Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
File: 0o_L31cryvk-FUTeEKF2yzARBrs.mft (raw, json)
Hash identifier: 0+qscdQTbLWb1FJsBt86438Rzxyj+Y0VUyjBEo3BPXM=
Subject key identifier: DC:0D:E1:68:B1:67:69:00:3F:CE:A4:30:43:DB:24:B3:94:F9:8B:90
Authority key identifier: D2:8F:CB:DF:57:2B:CA:F9:3E:15:44:DE:10:A1:76:CB:30:11:06:BB
Certificate issuer: /CN=d28fcbdf572bcaf93e1544de10a176cb301106bb
Certificate serial: 019FAAF5379B61F680EAB7519B60273B92B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
Manifest number: 18D3
Signing time: Tue 28 Jul 2026 23:00:24 +0000
Manifest this update: Tue 28 Jul 2026 23:00:24 +0000
Manifest next update: Wed 29 Jul 2026 23:00:24 +0000
Files and hashes: 1: 0o_L31cryvk-FUTeEKF2yzARBrs.crl (hash: 1OBgrUEdbEZZaV9f6pIaiOJFm98gY+1CWDVdn35auFU=)
2: cjgT7b7LYeNp4gJNcn-t-JKsvkw.roa (hash: 8t1u0wHQqLOP5QRswUwGb0F26EqFaE1jpZ2Y496m/4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:37:9b:61:f6:80:ea:b7:51:9b:60:27:3b:92:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d28fcbdf572bcaf93e1544de10a176cb301106bb
Validity
Not Before: Jul 28 23:00:24 2026 GMT
Not After : Jul 29 23:00:24 2026 GMT
Subject: CN=dc0de168b16769003fcea43043db24b394f98b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:18:9d:67:72:dc:95:09:0c:33:ea:14:df:32:
40:68:59:02:6d:59:b4:19:24:bb:7a:12:fa:a1:89:
ff:23:7b:0d:dc:19:ec:3a:9b:43:ec:58:f2:d7:da:
d6:cd:be:ea:fb:88:b1:a2:2e:4f:b8:63:f6:fa:09:
d0:11:d7:17:04:9f:10:3c:33:e7:d9:9d:0b:50:3e:
83:39:43:5d:e1:27:2e:c9:ab:7a:fe:98:40:43:1c:
f1:d6:07:de:2a:14:73:ba:fc:47:17:23:ab:af:11:
fe:72:ec:68:fe:0f:3b:c6:00:bf:32:93:bc:a2:6b:
17:56:f7:e8:ca:f7:69:9b:16:3b:34:37:6b:a3:35:
83:da:27:57:c8:a1:a4:05:19:f5:da:b2:db:4b:44:
2e:5d:d1:d4:94:58:aa:4b:0b:ef:04:6b:00:f0:04:
33:8e:58:d8:c5:4e:69:d6:d3:0b:04:ea:47:88:4d:
a2:5b:7c:00:40:8c:bd:5e:f9:ce:1f:b0:e7:86:72:
da:46:7f:de:b4:08:ee:72:25:d2:0f:a7:cd:c4:c7:
b2:1b:84:78:df:b3:1d:52:13:2d:26:93:e7:77:2c:
48:fb:fd:5b:8c:45:4a:b5:95:0d:8b:05:4a:49:e1:
26:2d:de:f1:55:ef:31:80:b9:a8:2d:44:59:01:7c:
33:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:0D:E1:68:B1:67:69:00:3F:CE:A4:30:43:DB:24:B3:94:F9:8B:90
X509v3 Authority Key Identifier:
keyid:D2:8F:CB:DF:57:2B:CA:F9:3E:15:44:DE:10:A1:76:CB:30:11:06:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c2:70:7b:40:0c:2a:67:76:5d:5e:09:7f:9a:fb:d2:d1:72:
22:fe:09:80:bd:93:b1:33:31:df:90:b4:94:e0:3f:19:70:71:
bb:5d:f8:76:97:18:59:a0:7b:1b:27:5a:d7:8c:d9:de:36:83:
b0:bb:ac:4d:87:2a:1d:11:32:a7:21:ed:83:c1:a2:1f:94:ba:
96:ae:0a:40:65:07:da:b2:fe:68:0e:6d:f6:fb:66:fc:ef:6b:
9a:51:04:c4:25:e5:64:b5:e7:2c:23:c6:1f:29:9a:07:a4:ce:
05:8d:55:45:6a:b1:ce:b8:7a:9e:c1:a4:15:52:26:61:9a:b2:
d0:66:13:55:28:fc:57:b6:ed:38:93:a0:65:42:68:94:02:19:
64:1f:d8:60:8c:1b:bc:8e:04:27:61:38:67:16:71:9f:6d:49:
10:df:d4:7b:27:9c:22:3b:cf:2e:03:d4:9f:e1:5d:eb:29:51:
e0:8f:e2:ec:0b:d1:2c:00:f1:dc:ac:2b:cf:ab:af:e2:d7:5b:
64:8a:27:dd:75:64:00:23:fe:44:63:3b:6b:56:0e:1b:85:6f:
8d:c4:da:1c:1e:69:d7:d1:e7:db:74:81:dc:ac:53:f7:84:a7:
66:cf:28:a5:00:99:a7:55:60:d2:7d:d0:70:a7:90:60:c0:77:
5e:6a:c0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:25:36 2026 by rpki-client