Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft
File: 0dMLd0soDDfhxe1dimnLmvZIsGU.mft (raw, json)
Hash identifier: k05VfVRSYOYCO8d5lMX4+InOUST4ew6HyV7zsV79ubw=
Subject key identifier: 62:FF:3C:D6:32:19:D9:BD:0A:5B:DB:AC:36:F3:B3:FD:03:A4:E7:EC
Authority key identifier: D1:D3:0B:77:4B:28:0C:37:E1:C5:ED:5D:8A:69:CB:9A:F6:48:B0:65
Certificate issuer: /CN=d1d30b774b280c37e1c5ed5d8a69cb9af648b065
Certificate serial: 019F8FB4D16921191CAB0519C255B2E83509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dMLd0soDDfhxe1dimnLmvZIsGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft
Manifest number: 0E33
Signing time: Thu 23 Jul 2026 16:00:19 +0000
Manifest this update: Thu 23 Jul 2026 16:00:19 +0000
Manifest next update: Fri 24 Jul 2026 16:00:19 +0000
Files and hashes: 1: 0dMLd0soDDfhxe1dimnLmvZIsGU.crl (hash: /XMHOmbBGfPQATlnYYb/5+0/vHk6hEFbbY/EYzRBbI4=)
2: 4uCW8KDL5eygnSjCYi7-Nukptjw.roa (hash: Lz95AsDo4OKSWuKZICMJRolQCwkNIP0tKUYk7qYQ5RA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0dMLd0soDDfhxe1dimnLmvZIsGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b4:d1:69:21:19:1c:ab:05:19:c2:55:b2:e8:35:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1d30b774b280c37e1c5ed5d8a69cb9af648b065
Validity
Not Before: Jul 23 16:00:19 2026 GMT
Not After : Jul 24 16:00:19 2026 GMT
Subject: CN=62ff3cd63219d9bd0a5bdbac36f3b3fd03a4e7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:85:ca:09:07:58:41:75:16:8c:80:4d:1a:0d:
d7:0e:c0:cd:34:9c:d2:98:89:07:6e:83:20:3c:97:
2c:87:e3:69:9f:68:c3:07:64:48:74:2e:50:28:87:
24:ed:1a:41:c4:00:3b:65:ca:76:de:db:79:1c:cd:
29:c3:11:6e:51:04:69:b5:23:9f:93:92:12:13:d4:
df:bb:27:a3:f6:06:56:ac:03:e8:98:f2:ac:ad:ea:
cb:37:0d:81:ec:c3:93:a6:e2:15:89:cc:f6:d4:3e:
32:ee:59:37:de:10:66:6b:28:17:af:28:3b:91:96:
9b:68:b0:93:a2:fd:25:a2:ab:f8:fe:40:bd:b8:9f:
60:b7:8e:f9:95:cc:14:98:73:b3:59:15:97:fc:41:
37:e8:3b:24:e6:61:78:0b:eb:80:aa:17:3e:a7:04:
91:74:17:e6:e3:16:24:d4:f9:89:eb:68:3f:9a:ac:
e4:db:c4:9d:fa:89:4a:71:4a:c9:15:66:21:e5:93:
73:21:78:36:73:8f:ea:3b:c6:f3:48:29:c2:54:ab:
85:15:b6:ff:0b:54:86:10:4d:68:b9:6e:6f:dc:f7:
39:07:fb:35:06:bd:cb:b4:ca:44:af:b5:a8:f0:45:
ba:a1:a3:37:e5:c3:f8:c1:ae:54:94:3e:7a:5f:6a:
e8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FF:3C:D6:32:19:D9:BD:0A:5B:DB:AC:36:F3:B3:FD:03:A4:E7:EC
X509v3 Authority Key Identifier:
keyid:D1:D3:0B:77:4B:28:0C:37:E1:C5:ED:5D:8A:69:CB:9A:F6:48:B0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dMLd0soDDfhxe1dimnLmvZIsGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:5f:6a:31:29:62:c4:83:08:e1:d0:da:e4:03:a6:a2:a5:a1:
31:48:0a:20:32:0f:3f:ee:b9:76:8e:4b:62:f0:fc:74:4e:26:
cb:08:57:31:bc:4a:38:ba:36:de:26:a2:74:e8:e0:c5:95:b0:
17:47:51:f3:6d:f2:f9:2c:01:c3:77:f0:a5:ae:3d:18:17:3f:
ce:ad:cf:73:e6:27:cb:63:4d:7c:fc:19:33:cc:0d:50:5b:a9:
a3:60:69:b1:0f:60:59:db:fd:76:6f:30:6a:f0:e2:70:5f:3b:
94:70:0d:8b:90:b4:94:c1:91:07:cf:f7:af:e5:dd:b2:b6:d1:
91:15:c2:59:a2:ff:92:9c:ad:08:07:d8:d1:14:30:30:76:02:
39:60:fb:eb:5d:d4:e2:67:2e:20:5c:80:3e:40:22:e3:79:0c:
85:c7:50:36:18:a5:79:2c:7a:42:2e:58:7b:10:d2:35:32:e0:
da:6b:f1:eb:03:f0:e6:46:76:ea:cb:2f:e2:4e:4c:de:54:b9:
d0:b8:fb:f4:d9:08:22:19:c4:c0:49:43:49:32:58:e3:94:e6:
81:5d:79:31:af:4f:c1:7e:2a:4c:01:8e:ef:d1:46:82:b2:01:
a4:35:47:d0:40:ce:a7:4d:ed:58:21:e7:dc:f3:6b:5d:08:66:
b2:22:f5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:47:45 2026 by rpki-client