Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft
File: 0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft (raw, json)
Hash identifier: rInJvMcMB+YtjOtVLi7k8GMOsUmcPimVIsbu4RshYNc=
Subject key identifier: F5:77:86:77:EC:6F:1D:3A:A4:96:D5:3F:84:1B:D3:13:61:0A:23:2E
Authority key identifier: D2:48:18:59:56:E4:43:B5:5B:06:22:00:F9:64:53:7B:C1:0B:C1:30
Certificate issuer: /CN=d248185956e443b55b062200f964537bc10bc130
Certificate serial: 019F91A35D5C2DF237F3BB3460F4EF1356E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft
Manifest number: 0636
Signing time: Fri 24 Jul 2026 01:00:30 +0000
Manifest this update: Fri 24 Jul 2026 01:00:30 +0000
Manifest next update: Sat 25 Jul 2026 01:00:30 +0000
Files and hashes: 1: 0kgYWVbkQ7VbBiIA-WRTe8ELwTA.crl (hash: FKMyQqwdb/lTtXoZBHQOuJDTd+SZvwRFb4ndWotlfC0=)
2: Xudz0hLe8s3SLmiPVONXMND3hRM.roa (hash: oORSmt43XgnSynXZgH2ISuQJ8Cm/DBrmnJwy75rrXHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:5d:5c:2d:f2:37:f3:bb:34:60:f4:ef:13:56:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d248185956e443b55b062200f964537bc10bc130
Validity
Not Before: Jul 24 01:00:30 2026 GMT
Not After : Jul 25 01:00:30 2026 GMT
Subject: CN=f5778677ec6f1d3aa496d53f841bd313610a232e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:15:77:43:5f:3f:8b:8b:03:eb:13:0e:1f:87:
d0:51:7f:e2:da:f6:74:f8:76:dd:53:93:15:73:af:
9d:88:86:ac:bb:5b:87:30:cf:b4:bb:90:07:4a:c4:
76:bb:d2:ad:2b:62:18:a3:81:2a:34:c5:70:c1:8f:
a1:c1:ec:f1:f2:38:21:ab:f8:08:45:ca:54:b4:9f:
b5:79:91:05:1f:71:c9:85:94:e0:22:bf:47:8b:32:
2f:1c:89:11:a7:0e:cd:ff:80:32:2f:4a:88:75:fc:
c7:e1:e0:e9:7c:c7:4b:05:24:18:88:3a:47:50:a8:
b7:a7:9e:7a:99:17:77:a8:19:02:f7:9d:66:46:ec:
c5:c6:5d:eb:30:c2:54:f8:2a:42:16:4c:14:46:fe:
5e:24:66:b4:56:98:66:da:f7:5a:ff:8f:17:34:e7:
78:a4:85:fa:ab:19:0a:54:5e:1e:e6:49:f6:08:6e:
f7:16:5b:91:33:6c:bd:bb:28:25:6b:57:b4:98:2a:
48:c8:0a:b1:3f:2d:d7:8d:29:0f:77:57:a0:c1:3f:
8f:fa:68:1a:bb:5f:71:b6:15:7a:ae:6e:22:25:a2:
f8:f6:6d:a3:8f:29:0c:5e:02:a0:c5:2a:d2:18:7c:
0d:f9:7d:f9:04:45:48:79:4f:ca:03:a1:c6:f6:f6:
b9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:77:86:77:EC:6F:1D:3A:A4:96:D5:3F:84:1B:D3:13:61:0A:23:2E
X509v3 Authority Key Identifier:
keyid:D2:48:18:59:56:E4:43:B5:5B:06:22:00:F9:64:53:7B:C1:0B:C1:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:1b:06:68:9b:22:32:46:16:f5:f7:70:3e:9d:8c:53:dd:cd:
ef:2d:d3:5a:3d:33:29:96:0c:ed:2e:15:a6:c9:1a:c1:79:01:
e0:69:b5:e7:20:e5:d8:cf:49:4c:98:9d:dc:3d:71:9f:7b:d7:
98:fd:97:e7:f9:c1:cc:0c:80:89:08:e9:ac:32:0e:38:49:13:
dd:90:98:5f:6e:20:7d:70:ac:fc:cf:33:cb:71:df:4a:ae:0a:
71:56:28:79:00:73:cd:ff:8b:79:60:53:70:67:5b:60:20:bd:
ff:ae:77:cb:e6:57:3c:7c:9c:ca:fc:de:d6:0c:70:3e:ee:4f:
c4:ff:41:15:14:6c:cf:9e:8a:78:cf:c6:a1:4f:15:02:ca:e4:
aa:52:50:d9:be:65:e5:7b:ed:85:74:ee:bd:1d:b4:12:3b:76:
14:80:45:cf:e2:6c:b4:33:62:59:37:59:fd:ab:19:33:56:84:
12:fb:b8:39:52:69:60:6f:ca:d2:c3:13:8b:b8:7e:ef:e8:31:
6a:64:e5:ae:a1:42:3e:9c:8c:3e:22:2c:25:47:89:f7:86:7a:
10:41:4c:5c:99:c9:51:05:16:06:66:ac:23:23:70:4c:f7:26:
80:3a:23:06:12:2f:32:63:24:30:1c:4b:75:0c:33:59:b3:83:
cc:41:1b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:02:28 2026 by rpki-client