Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
File: 0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft (raw, json)
Hash identifier: w8qGWK9/obG184qp9P1LElF7bqs+6j9DErBEvAmogKs=
Subject key identifier: 07:BD:E2:26:58:1E:04:B4:EA:7F:4F:A5:24:D7:79:7C:2E:A6:FC:61
Authority key identifier: D1:3B:BC:92:A2:FA:90:A0:A1:12:2B:83:30:34:6F:9A:61:71:D9:76
Certificate issuer: /CN=d13bbc92a2fa90a0a1122b8330346f9a6171d976
Certificate serial: 019FAABE8F679D71A73077E076C8AC4E1B68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
Manifest number: 14D3
Signing time: Tue 28 Jul 2026 22:00:42 +0000
Manifest this update: Tue 28 Jul 2026 22:00:42 +0000
Manifest next update: Wed 29 Jul 2026 22:00:42 +0000
Files and hashes: 1: 0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl (hash: kVFg+WDKA/li+0i+Apu2uELcV6WrbngDDhrOJZhUiRM=)
2: 1pCvkt2PpE0ZPUQ0xcRpclm4Vx4.asa (hash: DhYV1vMdkhq6+tjylyKNPB9YXFnru1L+V/7iVRsUG3M=)
3: 2xGqMqbFa646EMEXsukXriphVW8.roa (hash: odEL2M6BYLsF4njGikEkDGjtP1dJDgPaubWbiCHPAAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:8f:67:9d:71:a7:30:77:e0:76:c8:ac:4e:1b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d13bbc92a2fa90a0a1122b8330346f9a6171d976
Validity
Not Before: Jul 28 22:00:42 2026 GMT
Not After : Jul 29 22:00:42 2026 GMT
Subject: CN=07bde226581e04b4ea7f4fa524d7797c2ea6fc61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1e:a6:e7:7d:f8:e0:38:59:2b:28:ed:c6:0c:
6f:bc:53:1c:9a:ba:d1:a4:a7:12:53:7d:73:b5:3e:
e6:c0:b8:4b:1d:ce:66:28:a2:63:d0:7a:54:c9:e0:
67:09:44:55:e8:ea:7e:df:69:e5:09:54:d5:6b:96:
8a:c1:7c:32:f3:9d:62:3f:aa:5d:58:2c:e8:2d:e1:
25:fc:d4:9b:8a:3a:67:4c:36:d1:94:42:40:70:f6:
f8:f6:41:52:c4:50:63:7d:1f:43:b2:72:16:69:d4:
db:c1:c1:f8:e4:17:c1:00:b3:b7:21:af:77:61:c9:
2f:4f:8c:bd:a8:86:40:3b:96:48:b3:d3:51:6a:a7:
a8:39:12:c0:95:60:a4:1f:ce:da:0d:9c:b4:cf:e1:
ea:da:27:4f:1a:8a:f2:f1:c4:0a:eb:65:88:77:87:
16:fd:bf:a1:10:e2:98:f2:e2:a1:80:fe:88:9b:90:
f0:0a:cb:51:ca:c0:40:04:b7:32:a1:f3:62:17:f4:
46:1c:ef:06:2b:c8:e2:8e:40:30:83:97:13:7c:65:
4e:02:14:ac:8b:e1:d7:21:80:5f:55:9b:f5:4f:17:
24:3e:bd:3f:d2:11:9d:96:b7:ca:ff:69:87:1f:16:
46:e0:81:6f:21:5b:22:ab:cd:0f:be:20:2f:6d:89:
9a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:BD:E2:26:58:1E:04:B4:EA:7F:4F:A5:24:D7:79:7C:2E:A6:FC:61
X509v3 Authority Key Identifier:
keyid:D1:3B:BC:92:A2:FA:90:A0:A1:12:2B:83:30:34:6F:9A:61:71:D9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:bc:02:59:a8:f7:c8:e0:4f:4d:98:56:cd:d1:02:50:09:dd:
83:74:eb:e9:5d:14:cd:a0:b1:6d:78:da:26:fd:38:a9:57:31:
f7:7c:74:ed:98:c7:fe:f6:c6:1f:f3:8f:f1:ab:6e:4f:0b:fd:
6b:ed:84:3b:31:bb:75:b6:d2:a7:61:2e:e9:c7:f9:cf:3b:44:
e1:d8:e9:a1:7c:52:ad:e4:94:32:e2:65:d6:d3:2d:eb:a1:f5:
7a:13:58:db:c5:77:c2:62:d6:2c:a2:64:86:c7:3f:6e:b7:78:
61:2e:e5:db:c6:03:e5:a2:20:ac:fb:d7:e5:bd:dc:38:1c:12:
6e:d6:9c:ed:93:ab:fb:65:56:cb:93:7b:b0:c9:e5:87:5d:ff:
68:82:b6:15:25:19:fc:34:e9:d0:6c:db:cf:15:d4:df:d9:62:
1e:18:99:82:61:99:a7:f9:c7:6d:60:77:71:17:00:14:2d:16:
c6:02:1e:e3:3d:b5:78:14:5e:8d:04:e7:59:4b:86:1f:1d:08:
e7:d1:8f:86:5c:1f:ad:a4:93:4e:6c:eb:f2:9c:71:c1:72:e3:
32:a6:57:7d:de:2e:07:c6:dc:f9:2b:b0:31:65:8b:88:25:6a:
71:a4:3f:b0:38:cf:05:9f:bd:d9:e6:42:76:d3:97:18:4c:55:
4f:61:c3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:14:29 2026 by rpki-client