Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/5dbfe1-e49f-421b-a755-a983866070cb/1/0aJ0TmbValnwtKDjDNEUqusVJzM.mft
File: 0aJ0TmbValnwtKDjDNEUqusVJzM.mft (raw, json)
Hash identifier: 1/c6WzZjDyTtP6OddNrl3mhnMw6sPaiIYsbhgJUODf0=
Subject key identifier: 59:26:32:60:FA:4C:4E:BF:B0:07:3F:48:26:E5:50:69:3D:38:04:18
Authority key identifier: D1:A2:74:4E:66:D5:6A:59:F0:B4:A0:E3:0C:D1:14:AA:EB:15:27:33
Certificate issuer: /CN=d1a2744e66d56a59f0b4a0e30cd114aaeb152733
Certificate serial: 01A0C8C6BD4E2A6804F56A75910AE65B8A8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0aJ0TmbValnwtKDjDNEUqusVJzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5dbfe1-e49f-421b-a755-a983866070cb/1/0aJ0TmbValnwtKDjDNEUqusVJzM.mft
Manifest number: B7
Signing time: Tue 22 Sep 2026 11:01:02 +0000
Manifest this update: Tue 22 Sep 2026 11:01:02 +0000
Manifest next update: Wed 23 Sep 2026 11:01:02 +0000
Files and hashes: 1: 0aJ0TmbValnwtKDjDNEUqusVJzM.crl (hash: oWJHN/fhDD7FJjl3kc8FMQPv9eoV21LkaACaEwT7PXQ=)
2: ceyUVnmYWQ_dIwIKpX64k6Y4OLY.roa (hash: ptX3G2iVrVq3xSTlraGgIQKayhp9ftrtJBYKoRwKsRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5dbfe1-e49f-421b-a755-a983866070cb/1/0aJ0TmbValnwtKDjDNEUqusVJzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5dbfe1-e49f-421b-a755-a983866070cb/1/0aJ0TmbValnwtKDjDNEUqusVJzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0aJ0TmbValnwtKDjDNEUqusVJzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:bd:4e:2a:68:04:f5:6a:75:91:0a:e6:5b:8a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1a2744e66d56a59f0b4a0e30cd114aaeb152733
Validity
Not Before: Sep 22 11:01:02 2026 GMT
Not After : Sep 23 11:01:02 2026 GMT
Subject: CN=59263260fa4c4ebfb0073f4826e550693d380418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5e:f8:76:3d:e2:ca:fc:69:3a:73:b9:6a:b1:
9c:25:17:18:6a:d8:d6:0f:42:cb:3c:93:d1:07:a0:
0e:d2:0a:da:0b:7a:d8:2b:ee:a3:68:7f:01:c6:b7:
01:5b:d5:78:82:8f:66:1d:c3:45:2a:fc:73:20:7f:
8a:a4:d2:6d:c6:be:1b:09:1c:4e:95:bd:df:ea:d4:
e3:9c:a9:c3:af:66:b6:29:f2:33:de:e4:52:37:19:
cd:da:62:fa:70:3e:74:53:2a:c9:fd:68:8d:52:08:
8a:c4:7b:74:74:5f:a8:3c:ee:c7:a2:92:d7:8e:78:
3e:53:4b:03:e3:63:4e:b5:21:c9:97:6c:aa:e5:b5:
ad:f7:ec:91:fd:0f:13:0c:82:6a:c5:7d:23:5b:3b:
bb:9d:8a:b5:e9:bb:2b:dc:a9:d2:cf:c8:92:3b:41:
51:de:65:9d:cf:d9:de:a7:73:1d:0b:a7:c4:b5:e7:
35:f1:f3:7f:0f:db:3c:45:84:30:20:a5:85:a5:74:
b4:f1:5d:cc:e0:b5:ea:b1:c2:a3:7d:23:67:48:ac:
3e:28:d4:3b:ad:21:d9:b4:d7:23:fb:e0:40:63:de:
b1:bb:d5:bd:b5:56:1c:eb:5d:77:d1:ac:5a:e3:ba:
a4:e2:0b:eb:fa:59:18:54:c9:69:0d:8a:45:fc:bf:
c7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:26:32:60:FA:4C:4E:BF:B0:07:3F:48:26:E5:50:69:3D:38:04:18
X509v3 Authority Key Identifier:
keyid:D1:A2:74:4E:66:D5:6A:59:F0:B4:A0:E3:0C:D1:14:AA:EB:15:27:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0aJ0TmbValnwtKDjDNEUqusVJzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5dbfe1-e49f-421b-a755-a983866070cb/1/0aJ0TmbValnwtKDjDNEUqusVJzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5dbfe1-e49f-421b-a755-a983866070cb/1/0aJ0TmbValnwtKDjDNEUqusVJzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:9b:83:d1:72:a5:3b:5c:82:2b:6f:f7:c2:7b:fa:86:ad:7e:
59:9a:a5:b9:da:ac:6e:2a:2b:ba:05:0b:dd:99:9f:0d:cd:22:
47:a5:b3:51:35:96:9c:9e:98:cc:fa:af:14:1d:49:ad:d7:3a:
a4:bc:b2:45:7d:3b:f5:47:9d:12:d3:92:ed:74:de:8b:dd:2c:
40:ff:eb:01:0a:59:be:55:26:a4:c6:ce:e4:2d:05:68:37:c8:
ef:86:73:36:07:3d:fd:26:26:72:e0:d3:6c:70:19:1f:5a:ba:
00:57:52:14:9e:e2:b9:23:28:df:ef:0d:bb:65:ff:9b:e5:f6:
a9:cb:6c:56:26:bb:ae:c7:40:7d:ca:48:f4:36:9e:34:74:39:
28:78:e2:d1:ee:75:0b:2a:ce:26:da:0a:28:95:d9:a5:8c:09:
31:66:7e:24:f9:0a:31:42:19:ee:be:2b:d8:c9:e9:0c:dd:a7:
88:7b:af:73:01:bc:5e:09:88:34:8e:b9:cd:d0:6f:07:61:2c:
a0:77:01:21:b4:c8:35:24:c5:46:aa:a3:c0:53:10:41:c6:e5:
0a:5b:b4:01:02:03:44:97:7b:95:d3:ef:fb:e3:90:bb:df:f6:
9d:10:89:a1:ca:7c:e6:7d:77:64:1a:2b:00:d9:06:b2:f3:9c:
53:6c:56:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:15:23 2026 by rpki-client