Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
File: 81ROkj2IO6zkqj9-9wByr-NRHyg.mft (raw, json)
Hash identifier: WvkAJP2T46A+DrjnkALx/z8Ip+NfIG4bgq0CUlXo3UQ=
Subject key identifier: A9:61:6D:97:81:EC:3A:68:BE:E5:A9:B8:18:AB:30:38:C1:C2:D3:F6
Authority key identifier: F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28
Certificate issuer: /CN=f3544e923d883bace4aa3f7ef70072afe3511f28
Certificate serial: 019F9090DC5BDDB2D2DC3D9EAF3DC17A96F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
Manifest number: 0705
Signing time: Thu 23 Jul 2026 20:00:40 +0000
Manifest this update: Thu 23 Jul 2026 20:00:40 +0000
Manifest next update: Fri 24 Jul 2026 20:00:40 +0000
Files and hashes: 1: 81ROkj2IO6zkqj9-9wByr-NRHyg.crl (hash: geBTDTruqy+kItJs1z5Z5rP/u1HkCGEb/NOndXbzbzQ=)
2: TrhXkCJb8q-vuCZF4exUSreBB7E.roa (hash: EGX2grrS3l79QBgl+a645PR4w0grZD/PxlFuVBj36pQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:dc:5b:dd:b2:d2:dc:3d:9e:af:3d:c1:7a:96:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3544e923d883bace4aa3f7ef70072afe3511f28
Validity
Not Before: Jul 23 20:00:40 2026 GMT
Not After : Jul 24 20:00:40 2026 GMT
Subject: CN=a9616d9781ec3a68bee5a9b818ab3038c1c2d3f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f3:d1:50:ef:ec:be:a2:31:e4:5b:1b:f3:3c:
4d:11:66:b4:95:bc:77:9a:ec:4f:3f:a9:08:86:8d:
5c:3d:c0:38:fc:11:3a:07:27:bd:7e:3e:75:18:88:
87:68:d3:96:16:00:5d:50:6f:5e:2f:e3:b6:bb:60:
59:0c:fa:ca:0f:7c:6e:db:17:f8:d3:86:f5:4e:03:
b9:51:24:24:63:4d:61:42:ba:71:1e:13:e0:98:4c:
07:2d:d4:10:e4:09:45:05:31:80:e7:d4:b0:ac:c3:
83:0e:e6:8a:c7:f9:74:f0:41:00:cb:9e:67:2f:4e:
f6:13:86:83:89:10:d2:ea:a9:a2:f1:aa:d7:f5:87:
9a:a9:e9:ff:4b:e5:9a:e6:8d:b7:5a:60:e5:71:a7:
86:67:11:9d:3e:c5:e0:f0:d0:9c:30:30:6e:ff:78:
1f:6d:1c:58:ef:7a:79:95:74:d9:e3:87:56:a4:2b:
18:a9:0e:42:ad:04:e9:30:46:80:bb:a2:46:7f:09:
cc:21:2d:73:93:bd:87:04:c9:bc:7a:b2:d9:c2:38:
ff:dc:d5:cb:c8:1f:e8:55:dd:48:4a:fc:69:e0:aa:
a0:7f:77:eb:86:e2:f7:45:a7:01:d8:c1:d2:47:d1:
da:a1:62:30:60:a6:22:25:50:df:3a:48:98:74:13:
a7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:61:6D:97:81:EC:3A:68:BE:E5:A9:B8:18:AB:30:38:C1:C2:D3:F6
X509v3 Authority Key Identifier:
keyid:F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:0d:6c:8e:c8:d5:5d:bc:47:20:3d:66:b4:88:95:40:86:7a:
52:8e:05:ca:0d:a0:1d:7c:ea:68:48:2a:42:b3:e1:f1:6e:aa:
e6:07:c5:03:9d:fe:22:a1:3b:41:4b:3b:9c:5f:44:c0:d9:ab:
c0:02:0d:24:63:e4:57:b1:01:d3:a2:ba:77:c9:30:3f:2a:a8:
1a:b1:ae:b9:00:2d:95:4e:a9:11:11:f0:41:48:d9:08:5c:09:
93:85:fd:a2:82:2d:17:21:d5:b4:89:41:59:5b:6f:4d:f7:ff:
0b:82:c5:60:fe:13:2f:8b:1b:89:b5:2a:c2:5c:16:c9:8b:0c:
07:c1:28:58:dd:46:14:8c:b8:9c:56:25:5d:5c:e7:17:c7:35:
13:d7:a0:00:51:73:9b:df:0e:76:71:f3:3d:a9:e8:39:78:fd:
f7:e5:fa:cb:ac:14:1d:16:3c:b9:96:67:b6:3c:d8:d3:11:6f:
26:c8:d5:d1:42:71:ed:88:23:33:49:25:4d:99:52:84:d6:2e:
6b:00:c7:b2:ef:48:53:46:a3:2c:17:84:61:07:d4:f5:28:0f:
d1:c6:69:26:ec:52:ca:1f:4e:fc:17:1c:a0:45:82:ae:b7:66:
eb:ca:d1:66:48:66:75:cf:47:4c:62:6c:41:e2:4f:7f:b6:1e:
f1:34:c0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:27:08 2026 by rpki-client