Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
File: 0pigcUzBvyWsfH8c9sKIbIxhkqM.mft (raw, json)
Hash identifier: jq9C9UyACfGdOTGXC6R3F5wfV0RLw4Yi0S40a/g1FT8=
Subject key identifier: 91:9B:19:11:79:73:49:07:0D:AF:19:A9:07:DA:E2:D5:2E:C3:F1:80
Authority key identifier: D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3
Certificate issuer: /CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3
Certificate serial: 01A0DA5F4F3CE37CD5202C002D0721D8A9DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
Manifest number: 07EC
Signing time: Fri 25 Sep 2026 21:01:14 +0000
Manifest this update: Fri 25 Sep 2026 21:01:14 +0000
Manifest next update: Sat 26 Sep 2026 21:01:14 +0000
Files and hashes: 1: 0pigcUzBvyWsfH8c9sKIbIxhkqM.crl (hash: OAtwW/IOE8hP2qjny84V4WX6wBNhK2SsdCyhHCHcTwo=)
2: cMXu7WrvsmC-lThLKVR5Js2GYXY.roa (hash: EpVFpanfzZyTV+MCY5Rt4j7mVt0TS3sr2EacwZSVOVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:4f:3c:e3:7c:d5:20:2c:00:2d:07:21:d8:a9:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3
Validity
Not Before: Sep 25 21:01:14 2026 GMT
Not After : Sep 26 21:01:14 2026 GMT
Subject: CN=919b1911797349070daf19a907dae2d52ec3f180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e0:77:a0:96:66:43:b5:bc:b1:9b:52:60:bb:
6f:a9:a9:45:61:49:86:e1:3a:81:e4:79:46:bf:b8:
d7:5a:b4:60:18:d1:ef:72:74:b5:8a:aa:8e:e3:24:
de:07:9a:1b:98:fb:82:64:d1:64:b3:eb:46:07:6d:
c6:a2:71:1b:33:e3:da:88:98:7c:26:2f:29:3b:bb:
dd:32:0d:d8:7e:bf:30:8a:bd:bc:a6:cc:00:bb:90:
ac:ea:35:fa:d7:c5:85:16:bd:8a:30:5c:65:45:12:
c6:b9:f8:3c:1c:05:64:11:3e:9a:fc:f2:18:6e:1f:
62:87:07:eb:ee:97:bd:31:31:24:5c:ab:66:cd:41:
64:38:06:6a:f8:2d:e9:da:17:e6:b4:4f:fd:2b:78:
9f:3a:30:a2:db:22:08:89:b0:84:c7:64:49:d1:12:
c9:81:81:39:df:8d:ac:5c:d5:91:8f:6f:02:aa:32:
b0:05:be:ef:e4:ac:84:fb:ba:bd:a6:e7:3d:e0:4a:
54:aa:27:67:4c:6c:01:e2:f9:fc:05:34:35:1f:86:
36:ba:de:c7:ee:76:c6:58:06:f8:67:20:3a:7b:6e:
74:24:22:73:54:57:d4:9c:b8:60:ac:e4:77:3b:02:
8a:07:86:f2:a8:0d:77:b3:9b:4a:99:04:78:9f:bd:
87:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9B:19:11:79:73:49:07:0D:AF:19:A9:07:DA:E2:D5:2E:C3:F1:80
X509v3 Authority Key Identifier:
keyid:D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:7d:65:cb:17:82:f9:63:9c:b4:86:f0:d6:a3:aa:e1:44:fc:
b5:57:38:b5:cc:08:a1:87:54:6e:14:26:3b:83:a1:86:a6:80:
fd:80:c0:77:f1:e2:ad:5c:34:c8:46:41:58:64:01:48:62:4c:
9d:49:a7:e8:b5:b9:8c:ca:a8:0c:bd:f8:4c:b4:a5:d5:e2:d0:
4c:d2:91:83:18:b0:d4:7f:2a:97:f6:c4:9b:06:36:b1:c3:1d:
4d:57:73:18:32:91:de:4d:1e:40:e6:5e:63:b1:f8:8c:24:dc:
7d:1d:54:8e:f9:17:83:6b:7f:c7:0c:8d:01:fc:aa:59:e3:0a:
c3:a7:55:10:69:1f:28:43:94:45:cc:bb:1f:35:1d:2f:35:be:
02:9d:40:ad:f1:71:f6:1a:f5:a1:45:c9:78:82:8f:4e:1f:17:
32:15:09:47:86:42:75:36:65:a8:a6:40:a2:e3:6a:f9:4c:73:
3e:27:ba:18:1b:82:1a:29:dc:c8:1c:4c:ee:d7:a1:6d:52:18:
c1:66:f5:f4:ed:29:2e:2d:94:c0:00:8c:50:52:43:96:a0:6e:
ed:60:1c:8d:45:5f:24:ba:d8:19:be:19:b5:1d:17:8b:b7:66:
ac:f4:3b:aa:c1:7e:6c:7d:cb:2e:4d:90:a7:54:82:90:14:fa:
02:57:6f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:26:40 2026 by rpki-client