Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5dbfe1-e49f-421b-a755-a983866070cb/1/0aJ0TmbValnwtKDjDNEUqusVJzM.mft
File: 0aJ0TmbValnwtKDjDNEUqusVJzM.mft (raw, json)
Hash identifier: FBu71p0DTK0et5ZaCrgG4hDTugYA9ZUACBqZfwizEDQ=
Subject key identifier: E3:71:E2:B5:93:A7:9B:0B:25:2B:70:7D:11:7C:87:14:E1:3F:04:A6
Authority key identifier: D1:A2:74:4E:66:D5:6A:59:F0:B4:A0:E3:0C:D1:14:AA:EB:15:27:33
Certificate issuer: /CN=d1a2744e66d56a59f0b4a0e30cd114aaeb152733
Certificate serial: 019F8FEC73A6553093163456B0FB15CF5597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0aJ0TmbValnwtKDjDNEUqusVJzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5dbfe1-e49f-421b-a755-a983866070cb/1/0aJ0TmbValnwtKDjDNEUqusVJzM.mft
Manifest number: 15
Signing time: Thu 23 Jul 2026 17:01:05 +0000
Manifest this update: Thu 23 Jul 2026 17:01:05 +0000
Manifest next update: Fri 24 Jul 2026 17:01:05 +0000
Files and hashes: 1: 0aJ0TmbValnwtKDjDNEUqusVJzM.crl (hash: 4OGlhILi5e1mkMMeZKzaAT+ExJvmyxaPM98+lyj2kGY=)
2: ceyUVnmYWQ_dIwIKpX64k6Y4OLY.roa (hash: ptX3G2iVrVq3xSTlraGgIQKayhp9ftrtJBYKoRwKsRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5dbfe1-e49f-421b-a755-a983866070cb/1/0aJ0TmbValnwtKDjDNEUqusVJzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5dbfe1-e49f-421b-a755-a983866070cb/1/0aJ0TmbValnwtKDjDNEUqusVJzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0aJ0TmbValnwtKDjDNEUqusVJzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:73:a6:55:30:93:16:34:56:b0:fb:15:cf:55:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1a2744e66d56a59f0b4a0e30cd114aaeb152733
Validity
Not Before: Jul 23 17:01:05 2026 GMT
Not After : Jul 24 17:01:05 2026 GMT
Subject: CN=e371e2b593a79b0b252b707d117c8714e13f04a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c3:d1:05:ab:20:9a:22:f7:88:95:89:a8:f8:
62:ab:3b:75:5f:78:9e:5f:1c:ed:67:d1:58:45:c6:
9c:e9:e5:b3:e7:e5:e4:be:7a:36:95:d6:fe:c9:78:
68:a8:7f:4b:d5:07:7d:b2:9c:1d:a5:c0:55:72:13:
b8:8f:8f:a9:e2:47:20:fb:67:01:a8:5e:d6:d9:7a:
37:c9:0b:30:4b:cd:0d:a9:34:ec:b5:75:df:5e:a8:
0e:32:1e:69:82:0d:d0:b5:51:2b:2c:7c:b7:25:21:
5f:a1:47:6e:70:4a:66:80:76:c8:4e:6d:4c:6b:71:
b9:31:e7:e2:6b:8c:44:eb:18:35:5d:2f:ac:59:f5:
78:fc:0b:66:88:49:d3:94:ac:c8:2b:5e:d2:4d:34:
66:c6:7c:4b:70:67:66:06:cb:49:9c:06:c5:29:12:
6b:96:5d:70:e1:c8:a1:8c:80:48:24:07:d3:cb:9d:
6f:d2:a8:ae:d2:69:df:4a:dc:74:5c:42:35:04:1e:
18:0a:08:51:01:55:64:42:9f:23:19:22:3f:21:2a:
95:3c:c7:d3:b0:30:bb:77:fb:a3:e8:f0:5f:f8:19:
ad:2f:73:d1:7a:64:2e:56:98:36:ec:51:e0:ee:b2:
ae:0b:20:de:68:f4:bc:08:e6:c5:5a:1f:67:b8:b1:
14:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:71:E2:B5:93:A7:9B:0B:25:2B:70:7D:11:7C:87:14:E1:3F:04:A6
X509v3 Authority Key Identifier:
keyid:D1:A2:74:4E:66:D5:6A:59:F0:B4:A0:E3:0C:D1:14:AA:EB:15:27:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0aJ0TmbValnwtKDjDNEUqusVJzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5dbfe1-e49f-421b-a755-a983866070cb/1/0aJ0TmbValnwtKDjDNEUqusVJzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5dbfe1-e49f-421b-a755-a983866070cb/1/0aJ0TmbValnwtKDjDNEUqusVJzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:86:7d:28:27:14:59:e1:49:5b:2a:a5:cf:e4:db:e0:9d:83:
8e:4f:78:fe:73:b4:51:f9:ab:07:95:9f:3f:3b:51:3c:0c:fd:
2c:ff:57:a0:d6:3f:78:4e:99:02:49:ba:04:eb:98:fe:4f:2b:
32:fe:c9:b4:19:86:b5:2a:37:1a:06:71:3a:12:e7:e2:62:5d:
59:c8:e0:25:0a:c3:ac:0c:1d:9c:13:0c:a4:e0:7f:31:c4:28:
7d:04:63:17:0d:c0:20:ae:20:a4:1a:b8:01:5d:d1:ea:f2:70:
76:c1:0e:31:31:bc:91:9a:24:b3:63:42:ed:dd:c8:41:59:d4:
c5:cb:0f:16:27:1b:a8:66:d0:8c:50:6e:bf:f5:34:6d:6e:91:
cf:f0:6b:e7:4a:eb:df:27:a9:4a:37:c4:09:44:89:9f:a3:ae:
7f:22:0b:dd:ed:ca:81:54:bf:e1:1a:b8:5c:ee:53:57:89:16:
56:3b:b6:19:0f:98:9f:3f:5d:19:92:93:56:49:31:29:01:d6:
99:30:01:f8:09:ec:12:27:8f:38:2a:d9:5a:18:b6:68:4e:64:
7b:a3:7a:c9:81:c9:ba:1b:80:72:17:4a:76:58:55:3a:61:75:
3e:88:8b:ea:9e:6d:7b:32:4c:2c:d9:00:fe:25:0e:5a:06:40:
5e:f9:6a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:48 2026 by rpki-client