Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
File: 0RIqXLBkP3NsfseWGAmiWThmjw4.mft (raw, json)
Hash identifier: nX7PbO46QuYeB+GxDceOlbloPf4Qn11tibwGWbzNrD0=
Subject key identifier: 60:0B:30:AC:80:0A:0C:8E:55:24:49:E3:D0:CA:80:4B:D1:D9:E7:25
Authority key identifier: D1:12:2A:5C:B0:64:3F:73:6C:7E:C7:96:18:09:A2:59:38:66:8F:0E
Certificate issuer: /CN=d1122a5cb0643f736c7ec7961809a25938668f0e
Certificate serial: 019F91DB3E03EF97F57023790A6F070CDF41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 02:01:32 +0000
Manifest this update: Fri 24 Jul 2026 02:01:32 +0000
Manifest next update: Sat 25 Jul 2026 02:01:32 +0000
Files and hashes: 1: 0RIqXLBkP3NsfseWGAmiWThmjw4.crl (hash: mSWvi4350IMWOwwgkGMa2CJ48pGOu1VGkoruAn/Is0Y=)
2: ZKAPBlDYrEd2yjmsfMSMceCY9TA.roa (hash: F0+H6qDixU/03vN/UlEJN6xAxFU7ewgK1yqAztFgQS4=)
3: fSmn7fdIQV-BhV-TX9ikmCr8pz0.roa (hash: aPwivrJczNCFzMJcf0LFQLamq3ppdLsG7e6V+tPBFE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:3e:03:ef:97:f5:70:23:79:0a:6f:07:0c:df:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1122a5cb0643f736c7ec7961809a25938668f0e
Validity
Not Before: Jul 24 02:01:32 2026 GMT
Not After : Jul 25 02:01:32 2026 GMT
Subject: CN=600b30ac800a0c8e552449e3d0ca804bd1d9e725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ed:f1:93:25:80:9e:2b:63:b4:ca:09:e3:6d:
2a:cf:12:25:08:99:05:e5:fd:02:50:45:77:df:27:
db:60:15:c4:cd:21:f7:f9:c2:a1:0c:50:a0:d4:eb:
73:b1:dd:8e:db:5c:38:3e:6f:67:ce:b2:dc:af:79:
2c:53:5c:43:bf:70:13:bf:7f:5e:9a:e1:d4:99:7b:
c1:5b:a6:d8:aa:86:ee:14:ec:ad:56:ec:5a:74:4c:
4d:48:d5:40:b1:30:1c:58:d5:56:b4:d5:4b:11:b6:
19:8f:ca:8c:f3:a6:1d:a4:b0:9e:49:ce:35:02:de:
10:0d:61:be:2f:f5:45:09:71:5e:53:4f:81:46:ec:
b4:5d:2d:3f:c2:e0:ca:6e:2d:af:d4:b2:8d:ef:e2:
e8:51:a2:cd:8f:0a:0a:6c:07:c1:07:44:91:e9:dc:
2a:33:a9:29:49:ca:d8:87:10:d3:be:41:ae:9a:b4:
f4:f4:f5:c7:65:59:16:9b:60:2a:1c:75:25:27:19:
28:a5:84:4f:5e:63:8c:13:39:12:22:c2:60:b7:8e:
e5:da:e0:2c:9b:f0:70:3d:9f:11:bc:91:f0:f6:e6:
e9:da:83:ed:07:61:d5:ec:a4:7c:0e:36:b3:9c:40:
6e:17:f5:98:05:61:d9:10:1b:cb:41:f3:91:32:4a:
59:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0B:30:AC:80:0A:0C:8E:55:24:49:E3:D0:CA:80:4B:D1:D9:E7:25
X509v3 Authority Key Identifier:
keyid:D1:12:2A:5C:B0:64:3F:73:6C:7E:C7:96:18:09:A2:59:38:66:8F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:97:e8:6d:26:78:08:87:51:8f:b6:c2:7f:4a:95:52:36:e1:
5d:8b:07:36:9e:6b:2a:ba:b0:39:e1:2d:d7:f2:bb:10:4a:c1:
91:9d:83:eb:14:5f:99:28:4b:18:b6:67:c3:cf:d9:80:b4:a6:
42:c8:fe:77:d8:8f:34:63:79:00:ce:f9:fc:91:57:8c:e0:af:
9f:07:18:7d:2b:46:f9:42:33:17:3f:1a:01:20:db:ef:27:bb:
10:c2:d9:67:5c:67:14:38:e0:62:10:4b:73:9c:46:c8:02:e1:
80:47:22:67:eb:a0:b5:bd:c1:e2:3c:c9:b6:02:eb:84:dc:f2:
44:d6:11:a3:ac:be:79:7c:d2:2d:1c:52:ff:fd:27:bf:4b:df:
a1:0e:f9:ff:f2:67:95:5d:7c:fc:03:2b:10:b4:e3:86:c6:b4:
ac:e7:a1:e6:14:64:bb:19:ee:42:cd:21:1c:36:f5:52:11:14:
fb:8b:44:e5:90:cf:42:85:01:8e:aa:9e:16:ef:5f:63:f4:cb:
4b:77:71:6d:7d:5f:7b:70:22:77:39:dc:0a:a5:89:9b:24:ce:
db:a8:c8:83:a1:10:da:a1:90:43:46:03:c3:db:f3:27:31:9a:
b7:a9:80:83:1f:04:31:86:22:17:b2:c8:61:af:53:6a:24:67:
0c:cb:d3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:02:13 2026 by rpki-client