Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
File: rS044g8k0OMLhszYJhrAAX8XpaQ.mft (raw, json)
Hash identifier: 7C7pgs3phcPR5dCpkUcQOlOYz089Wpgh11LYUjg3GZw=
Subject key identifier: 57:60:4A:CE:13:FB:2F:E3:4F:F3:3B:C1:B9:A6:82:FE:14:35:33:E4
Authority key identifier: AD:2D:38:E2:0F:24:D0:E3:0B:86:CC:D8:26:1A:C0:01:7F:17:A5:A4
Certificate issuer: /CN=ad2d38e20f24d0e30b86ccd8261ac0017f17a5a4
Certificate serial: 019F95124DA0C14F9B6F0A41416C41970B68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
Manifest number: 0C96
Signing time: Fri 24 Jul 2026 17:00:32 +0000
Manifest this update: Fri 24 Jul 2026 17:00:32 +0000
Manifest next update: Sat 25 Jul 2026 17:00:32 +0000
Files and hashes: 1: 9tGzK-FCrgGlyf8btSGObHH6Jkw.roa (hash: NlammvVp7/v8P1KUtxpc69bkMW7FgZFFOJxxoLecI3k=)
2: NJAtBEz3Ixv_CCYeRvRJJECYvnk.roa (hash: 8VY+OH2qENoVZQA8QBMe/XGjN1hAsUDKuWI2emaWxMU=)
3: rS044g8k0OMLhszYJhrAAX8XpaQ.crl (hash: uYYpxBamNATT9UKo2a4iWy61La4GcNFQZsxnSOK6JVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:4d:a0:c1:4f:9b:6f:0a:41:41:6c:41:97:0b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2d38e20f24d0e30b86ccd8261ac0017f17a5a4
Validity
Not Before: Jul 24 17:00:32 2026 GMT
Not After : Jul 25 17:00:32 2026 GMT
Subject: CN=57604ace13fb2fe34ff33bc1b9a682fe143533e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:00:23:bc:22:10:fd:2c:e6:06:16:e3:22:49:
61:27:91:bd:fb:c1:0e:85:fe:60:72:d5:f3:e5:ec:
3c:fd:1b:a4:aa:59:01:4d:0b:f3:65:a2:02:87:3e:
d3:85:d0:c9:02:3c:c6:f6:8e:b8:ca:49:9a:04:51:
20:12:02:0d:0f:45:d0:12:40:e7:87:12:a5:75:87:
bc:4a:bd:54:b6:36:3e:0d:a2:dd:7c:48:2f:bc:20:
19:f2:75:e5:9d:ac:c3:e3:a8:f8:ae:76:9b:32:8d:
ca:5d:fa:83:ee:9d:0f:d8:ba:bd:ae:24:96:89:ed:
a2:76:5b:92:88:61:eb:0c:89:69:ad:23:6f:22:2d:
c6:ca:07:bd:d3:64:b6:b2:ea:85:76:2e:4c:97:a9:
a2:ad:ed:23:f0:d4:f2:64:34:56:16:ba:36:4f:e6:
c7:be:91:f4:15:5e:5e:38:6e:ab:d9:79:c0:58:16:
10:79:38:fb:5f:93:07:53:67:01:37:88:f4:27:f4:
24:6d:63:1e:a2:69:d5:37:b9:a1:9a:38:3a:17:cd:
8d:f1:39:a1:6d:f1:e4:07:85:f6:83:50:4e:c6:2d:
15:26:86:29:3a:2f:5a:e1:7e:4b:09:ea:62:06:6d:
3d:98:05:70:c3:23:f2:7d:75:79:f3:73:0a:09:6a:
0b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:60:4A:CE:13:FB:2F:E3:4F:F3:3B:C1:B9:A6:82:FE:14:35:33:E4
X509v3 Authority Key Identifier:
keyid:AD:2D:38:E2:0F:24:D0:E3:0B:86:CC:D8:26:1A:C0:01:7F:17:A5:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b4:3f:ce:9b:b2:a6:6e:62:9b:42:49:e3:12:80:2a:41:8e:
d8:d8:dc:6b:2e:60:53:d9:f4:07:7c:91:a2:60:9d:af:41:06:
8a:8e:d3:e4:63:44:07:09:da:c4:44:70:33:b5:2b:50:58:4e:
40:84:4a:66:2c:59:36:0b:39:28:e3:ed:96:fc:69:df:ba:5a:
32:48:7f:8d:9f:f7:e7:0e:51:12:22:76:4d:21:59:ea:79:7e:
19:d8:8c:c5:c8:a8:3c:7f:72:5f:4b:80:5d:2e:32:11:b7:96:
19:18:f3:cb:aa:8d:0c:ef:b9:1e:85:f8:7a:a2:a9:25:80:a0:
92:b9:95:68:ff:b0:d5:21:09:fc:94:c4:59:a7:8f:70:d3:85:
a8:28:6d:e5:05:6a:5c:9e:04:91:5c:38:91:27:c6:93:b6:c9:
05:0a:5e:9b:fd:cb:50:9f:a3:7c:46:6d:f6:2d:de:4d:13:e7:
ba:ff:65:05:63:7c:e7:81:94:9d:37:ab:40:60:47:de:18:b3:
fd:23:14:7a:a0:3d:ac:53:a6:e5:6a:2e:03:32:ed:b6:6e:b6:
88:4f:c6:e2:41:a8:7a:02:ad:2e:9c:d2:3b:75:bb:89:47:96:
9d:f8:97:e5:82:8b:e6:82:dd:9f:42:4a:9b:92:2d:cd:58:4b:
cb:e4:b9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:07:26 2026 by rpki-client