Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
File: 0-2n3wX226CeOefUvex7rg7_urA.mft (raw, json)
Hash identifier: FKvjYVAhaWZQjlmqTq108EzuYMlxhoFrwnPWsa1+LUQ=
Subject key identifier: BA:CC:FA:E6:30:C7:77:81:2D:C0:A8:58:47:65:99:46:62:0F:FA:ED
Authority key identifier: D3:ED:A7:DF:05:F6:DB:A0:9E:39:E7:D4:BD:EC:7B:AE:0E:FF:BA:B0
Certificate issuer: /CN=d3eda7df05f6dba09e39e7d4bdec7bae0effbab0
Certificate serial: 019F8F46E0223EB87E4895F442FD12113CA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
Manifest number: 06CE
Signing time: Thu 23 Jul 2026 14:00:14 +0000
Manifest this update: Thu 23 Jul 2026 14:00:14 +0000
Manifest next update: Fri 24 Jul 2026 14:00:14 +0000
Files and hashes: 1: 0-2n3wX226CeOefUvex7rg7_urA.crl (hash: dtcbsJ723QhRE0sJS9gFOTh4etA+6oS44uySQzOrx0M=)
2: qTWraqPBRkXUgfYW4gfB3AS-jm0.roa (hash: Rbt0ZTsq9hRwXO+cnDLn20WShDhAg5xFObZyVKiajFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:46:e0:22:3e:b8:7e:48:95:f4:42:fd:12:11:3c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3eda7df05f6dba09e39e7d4bdec7bae0effbab0
Validity
Not Before: Jul 23 14:00:14 2026 GMT
Not After : Jul 24 14:00:14 2026 GMT
Subject: CN=baccfae630c777812dc0a85847659946620ffaed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:71:b9:c8:de:56:36:97:8b:03:18:ac:cb:f7:
01:09:dc:c0:aa:b2:01:1d:b4:3b:32:12:f6:9a:95:
d1:64:40:cc:4a:12:74:30:58:1c:37:f5:49:83:08:
0b:7d:dd:48:b9:f7:4b:f7:3f:bc:01:f1:0d:80:92:
d3:5d:95:a6:6a:be:d8:b4:d0:aa:9d:ea:d0:ac:88:
22:19:f7:de:46:86:71:4d:c0:d8:99:9f:ac:9e:02:
5f:84:a9:47:80:b5:c2:04:88:81:87:c9:46:3c:06:
bf:0e:5a:b5:84:55:84:14:25:3f:66:6a:f4:7c:97:
cf:7a:a7:be:b0:c5:2e:cc:e7:0e:97:41:f9:6d:4c:
9a:8f:57:ba:39:90:e7:16:6f:c5:c2:34:91:c8:32:
ad:3f:fa:a5:75:6d:ad:f5:20:b9:59:50:bc:91:58:
4b:4a:60:16:1c:28:a7:9d:fd:f2:e2:7e:e3:07:10:
6a:ad:c1:92:45:22:38:71:81:14:07:1c:87:91:7b:
5f:ea:56:50:3d:1b:d1:8e:c4:5a:3f:a4:89:0f:fb:
0a:a3:6d:1a:4e:1c:6e:17:a8:00:59:71:2a:73:92:
f3:bb:2f:a4:24:64:50:2e:ff:65:1b:ed:d9:4c:8b:
c8:5d:44:f4:59:94:80:b2:44:ea:10:5f:f0:a0:14:
f4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CC:FA:E6:30:C7:77:81:2D:C0:A8:58:47:65:99:46:62:0F:FA:ED
X509v3 Authority Key Identifier:
keyid:D3:ED:A7:DF:05:F6:DB:A0:9E:39:E7:D4:BD:EC:7B:AE:0E:FF:BA:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:2c:6d:f0:3e:32:72:e0:75:d1:b4:ed:ec:c4:1d:9a:7f:af:
5b:75:84:f9:a8:c8:8d:d2:c7:e0:ef:9c:a5:94:c0:92:bb:39:
b3:d4:d8:72:5b:19:3c:e3:37:5f:46:80:5e:b0:a2:09:ec:1f:
0e:b4:01:15:f8:f8:81:7d:ae:d9:81:a5:27:e3:d0:8a:75:71:
ce:f1:d8:ee:7c:73:f5:1b:b5:09:47:c3:db:ea:08:19:63:65:
ef:92:c5:da:8c:58:c9:6e:c5:5f:0f:c4:bd:d1:d5:10:96:a3:
05:2f:78:4d:42:97:84:17:4a:92:5b:32:4e:a7:93:92:a3:f6:
88:57:32:93:40:d2:1e:5f:b0:74:d7:5a:69:6a:16:aa:a7:80:
dc:16:6f:27:d2:d0:d5:aa:23:3f:af:19:ff:80:e2:58:f4:c4:
88:c7:44:d2:de:a5:9d:8b:5f:c3:e8:88:68:7d:94:5b:ce:d9:
2a:4e:13:e3:00:c3:27:6c:91:88:33:37:a9:40:0c:1c:01:e0:
55:96:93:9e:39:67:cc:56:57:c9:5d:ca:8c:1e:74:bc:ad:31:
a1:95:e9:5a:d8:51:16:22:4b:fb:0f:60:01:55:af:b5:11:da:
0d:cf:d0:5f:9e:40:6a:f2:14:4a:6e:a2:6d:49:f1:e1:e5:76:
7e:b5:02:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:40:14 2026 by rpki-client