Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
File: rS044g8k0OMLhszYJhrAAX8XpaQ.mft (raw, json)
Hash identifier: xwkQrYvC7NPSWOsYZtDjg0bjBdd7yfDb2cTy+VHp6KE=
Subject key identifier: 8C:B7:2D:37:1D:CE:3B:AE:D6:78:68:E4:49:15:39:1E:9D:0C:B1:F4
Authority key identifier: AD:2D:38:E2:0F:24:D0:E3:0B:86:CC:D8:26:1A:C0:01:7F:17:A5:A4
Certificate issuer: /CN=ad2d38e20f24d0e30b86ccd8261ac0017f17a5a4
Certificate serial: 019F93243D24A7597416BE87974EAB334DD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
Manifest number: 0C95
Signing time: Fri 24 Jul 2026 08:00:53 +0000
Manifest this update: Fri 24 Jul 2026 08:00:53 +0000
Manifest next update: Sat 25 Jul 2026 08:00:53 +0000
Files and hashes: 1: 9tGzK-FCrgGlyf8btSGObHH6Jkw.roa (hash: NlammvVp7/v8P1KUtxpc69bkMW7FgZFFOJxxoLecI3k=)
2: NJAtBEz3Ixv_CCYeRvRJJECYvnk.roa (hash: 8VY+OH2qENoVZQA8QBMe/XGjN1hAsUDKuWI2emaWxMU=)
3: rS044g8k0OMLhszYJhrAAX8XpaQ.crl (hash: Ncnn/BeyfuwCrtDn5mv0OXCpvGcNUaZI0Z2Wav8MWrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:3d:24:a7:59:74:16:be:87:97:4e:ab:33:4d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2d38e20f24d0e30b86ccd8261ac0017f17a5a4
Validity
Not Before: Jul 24 08:00:53 2026 GMT
Not After : Jul 25 08:00:53 2026 GMT
Subject: CN=8cb72d371dce3baed67868e44915391e9d0cb1f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:84:19:be:d0:6f:6c:db:6f:1c:3a:df:2e:ae:
47:d4:56:41:fb:59:b6:df:50:ba:13:88:5e:fb:af:
74:b2:02:8a:9c:07:09:f1:5d:3b:01:4f:87:8a:30:
0b:e8:22:16:39:0e:b8:3f:f5:d6:7a:a4:56:ec:79:
ae:c6:33:a7:fe:f8:51:b8:f8:3c:5f:05:d5:f5:e2:
02:4d:02:8a:a2:3c:a6:4a:50:c7:4d:d8:0b:9d:fa:
9c:2e:e5:82:af:01:07:2d:3b:92:6f:b5:dd:9b:7c:
1e:d8:60:52:7f:cf:e9:12:5b:3d:81:a9:ab:c0:a9:
26:f1:75:f4:98:e5:ab:62:3d:6a:7f:2f:16:c0:f5:
5e:47:5c:e8:94:48:c3:47:f0:40:07:32:8c:45:3d:
86:a5:3e:9c:5e:99:2d:07:0d:74:22:47:81:49:0f:
9a:14:ff:df:db:07:b1:75:5c:e5:bc:83:76:5f:80:
e2:d9:72:45:d0:da:cf:83:1b:ee:e0:1c:f8:7a:f3:
53:f2:70:1b:3c:f0:7c:7c:bf:fa:de:a2:0b:d9:3b:
14:0c:b6:75:38:63:50:71:89:32:9b:88:76:de:11:
60:88:a8:ab:72:b3:8b:49:b4:65:28:09:8c:b8:49:
98:68:4a:15:5a:95:6c:a0:48:e0:16:7f:e0:b1:d3:
49:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B7:2D:37:1D:CE:3B:AE:D6:78:68:E4:49:15:39:1E:9D:0C:B1:F4
X509v3 Authority Key Identifier:
keyid:AD:2D:38:E2:0F:24:D0:E3:0B:86:CC:D8:26:1A:C0:01:7F:17:A5:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:61:49:94:46:1c:f9:e5:88:69:b8:86:2a:74:e1:d4:c7:20:
9b:b3:56:f7:90:7f:9f:36:76:51:56:30:b9:38:28:4e:9a:0d:
a3:d8:8a:61:1d:fd:c2:79:08:f5:0f:40:1c:da:e3:1b:a3:28:
49:0a:06:98:81:32:98:c6:96:78:74:5d:79:31:29:1f:14:fd:
01:d1:e3:4a:a8:76:b4:a1:08:40:7c:f6:0a:b2:dc:03:58:ec:
80:ab:c9:43:11:33:77:37:f1:07:89:14:53:00:53:f2:c9:1c:
99:ed:02:a6:10:c7:80:5e:2a:e1:55:65:db:ac:32:e3:fa:da:
cb:55:09:34:9c:8e:e6:ad:7d:b7:df:1e:c4:e6:0d:2f:0f:27:
c3:18:ee:1e:2a:00:da:0e:68:fc:a4:3f:06:ac:48:9a:8c:65:
32:af:ba:d0:e0:43:8f:79:fe:ae:dc:0b:eb:03:73:54:91:4d:
77:15:bd:f9:75:70:f7:21:ec:05:3a:e8:ae:c1:b4:d1:4c:70:
24:60:cf:59:44:d3:4d:17:f5:47:9a:c2:10:50:63:21:a8:a1:
43:6c:bc:f8:ae:26:de:41:2b:0e:6e:6f:50:69:84:8e:5b:6f:
90:23:ec:1c:f5:d1:25:2a:f6:89:7a:90:4a:71:7f:ff:10:9f:
60:43:d0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:02:33 2026 by rpki-client