Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft
File: 0PMTtkDG3nU1uB7GjEDubsmf_00.mft (raw, json)
Hash identifier: OhkJZBWt4tKFQvZEiSKh5Ycuv/hlw3W6Dd/I4s6Ho2c=
Subject key identifier: A5:B7:E0:6C:5B:82:8B:AB:26:38:B1:41:7C:9C:F6:FC:90:2B:2B:D3
Authority key identifier: D0:F3:13:B6:40:C6:DE:75:35:B8:1E:C6:8C:40:EE:6E:C9:9F:FF:4D
Certificate issuer: /CN=d0f313b640c6de7535b81ec68c40ee6ec99fff4d
Certificate serial: 019F91DA82052843ACE5DAAA90CB95BD31E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PMTtkDG3nU1uB7GjEDubsmf_00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft
Manifest number: 0AF8
Signing time: Fri 24 Jul 2026 02:00:44 +0000
Manifest this update: Fri 24 Jul 2026 02:00:44 +0000
Manifest next update: Sat 25 Jul 2026 02:00:44 +0000
Files and hashes: 1: 0PMTtkDG3nU1uB7GjEDubsmf_00.crl (hash: 3yRUzjaeBbK9Plf0Re+8o07vqzXhu4EIb9M9qzgEbKQ=)
2: hGkf_qyDhU37-o9sEDt63JFfVyM.roa (hash: d3kiFkXGyIU+fZhFKa/d+1Nny2/miOmiUkEEuvkDS5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PMTtkDG3nU1uB7GjEDubsmf_00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:82:05:28:43:ac:e5:da:aa:90:cb:95:bd:31:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f313b640c6de7535b81ec68c40ee6ec99fff4d
Validity
Not Before: Jul 24 02:00:44 2026 GMT
Not After : Jul 25 02:00:44 2026 GMT
Subject: CN=a5b7e06c5b828bab2638b1417c9cf6fc902b2bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:17:1f:26:c6:d4:45:09:55:77:ad:af:22:64:
40:6a:20:c3:db:4e:ad:de:02:8e:12:5d:4d:27:d7:
4d:19:8a:b7:56:dc:fe:b4:3e:d6:b0:3d:50:f0:89:
1a:2f:35:75:16:30:94:fe:6f:5d:6b:d5:7e:6d:4b:
4a:1f:cb:85:01:f2:b4:8d:05:95:d0:dd:cc:4a:01:
32:73:77:91:d2:a6:28:57:f4:70:c7:bc:f9:29:0b:
03:8b:99:ad:cf:b1:df:e3:b6:5e:12:37:ba:7d:e2:
d1:39:f6:f8:48:d7:88:55:a3:10:ed:a2:10:88:7c:
e9:0d:ed:1f:41:2a:01:81:ad:c6:7b:0d:23:22:a6:
55:f7:07:5f:5e:fc:57:9e:a5:4c:30:dd:9f:3f:cb:
58:50:bd:e0:8b:13:36:53:ed:1a:5b:35:cd:29:36:
96:81:34:a0:77:ac:a0:ac:f3:a5:6c:29:95:1e:8b:
81:90:86:c6:5c:61:a7:5a:25:2c:8b:3a:73:e5:e7:
23:17:09:42:4f:0c:01:69:ca:3a:31:60:a5:13:6e:
fa:f3:05:ea:09:91:fd:c8:ff:84:bd:b3:54:ba:45:
18:5e:0a:fa:7e:0d:83:1c:c0:a7:b3:cb:8d:74:0e:
ac:ce:51:27:df:bf:93:1f:cb:07:63:b0:d9:84:49:
57:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B7:E0:6C:5B:82:8B:AB:26:38:B1:41:7C:9C:F6:FC:90:2B:2B:D3
X509v3 Authority Key Identifier:
keyid:D0:F3:13:B6:40:C6:DE:75:35:B8:1E:C6:8C:40:EE:6E:C9:9F:FF:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PMTtkDG3nU1uB7GjEDubsmf_00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:57:a1:f3:e2:f3:ad:a9:81:05:b6:83:96:60:48:2a:32:1c:
c2:f1:2e:cc:71:39:6a:52:42:ae:7c:a7:88:d0:5e:5c:28:3c:
1f:ba:51:7a:08:22:45:61:d8:08:79:3c:36:e0:b1:37:49:21:
df:ed:3e:9e:fd:13:c8:b4:c1:fe:60:4b:42:43:79:39:37:3a:
40:00:41:1d:e7:8e:ed:ba:d1:6c:a9:97:f2:e9:ab:79:7a:51:
f5:b0:e7:f1:bd:6a:d7:7b:d4:cd:c6:8f:bf:ae:5b:4a:f8:bb:
98:92:12:ad:ba:4c:bd:80:fd:a1:c5:9c:93:8c:2f:0d:61:c1:
a9:c9:0b:ab:9a:7a:6e:70:a7:59:e5:38:37:65:bc:65:7b:80:
54:50:21:23:b6:b0:f0:82:ce:c6:fe:a8:78:9f:38:83:0e:21:
20:1d:5a:48:e3:c9:f8:eb:4e:7d:77:a9:03:ef:d5:88:81:4f:
74:d7:f3:f8:3c:ce:00:97:cf:51:34:4f:57:83:aa:2f:96:0f:
c7:de:08:ad:0c:4a:22:f7:59:ce:ad:1b:0f:29:48:3c:90:a2:
0b:cf:c7:46:c2:76:4d:0f:08:f0:69:28:9b:da:a0:c6:c5:de:
cf:81:a8:ff:66:40:79:9c:c8:dc:fb:cf:cd:e8:00:8a:49:76:
16:48:cd:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:02:48 2026 by rpki-client