a:08:8e:00:5d:0c:2c:c4:cc:87:c0:87:40:47:fa:cd:
da:f9:30:c1:58:12:2e:66:9c:55:84:97:b7:47:6f:7b:25:a9:
5f:50:95:c1:4a:03:4b:bb:a7:bd:57:de:c3:c3:9a:5a:40:94:
bb:bb:aa:29:e5:21:8c:f8:91:77:37:f9:82:66:02:29:d9:80:
ef:d5:e4:4a:12:70:37:51:12:f2:5d:c5:eb:61:b9:71:30:a7:
7c:f7:54:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:53:57 2026 by rpki-client