Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
File: 0RaDXQN3hmIKnp96DjYEmLtlQSc.mft (raw, json)
Hash identifier: 37AkenaNvUvm909cfy8u+efTaMIBOdJoEO9jOqT45oc=
Subject key identifier: 70:6F:EA:ED:6E:6D:DA:12:99:79:EB:E1:F9:C7:B8:93:B9:6F:F6:1E
Authority key identifier: D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
Certificate issuer: /CN=d116835d037786620a9e9f7a0e360498bb654127
Certificate serial: 019F91DAC6BEDB11D09EFD255349FC526866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
Manifest number: 0DDE
Signing time: Fri 24 Jul 2026 02:01:01 +0000
Manifest this update: Fri 24 Jul 2026 02:01:01 +0000
Manifest next update: Sat 25 Jul 2026 02:01:01 +0000
Files and hashes: 1: 0RaDXQN3hmIKnp96DjYEmLtlQSc.crl (hash: JCbNh4ob/Oh3uoTxbwFi2yC+9lFrp67nu5e9aI5cBb4=)
2: GxXxtmytTeePZFqMmjKewv0phDk.roa (hash: DQNMt4Qmq5pWK/m+65wngsoZgA7+I6etgVuEFLBf9P8=)
3: hrfVvtnK2yUD8q8kqhgwgxBrIWA.roa (hash: knPxWaldCF2NZQN6BPLTcSuiJLTa63/Ehra1OYIbZUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:c6:be:db:11:d0:9e:fd:25:53:49:fc:52:68:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d116835d037786620a9e9f7a0e360498bb654127
Validity
Not Before: Jul 24 02:01:01 2026 GMT
Not After : Jul 25 02:01:01 2026 GMT
Subject: CN=706feaed6e6dda129979ebe1f9c7b893b96ff61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:35:78:cc:74:a7:38:4f:ee:ad:f5:84:32:72:
db:bc:a9:12:42:a6:2d:09:51:5a:95:5d:ef:8e:81:
e1:42:2a:bc:23:4c:37:03:80:1f:7f:8a:e4:01:43:
2d:49:13:27:47:92:c3:50:d3:20:ff:79:a2:40:0b:
d7:d1:34:cf:b5:03:85:2d:b8:f1:4c:9f:33:13:98:
fc:c7:ce:eb:5a:e4:ba:47:00:30:a4:29:c4:e4:67:
ef:d2:41:74:3b:6e:75:62:75:0f:ef:5a:18:1b:2c:
89:97:0e:12:7d:22:7d:0b:e5:01:91:4f:2e:a8:b2:
9c:83:12:51:ba:a6:38:68:b6:05:8f:2b:52:87:12:
e8:24:80:41:4e:17:5c:aa:24:6f:06:52:0a:e0:c9:
7d:64:7e:e0:1e:f1:7f:fd:4d:e8:cb:f9:13:0d:2b:
d9:a6:70:cd:36:c2:a9:89:7f:e5:6a:1f:11:61:ea:
8d:09:00:c9:f7:d2:22:84:1d:b8:cd:34:79:cc:20:
13:b9:63:f6:81:d9:21:11:d6:8f:b7:3c:90:ab:57:
61:0f:79:7f:b8:a7:56:ad:1c:54:fc:21:b6:1d:b4:
b5:09:c6:2f:f9:60:cf:66:26:e6:b2:12:3d:b4:99:
6a:8d:42:6a:53:0f:0d:94:ac:90:b2:a8:2c:a0:4c:
80:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6F:EA:ED:6E:6D:DA:12:99:79:EB:E1:F9:C7:B8:93:B9:6F:F6:1E
X509v3 Authority Key Identifier:
keyid:D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:29:37:ab:37:e8:aa:82:e4:fe:48:8a:05:a6:a3:b1:cd:77:
d1:8f:55:1f:e5:01:97:cc:a9:76:64:91:1e:78:bb:48:65:1d:
dd:85:1a:87:e0:c7:39:d6:a6:35:22:db:d6:d7:c5:b8:29:56:
7c:3d:56:4f:80:0a:f7:03:d3:26:69:4a:b1:f0:78:91:31:7c:
3c:38:45:84:54:65:28:1f:cb:8c:f8:8e:39:9d:17:df:0f:ec:
26:93:a3:45:85:0b:0a:a1:d6:ee:2b:41:a9:a2:9d:89:9c:31:
73:53:4a:1f:de:71:d0:8d:45:6d:9e:a7:00:81:09:b4:08:d4:
52:6a:3d:1e:2b:06:5b:93:dd:4c:0d:03:f8:0c:e2:6a:4d:d6:
eb:0b:46:76:29:e7:16:68:5c:38:f8:75:e8:d9:f6:ae:30:73:
23:0c:4f:0a:d7:ee:7e:4d:37:a1:e2:3c:c6:a2:5e:28:e8:2d:
70:cf:1a:17:77:16:9b:5d:cb:27:25:fd:2b:6a:3c:0c:ef:8b:
c4:0a:bd:27:28:43:9f:95:19:01:48:82:6f:12:5b:70:85:26:
16:d2:57:9b:23:62:8b:0b:c5:43:af:e8:6d:0e:66:4b:a4:50:
ef:0d:cd:8d:1d:53:cc:07:a0:fd:cb:54:2c:bc:39:6f:8f:0c:
fd:36:ca:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:21:01 2026 by rpki-client