Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
File: A83mT0Foo_OZt3SU2Urqdyksm88.mft (raw, json)
Hash identifier: kOCxcY5XVBBXpVtP3eah/X1LRcAz6GfqKmp/cUGiTOo=
Subject key identifier: CA:D4:57:EB:88:5E:6C:BA:2F:8E:80:BC:94:9F:DB:FF:D5:08:0D:4E
Authority key identifier: 03:CD:E6:4F:41:68:A3:F3:99:B7:74:94:D9:4A:EA:77:29:2C:9B:CF
Certificate issuer: /CN=03cde64f4168a3f399b77494d94aea77292c9bcf
Certificate serial: 019F90236A157DFDB7371CAC2975FCDD5C65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
Manifest number: 152C
Signing time: Thu 23 Jul 2026 18:01:07 +0000
Manifest this update: Thu 23 Jul 2026 18:01:07 +0000
Manifest next update: Fri 24 Jul 2026 18:01:07 +0000
Files and hashes: 1: A83mT0Foo_OZt3SU2Urqdyksm88.crl (hash: lZqi4YX6Ry8Z5Mnc4IXukjh4WdnVknwpWerk6M6zM88=)
2: VqbW8hWa6U_90YgDAsOUDVLHuCw.roa (hash: quQX28Hjb85Vem897JezSZ+lGMfYDszka76M0Xq2SLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:6a:15:7d:fd:b7:37:1c:ac:29:75:fc:dd:5c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03cde64f4168a3f399b77494d94aea77292c9bcf
Validity
Not Before: Jul 23 18:01:07 2026 GMT
Not After : Jul 24 18:01:07 2026 GMT
Subject: CN=cad457eb885e6cba2f8e80bc949fdbffd5080d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:eb:87:13:b6:ec:cd:1d:25:81:68:51:8b:87:
a0:9d:e4:ab:18:78:ed:94:9a:49:60:c9:d0:cf:fb:
85:01:93:cf:0f:d0:1f:08:3a:02:68:e4:8c:a7:d3:
70:58:cb:40:53:89:78:b4:3f:44:55:97:c6:fb:3b:
56:9f:27:de:7c:aa:13:44:3e:7e:ce:07:b0:e6:72:
50:4b:30:13:1a:48:8c:a6:f9:8e:34:20:1c:db:82:
35:fc:25:ee:e3:8d:ff:34:02:4f:c2:da:80:5b:c6:
cc:99:40:24:34:1b:af:68:e1:a5:48:2c:2a:e9:8d:
83:57:7d:88:ad:b3:40:4a:aa:1e:40:04:43:f1:68:
f2:aa:02:d1:a9:c3:9c:89:38:a6:ab:1b:0e:ae:2f:
42:04:15:b9:40:84:e9:24:83:5e:6f:2b:96:8d:e7:
ab:a7:c7:cb:cd:dd:13:59:1a:90:5a:cc:3b:de:09:
2d:da:76:ff:8c:47:65:23:50:20:00:6b:37:55:8b:
eb:32:e5:d0:9d:31:4d:35:0d:1c:51:e7:7b:b8:9a:
95:c1:da:01:6e:b7:7a:3b:bd:6d:e7:db:b0:f0:96:
1d:e0:ff:97:34:9c:09:ab:d1:32:6a:e5:91:8f:3e:
cd:1c:8b:28:06:48:8f:71:35:39:f4:1e:aa:07:6a:
87:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D4:57:EB:88:5E:6C:BA:2F:8E:80:BC:94:9F:DB:FF:D5:08:0D:4E
X509v3 Authority Key Identifier:
keyid:03:CD:E6:4F:41:68:A3:F3:99:B7:74:94:D9:4A:EA:77:29:2C:9B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:20:08:67:af:1d:ab:a5:1e:ee:ff:7e:65:30:f7:f5:e5:b4:
e4:76:a2:f7:5f:17:c4:b0:34:47:57:d4:65:44:59:5b:c2:65:
7a:18:6f:81:3e:ef:01:2f:ea:ce:5a:46:b2:d1:ad:24:a7:4f:
b1:41:fc:cd:2c:96:da:0f:de:38:f0:6d:45:95:be:51:43:53:
9a:61:b1:36:70:4d:25:79:5b:6e:0b:50:94:5c:f1:f8:b2:77:
fe:44:c5:e4:dd:24:14:d7:d6:34:91:7f:93:96:4f:39:d5:ac:
a9:f9:aa:4f:06:fd:3a:eb:e0:dd:01:2a:72:64:ed:50:2e:70:
67:b3:56:1f:78:ad:3c:a4:12:b1:db:47:e3:40:52:97:95:d0:
08:cf:55:b1:bd:4f:6a:41:9e:6f:1f:38:2f:c8:20:05:3b:a5:
b2:d8:d7:41:1f:0e:e3:c6:15:30:fe:7b:da:8a:a8:9d:6b:80:
a8:46:f0:9f:7f:1b:e2:ef:c2:c3:09:eb:7e:e9:9d:98:ec:e3:
5b:85:12:28:04:fa:d5:bd:5a:7a:57:f5:2d:25:df:19:0d:47:
a3:ec:17:b6:a4:c8:81:d1:72:26:5a:fd:21:04:50:9c:47:14:
40:ef:40:16:5a:b7:b8:dc:cd:5f:9d:83:50:e4:f0:9b:e0:91:
52:29:6d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:53:38 2026 by rpki-client