Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft
File: 0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft (raw, json)
Hash identifier: fgRzSjr+K6BuZ8gK1//hHniiekQTfVw1+lCdk+l2yks=
Subject key identifier: 5F:25:CE:F4:CC:BC:4C:44:F5:40:5A:02:FB:2B:FD:EE:E9:D5:83:4E
Authority key identifier: D2:B3:6A:D2:8E:52:1E:DA:B4:B4:DE:A3:49:A2:77:72:D4:B2:A7:BE
Certificate issuer: /CN=d2b36ad28e521edab4b4dea349a27772d4b2a7be
Certificate serial: 019F916D82D7DAA3FCC54AC4B6B45856314E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rNq0o5SHtq0tN6jSaJ3ctSyp74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft
Manifest number: 170B
Signing time: Fri 24 Jul 2026 00:01:40 +0000
Manifest this update: Fri 24 Jul 2026 00:01:40 +0000
Manifest next update: Sat 25 Jul 2026 00:01:40 +0000
Files and hashes: 1: 0rNq0o5SHtq0tN6jSaJ3ctSyp74.crl (hash: sbwHhBpEsg6OwhtWm43vU5fjPBY1MwfZJFBLuommYp0=)
2: t0X5t_3y1eMrgSVfnROrir2IJb4.roa (hash: BPcyM2IeAIooAh+FVKFVf4qaLxjgFOkdsiFt2kQ2Eag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rNq0o5SHtq0tN6jSaJ3ctSyp74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:82:d7:da:a3:fc:c5:4a:c4:b6:b4:58:56:31:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2b36ad28e521edab4b4dea349a27772d4b2a7be
Validity
Not Before: Jul 24 00:01:40 2026 GMT
Not After : Jul 25 00:01:40 2026 GMT
Subject: CN=5f25cef4ccbc4c44f5405a02fb2bfdeee9d5834e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:01:05:c5:9b:c7:11:36:4b:c0:d1:aa:72:23:
99:2a:6a:30:0a:b8:44:9c:0f:f7:3f:b8:77:4d:1c:
98:15:36:53:e2:89:94:70:31:8d:a4:dc:61:5d:43:
16:08:76:eb:36:96:d6:55:17:2f:ed:bc:ac:87:3e:
97:9d:53:cb:1d:04:01:10:19:4a:de:a9:26:ae:c1:
e6:39:ff:28:aa:c4:03:7d:8f:9a:12:e2:54:9e:a3:
7a:32:2a:2f:36:e5:5a:cb:89:5f:df:d6:ec:df:28:
e8:65:eb:81:07:07:49:f8:0d:ea:c3:53:5d:31:02:
9b:51:b5:9a:c3:5c:bd:88:3d:9a:e9:d3:4f:d4:67:
cf:5f:1f:14:38:65:00:00:21:72:84:91:68:29:66:
66:fb:d2:61:a3:db:9a:24:13:02:06:8a:a6:53:6e:
6e:57:d0:a8:b2:95:da:e1:3a:cd:dc:38:c6:1d:a1:
41:32:9f:99:4d:2c:d5:8f:a1:a0:34:92:15:48:38:
cf:85:7e:12:83:6d:04:9e:8c:40:9c:2c:0a:0c:ca:
cb:9f:30:5d:01:b9:64:f3:32:bd:20:40:a6:a3:a0:
24:9b:5f:31:f1:98:d2:7a:24:a6:40:d9:3f:9d:dc:
6d:59:cd:17:1a:ba:86:be:03:e2:56:1e:69:93:83:
8b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:25:CE:F4:CC:BC:4C:44:F5:40:5A:02:FB:2B:FD:EE:E9:D5:83:4E
X509v3 Authority Key Identifier:
keyid:D2:B3:6A:D2:8E:52:1E:DA:B4:B4:DE:A3:49:A2:77:72:D4:B2:A7:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rNq0o5SHtq0tN6jSaJ3ctSyp74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:78:54:64:c7:de:e4:ee:30:96:4e:4c:65:87:82:f8:ce:36:
33:99:9a:47:a5:11:ea:da:ba:ab:3f:0f:64:63:52:3d:06:5a:
35:f9:19:d6:08:3c:d2:ad:1a:dc:54:51:a9:fe:1e:0d:83:8f:
98:1b:8e:20:54:d0:80:9b:13:39:0c:61:25:83:e9:f2:2a:b4:
0c:28:9d:2b:cf:da:18:ee:10:cf:b3:47:3e:2c:3b:7e:0a:82:
6f:47:c2:15:c6:90:29:b9:a5:03:26:61:2e:de:b9:28:3a:5a:
aa:70:60:09:17:21:a3:63:62:3f:a1:22:1b:50:49:89:84:19:
49:f1:1f:a3:2b:70:46:23:56:8f:fb:39:c9:fa:9c:f7:b0:2a:
c5:3d:36:32:2a:a6:fc:ba:35:3a:c4:cc:9d:e1:2e:19:08:f7:
f3:a0:44:a7:c7:dd:7f:cf:52:6d:e3:b5:20:3a:f4:36:a7:4a:
5e:ff:00:93:dd:61:f4:74:a1:43:90:9e:3c:5f:1d:35:d4:dc:
2a:c6:42:56:de:25:fa:e8:58:9e:f5:da:d3:fb:ce:8b:09:67:
8e:40:2a:4a:4c:2d:1e:df:2c:bf:b8:7a:5b:b6:69:00:29:b4:
29:cb:b7:1e:6a:25:96:c7:a0:e0:61:10:1d:e8:c4:37:5d:27:
06:5a:f6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:39:56 2026 by rpki-client