Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
File: 0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft (raw, json)
Hash identifier: fqUZpzzFoHUjQwmj1GEyjHABGKtPCvDVULQHhyz4hcM=
Subject key identifier: 2A:31:92:F5:8D:51:AE:E0:42:12:26:4F:12:DE:4B:AC:D1:53:E2:E2
Authority key identifier: D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9
Certificate issuer: /CN=d29dc792adfcfe88c79e7958fbfec525630b62f9
Certificate serial: 019F8FB525F26ED9A4ECE707F5410F290F50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
Manifest number: 0DCA
Signing time: Thu 23 Jul 2026 16:00:41 +0000
Manifest this update: Thu 23 Jul 2026 16:00:41 +0000
Manifest next update: Fri 24 Jul 2026 16:00:41 +0000
Files and hashes: 1: 0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl (hash: Z5XDqOHfkmxzXU5S+rR3rIeX5XDlgOa1+6+aRhdIi6U=)
2: 1KnU7H_UVe-XpNapFYFQEn0LJJQ.roa (hash: cUtUMg5M4fjhGoVm34BuVn+17rIs5yEOOCki02p10ww=)
3: j5hpz0Ky4wyZsfB5ISUjvlPvrQ8.roa (hash: eXsNvI5c0yl1gppo8mH8F57qlB2x5VSSClL68a+AJ/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:25:f2:6e:d9:a4:ec:e7:07:f5:41:0f:29:0f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d29dc792adfcfe88c79e7958fbfec525630b62f9
Validity
Not Before: Jul 23 16:00:41 2026 GMT
Not After : Jul 24 16:00:41 2026 GMT
Subject: CN=2a3192f58d51aee04212264f12de4bacd153e2e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:8d:b3:3a:b3:c7:e8:b2:ce:0d:4f:b8:f8:4d:
e3:31:bb:fa:21:6c:01:59:9a:cc:e6:66:7c:2f:5e:
ba:a9:89:65:a3:5d:35:31:08:50:43:fa:4c:ad:74:
26:e8:7e:d9:52:58:33:16:ad:71:9c:c2:ba:5b:fb:
fc:fa:d4:d7:b3:5c:e8:dd:44:5e:1e:d7:a3:12:d7:
6b:c9:34:ac:be:10:90:c0:d2:03:72:ca:bf:d9:90:
1a:16:32:50:2b:d1:08:b9:b7:dd:47:78:82:5e:01:
79:bb:d8:4c:58:bb:dd:b6:94:7f:04:25:89:90:41:
04:cc:54:83:26:b6:96:af:b2:7d:3d:53:3f:9d:66:
e4:57:4b:f4:c1:8c:ed:34:8d:ea:8f:38:0b:46:f9:
28:76:bd:9e:5f:c2:01:99:99:f9:60:e0:c9:71:ee:
32:2d:b7:1e:dd:35:31:4a:b6:c2:71:e3:cd:2a:4c:
66:a3:b8:45:42:76:07:1d:41:e1:eb:5c:f0:7d:b3:
1b:1c:ee:35:df:16:c2:77:01:56:4b:4e:53:35:3f:
a2:41:52:6d:d4:2b:a6:d8:9b:17:4e:0e:67:f3:f3:
ba:3d:d3:2b:bf:10:a8:f3:7c:aa:14:4b:05:fa:6d:
5a:be:4e:fe:16:0a:23:d9:29:d5:62:fb:ab:47:61:
87:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:31:92:F5:8D:51:AE:E0:42:12:26:4F:12:DE:4B:AC:D1:53:E2:E2
X509v3 Authority Key Identifier:
keyid:D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:8b:f6:b0:10:d0:e0:7c:b4:3f:88:b2:c9:65:ec:ac:01:ce:
5e:70:f6:b8:fe:bf:4d:77:ed:81:e1:1a:3b:14:0b:7a:5f:38:
5f:54:b9:95:4d:e6:5c:14:bc:b7:2a:f9:45:3c:12:29:39:14:
f5:1b:d1:f5:04:fb:d3:b7:e0:59:94:96:43:30:79:6d:e0:e8:
23:d7:35:ea:b0:e2:57:4b:cf:b4:07:f0:8e:9c:16:a4:8c:12:
f0:2d:15:1c:3d:c2:ea:30:26:7d:d0:0b:b7:f1:37:65:27:05:
eb:9a:fa:52:4a:3a:ba:46:f9:b0:02:51:73:20:97:01:7f:d0:
ab:f5:66:6d:71:f1:22:90:f0:b6:97:aa:5c:9d:c2:58:4d:af:
47:2c:02:22:43:55:10:8f:e0:06:cd:52:7f:f5:42:9f:9f:1b:
44:2b:26:ad:9a:8c:ef:4d:dc:b1:b6:20:8d:50:5d:77:d8:f9:
98:55:8e:05:46:06:f6:cb:e5:31:76:25:51:42:bc:fa:9d:7d:
3b:75:bd:03:88:8b:9a:22:cb:65:7a:fd:19:57:fa:27:91:b5:
56:55:c2:7f:b5:54:2c:d5:af:5e:89:85:ca:e0:dd:33:1f:28:
55:ad:de:b7:ef:df:62:20:af:01:24:89:b1:46:17:a4:4c:bd:
d3:37:3f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:09:50 2026 by rpki-client