Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
File: 0nXXqLrAR39VCd_xG5GVymDfh9o.mft (raw, json)
Hash identifier: 3e4sFrU3Cd/S9eDez4OPQA2WqA81I/ILjgFQwlzRdTk=
Subject key identifier: 27:51:78:4D:A3:28:22:12:E4:E8:44:92:32:15:F6:2D:CD:49:48:8A
Authority key identifier: D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
Certificate issuer: /CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Certificate serial: 019F93243AA4A9F7A6789C9D1A5A58B495A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
Manifest number: 19DD
Signing time: Fri 24 Jul 2026 08:00:52 +0000
Manifest this update: Fri 24 Jul 2026 08:00:52 +0000
Manifest next update: Sat 25 Jul 2026 08:00:52 +0000
Files and hashes: 1: 0buhRJjHXTiILzpXwukDNlvcl6A.roa (hash: dS469I3s9ALuc1j5wYrMGtFrrCgHDmpnkp67+jT2dqk=)
2: 0nXXqLrAR39VCd_xG5GVymDfh9o.crl (hash: PiKDMmOz27Gucx3asKg64sNbNgKB0aq1STofJqkqZIQ=)
3: 6hsgDYrDCCi2j0jUVtm2wbtCdNU.roa (hash: sWQmCUUNLY3nJEy93toy8HB4mgFo7yvPBWu0Rdag+ZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:3a:a4:a9:f7:a6:78:9c:9d:1a:5a:58:b4:95:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Validity
Not Before: Jul 24 08:00:52 2026 GMT
Not After : Jul 25 08:00:52 2026 GMT
Subject: CN=2751784da3282212e4e844923215f62dcd49488a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:34:1c:70:2e:94:b0:79:3b:18:cd:57:bd:f6:
4f:ec:be:95:21:28:be:97:4c:6c:35:05:f4:5f:51:
de:ce:c1:9e:b0:42:fe:a3:cd:9d:0d:63:20:f4:ff:
99:c5:b8:2c:21:4b:ba:0c:ba:84:37:ca:19:2f:3c:
05:f5:2d:f0:a1:b9:69:8c:a0:df:ed:79:16:dc:ad:
1d:b7:82:72:39:6f:33:dc:b4:21:7f:86:d7:fe:c1:
cc:04:88:8f:17:cd:6a:0e:5d:39:dc:00:28:37:ec:
cb:80:d2:fa:66:bb:54:b3:a4:88:37:be:aa:45:58:
8a:45:ed:ee:45:a1:f9:09:1b:9d:ed:90:29:d3:1b:
9c:a3:a5:10:36:3c:ec:c7:4b:c2:ee:e5:76:96:76:
db:42:fb:3d:87:70:0e:6a:3e:3b:e6:cb:4a:5a:e4:
de:4a:69:4d:eb:1b:84:11:44:ab:19:42:49:5f:ca:
7d:ba:01:92:12:55:61:38:3c:0a:d8:c6:ea:4a:30:
93:ca:e0:dd:75:fb:35:24:27:87:7b:90:1a:12:94:
0d:4d:e6:a2:90:6a:32:bb:1a:c2:de:ba:23:0f:96:
f7:8b:50:b0:87:f1:4c:b2:bf:69:a9:35:bf:e5:44:
aa:97:b4:05:53:8c:de:dd:39:35:c5:24:41:7e:df:
de:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:51:78:4D:A3:28:22:12:E4:E8:44:92:32:15:F6:2D:CD:49:48:8A
X509v3 Authority Key Identifier:
keyid:D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:08:ad:51:a1:5f:24:9f:98:00:91:25:20:5c:d6:af:21:ba:
0b:2d:d0:3c:82:09:6a:0a:9e:9f:dc:af:e1:26:0b:8c:39:4f:
17:d4:51:ab:b2:94:9c:43:cf:4e:bf:7a:0e:e0:86:9a:22:40:
95:2d:19:44:2f:d3:20:f0:fb:fc:ff:7f:35:20:56:7c:2c:39:
58:44:06:d2:1a:d4:57:46:21:cf:7a:df:2c:06:97:2b:cf:e7:
ca:89:16:06:07:a0:65:08:e4:1a:bd:fc:cd:e1:d4:70:b5:df:
cf:ee:bd:20:14:21:15:cc:57:6d:5a:42:15:dc:5f:80:68:43:
11:fc:1d:c9:ed:26:00:0f:5d:95:38:0c:64:3e:7f:d2:79:6b:
9b:a1:ce:4c:28:25:6f:a0:2d:ef:c5:62:cc:9a:8f:03:e8:c1:
2b:1d:91:8e:d4:bc:27:13:bd:f2:03:19:43:5a:f5:21:a7:be:
70:6b:20:9b:30:3f:65:5f:26:c0:62:27:30:e2:39:d3:47:0c:
56:6a:c5:56:b8:aa:fd:32:b2:f6:f9:d9:73:5e:a8:5c:97:46:
79:37:fc:52:3c:7d:dc:4b:9b:fc:0e:87:7f:9a:da:79:00:df:
c8:c0:37:86:fb:b0:ac:8d:21:98:e8:da:c0:5b:b8:67:3a:9c:
bc:c9:71:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:26:40 2026 by rpki-client