Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.mft
File: d0HROhWph91gAZwCZdLs7EhAlEo.mft (raw, json)
Hash identifier: +PZeq4ZF5H0tIDhYx47gynW35V8mrTsjD+9I5QZ+ah8=
Subject key identifier: 76:80:87:ED:0D:5C:A1:0E:88:64:BF:B7:CF:4F:8B:C6:87:07:11:B5
Authority key identifier: 77:41:D1:3A:15:A9:87:DD:60:01:9C:02:65:D2:EC:EC:48:40:94:4A
Certificate issuer: /CN=7741d13a15a987dd60019c0265d2ecec4840944a
Certificate serial: 019F92B62DA8F91485A0BF349DD0BBF6A770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0HROhWph91gAZwCZdLs7EhAlEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.mft
Manifest number: 0ADB
Signing time: Fri 24 Jul 2026 06:00:40 +0000
Manifest this update: Fri 24 Jul 2026 06:00:40 +0000
Manifest next update: Sat 25 Jul 2026 06:00:40 +0000
Files and hashes: 1: 2aVju54fgg9bD1JRsSNN37U-9Hk.roa (hash: gQ2ZXX3Kuvxj5T+dbec4hU1fv3yACHxOQmVvGeAb560=)
2: d0HROhWph91gAZwCZdLs7EhAlEo.crl (hash: 4agynrww1OQBfIbUCK8B2K4kJkO/hUgsgJ+VrsGXwVg=)
3: sRYXppUiSNJrW5d1MVXqJ1v0U0g.roa (hash: e8cW0JrKBdNEagEPQSlGciScba5vYX0jEPFos43/Uno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0HROhWph91gAZwCZdLs7EhAlEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:2d:a8:f9:14:85:a0:bf:34:9d:d0:bb:f6:a7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7741d13a15a987dd60019c0265d2ecec4840944a
Validity
Not Before: Jul 24 06:00:40 2026 GMT
Not After : Jul 25 06:00:40 2026 GMT
Subject: CN=768087ed0d5ca10e8864bfb7cf4f8bc6870711b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8c:b9:8e:3f:13:fc:e0:5f:20:dd:23:9a:ce:
6c:78:68:d2:b1:c3:ba:ca:a4:43:c2:e0:91:f3:0d:
f6:55:bb:7b:d4:00:0e:66:78:73:42:b3:ed:c3:a4:
2c:c3:bc:8d:ce:ec:f0:09:49:72:92:a7:a7:cb:3f:
21:1d:a4:e1:38:6a:74:22:be:92:d8:b4:e6:04:a2:
36:73:64:61:c0:95:0b:91:5f:51:4b:c8:fc:dc:1f:
54:28:79:8b:47:52:b9:83:b6:7f:a5:05:c3:e0:f4:
5a:10:6a:a9:50:d4:e7:7a:3e:71:97:ba:d4:6e:21:
27:a6:0a:77:8c:6b:45:06:fc:60:92:27:1a:cf:5c:
bb:e5:3c:8a:e0:f8:ce:ee:53:1a:ca:d9:06:37:75:
1b:82:16:cd:3d:cb:0e:ac:ce:ac:3d:6f:e8:24:b9:
40:32:8d:13:43:59:e0:5c:4b:80:0d:bb:e8:a4:d4:
4c:2e:d7:d7:5f:af:f6:76:2a:4e:cb:27:7d:af:f9:
04:33:83:50:e1:66:d3:d9:0e:4a:3c:15:2a:61:73:
f4:e6:c6:94:75:e5:d3:b4:29:33:8d:cd:30:8b:42:
93:e2:b0:11:d2:6b:b0:32:37:bf:74:27:b5:94:ee:
e5:c6:8d:92:fb:da:55:b8:32:d3:99:81:bd:d6:2e:
b2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:80:87:ED:0D:5C:A1:0E:88:64:BF:B7:CF:4F:8B:C6:87:07:11:B5
X509v3 Authority Key Identifier:
keyid:77:41:D1:3A:15:A9:87:DD:60:01:9C:02:65:D2:EC:EC:48:40:94:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0HROhWph91gAZwCZdLs7EhAlEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b8:b7:f0:a5:91:cd:d1:26:1c:ea:bd:17:a9:5a:86:f8:ea:
b2:85:31:7b:b6:47:26:11:d8:16:9f:9a:38:80:4e:29:ec:eb:
5b:76:c0:36:86:da:45:36:63:40:8a:b7:e2:e3:df:dc:61:2f:
37:fc:2b:18:a4:48:88:00:d7:1c:26:8f:20:3c:48:2d:72:2a:
e6:ec:33:ea:c7:68:01:1f:ab:5f:2c:bf:63:c8:eb:ad:10:4d:
35:1c:8d:30:1b:25:e6:e5:54:8a:85:f4:4e:75:c7:84:72:eb:
6c:52:0e:76:b8:6a:a7:3c:58:53:f2:51:ae:96:a2:c5:c1:07:
96:a9:b7:97:86:14:e8:67:62:60:a3:fb:8c:9b:57:d3:f4:e8:
83:f4:23:67:4d:fa:66:04:a4:c3:f0:37:bf:f3:e1:23:35:5a:
60:78:34:11:bb:35:6c:98:a1:11:16:8e:9c:d4:8e:39:58:8c:
7c:76:ee:5d:c3:42:ee:c8:2e:54:ee:fd:29:56:79:c9:1e:fc:
7f:94:d5:61:f9:19:28:bd:a1:6a:fc:17:1d:e5:51:2b:d7:5f:
ed:39:61:0d:6c:29:e4:f2:93:ac:92:ce:5b:9c:43:af:f3:e9:
52:da:a0:63:c1:32:e6:7f:ff:10:95:b2:50:1d:07:c4:08:37:
a3:6d:df:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:58:51 2026 by rpki-client