Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7fa172-8e55-4711-8c75-18f8925c6665/1/0gXOrys2rZ_lGQaehrlONtLsS94.mft
File: 0gXOrys2rZ_lGQaehrlONtLsS94.mft (raw, json)
Hash identifier: eCigyB5Dc+scYf9FclB8Rb/WbY9jHBHwj65IbehF61U=
Subject key identifier: A8:FB:73:36:36:54:80:3E:7A:FC:B2:0A:60:78:84:8A:44:D5:0B:15
Authority key identifier: D2:05:CE:AF:2B:36:AD:9F:E5:19:06:9E:86:B9:4E:36:D2:EC:4B:DE
Certificate issuer: /CN=d205ceaf2b36ad9fe519069e86b94e36d2ec4bde
Certificate serial: 019F935AA8835EDA11FD400A35FC0FCC853A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gXOrys2rZ_lGQaehrlONtLsS94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7fa172-8e55-4711-8c75-18f8925c6665/1/0gXOrys2rZ_lGQaehrlONtLsS94.mft
Manifest number: 0CF7
Signing time: Fri 24 Jul 2026 09:00:19 +0000
Manifest this update: Fri 24 Jul 2026 09:00:19 +0000
Manifest next update: Sat 25 Jul 2026 09:00:19 +0000
Files and hashes: 1: 0gXOrys2rZ_lGQaehrlONtLsS94.crl (hash: cZ1pY9uUYB+0eJD1L6N75FXIfIE77JCdd26rljRwWtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/7fa172-8e55-4711-8c75-18f8925c6665/1/0gXOrys2rZ_lGQaehrlONtLsS94.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/7fa172-8e55-4711-8c75-18f8925c6665/1/0gXOrys2rZ_lGQaehrlONtLsS94.mft
rsync://rpki.ripe.net/repository/DEFAULT/0gXOrys2rZ_lGQaehrlONtLsS94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:a8:83:5e:da:11:fd:40:0a:35:fc:0f:cc:85:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d205ceaf2b36ad9fe519069e86b94e36d2ec4bde
Validity
Not Before: Jul 24 09:00:19 2026 GMT
Not After : Jul 25 09:00:19 2026 GMT
Subject: CN=a8fb73363654803e7afcb20a6078848a44d50b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:be:6e:fd:1f:80:ab:20:1c:29:6a:d6:c5:ce:
25:ce:8a:bb:d7:ed:5e:9f:e5:ff:35:20:1b:16:11:
1a:cd:c1:78:e2:b1:3f:07:41:8b:65:64:3f:b3:87:
db:c6:16:c0:a3:e7:fd:a7:f2:f5:d2:4a:8f:31:5d:
20:d8:0f:fa:80:f2:c3:05:00:ea:e3:95:d7:eb:a3:
85:2d:86:8d:93:bd:ad:ff:de:92:d3:84:0d:1a:7e:
74:b6:1c:c7:19:71:af:de:bc:00:69:3a:88:61:78:
f6:4b:68:59:52:d3:d8:70:9d:d9:97:37:14:ec:dc:
79:d4:a5:a6:da:25:80:2d:c7:17:c4:fb:31:f3:0d:
13:a2:72:cb:91:59:ce:ad:2b:2e:6d:59:e7:c4:74:
28:e0:96:7a:ff:53:a7:20:d6:ad:a2:5e:65:9e:14:
18:da:d8:7d:bc:13:a1:ab:43:f5:d9:04:f3:b7:e0:
eb:7b:fb:0c:d5:e3:c1:5b:b5:4b:56:56:e5:ab:48:
b9:57:c0:f9:6d:cc:23:cf:08:e1:ca:62:68:f9:cb:
36:49:f4:13:c7:1c:a0:ca:32:27:9a:c5:f0:5e:64:
27:d7:6a:e8:4b:d0:2f:6e:20:77:52:e3:95:48:be:
c7:c0:ce:c8:8a:2b:1e:10:ec:62:14:e6:e9:54:d7:
07:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FB:73:36:36:54:80:3E:7A:FC:B2:0A:60:78:84:8A:44:D5:0B:15
X509v3 Authority Key Identifier:
keyid:D2:05:CE:AF:2B:36:AD:9F:E5:19:06:9E:86:B9:4E:36:D2:EC:4B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gXOrys2rZ_lGQaehrlONtLsS94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7fa172-8e55-4711-8c75-18f8925c6665/1/0gXOrys2rZ_lGQaehrlONtLsS94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7fa172-8e55-4711-8c75-18f8925c6665/1/0gXOrys2rZ_lGQaehrlONtLsS94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:85:5c:9a:61:68:87:ed:18:12:b7:08:9c:bf:1f:a6:d7:7f:
6a:42:d7:fd:16:8b:54:a1:34:26:3c:57:b7:4a:61:f7:97:bc:
0e:c5:90:44:0a:45:0b:6b:bf:f0:40:9c:47:fc:3b:96:d0:ab:
ad:8c:90:f2:03:b5:9b:b5:55:05:29:ee:ba:80:90:15:72:d2:
81:98:f2:b9:4a:41:1c:82:c7:c1:dc:7d:cd:1d:8b:32:54:16:
01:a7:a9:74:95:ac:0e:e4:ec:5f:2f:a7:03:a6:c9:3a:fd:47:
7a:0d:e1:34:c1:d6:97:19:60:3f:d7:30:2c:2d:cc:ec:53:f4:
2b:33:30:76:82:14:bc:3e:25:cb:9e:1f:e8:47:bb:22:63:5a:
08:ca:89:8a:a6:24:04:dd:a3:c0:cf:f8:f5:20:6d:78:8b:3c:
43:dc:f0:b3:da:72:77:91:5d:38:79:49:c7:45:bb:9f:13:10:
86:03:7e:39:bd:a1:8f:ce:22:9a:2d:ae:cb:23:49:a8:40:2f:
88:57:f9:79:a9:60:cf:33:7c:28:05:0d:bc:78:8e:1a:3a:96:
fd:b5:de:bf:19:7a:e9:68:8e:fc:44:a0:62:1b:e2:e2:c1:5a:
7c:fd:2d:06:8a:fc:1b:b3:2e:e0:4c:c4:a2:f7:13:89:79:c6:
81:db:48:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:11:50 2026 by rpki-client