Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/00248c-3791-4629-a6c6-6d971992c349/1/D5otI3SqascUtfim7duA3GlnnMY.mft
File: D5otI3SqascUtfim7duA3GlnnMY.mft (raw, json)
Hash identifier: C3bzNyjpOzxo8UycjjGXTZWXkOru+9ubhyxE/d24QJk=
Subject key identifier: 61:B0:0A:D7:37:C3:1D:AD:C4:89:41:D4:13:F6:E1:27:FB:43:6E:4D
Authority key identifier: 0F:9A:2D:23:74:AA:6A:C7:14:B5:F8:A6:ED:DB:80:DC:69:67:9C:C6
Certificate issuer: /CN=0f9a2d2374aa6ac714b5f8a6eddb80dc69679cc6
Certificate serial: 019F90FF66978BAF7A209FDBBFA86F58CDDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5otI3SqascUtfim7duA3GlnnMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/00248c-3791-4629-a6c6-6d971992c349/1/D5otI3SqascUtfim7duA3GlnnMY.mft
Manifest number: 102B
Signing time: Thu 23 Jul 2026 22:01:24 +0000
Manifest this update: Thu 23 Jul 2026 22:01:24 +0000
Manifest next update: Fri 24 Jul 2026 22:01:24 +0000
Files and hashes: 1: 8SEsdKMq767CnaRYG-1hJ5v6Hic.roa (hash: h/RdezdmLSdHmsoFs8q7JJ7Hnulds2LoEiNuAXGhUZg=)
2: D5otI3SqascUtfim7duA3GlnnMY.crl (hash: 718BH/x0YPCmm0tOpp4PKW4jrTv8tJPXDmLgsvfLFsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/00248c-3791-4629-a6c6-6d971992c349/1/D5otI3SqascUtfim7duA3GlnnMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/00248c-3791-4629-a6c6-6d971992c349/1/D5otI3SqascUtfim7duA3GlnnMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5otI3SqascUtfim7duA3GlnnMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:66:97:8b:af:7a:20:9f:db:bf:a8:6f:58:cd:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9a2d2374aa6ac714b5f8a6eddb80dc69679cc6
Validity
Not Before: Jul 23 22:01:24 2026 GMT
Not After : Jul 24 22:01:24 2026 GMT
Subject: CN=61b00ad737c31dadc48941d413f6e127fb436e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ed:e9:69:dc:3a:91:e0:2d:66:a6:8a:85:22:
22:f7:a0:43:88:5e:cb:fc:73:dd:58:a8:30:42:bd:
fe:d1:50:24:6c:94:e0:d3:ae:34:df:77:81:91:b9:
f2:57:38:6d:e1:44:dc:ab:7b:7f:ea:21:5b:da:9f:
10:13:b0:2c:09:ee:29:6d:f7:06:4c:c4:dc:d3:b4:
9a:fa:48:fd:e9:9f:c4:74:7f:4a:a5:2c:7e:8a:1d:
f3:a2:1a:fe:19:51:fb:f8:93:a4:0c:e2:df:a2:04:
dd:7c:13:a9:07:9f:50:8c:d0:51:9b:a8:71:c0:59:
17:83:5d:26:93:1e:24:12:11:9a:c0:ca:38:58:f4:
60:7e:7a:e0:89:10:66:7b:32:70:08:ba:7a:f8:98:
20:e5:a7:65:3e:03:69:0c:c7:38:aa:74:06:99:d9:
20:eb:1f:89:54:41:9b:05:2b:39:77:9b:71:60:6c:
9b:38:18:76:c2:ed:08:60:12:85:55:12:66:5a:93:
0b:7b:71:89:33:2c:b3:b3:4c:65:98:a7:c8:73:9b:
98:c5:e1:dd:ff:8c:4f:de:d4:92:99:a6:25:7f:17:
93:94:b8:8e:68:f5:93:fe:25:00:c9:9d:0c:a0:39:
d0:43:a8:64:ab:c6:d8:6e:4d:90:7f:3c:45:1e:bd:
60:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B0:0A:D7:37:C3:1D:AD:C4:89:41:D4:13:F6:E1:27:FB:43:6E:4D
X509v3 Authority Key Identifier:
keyid:0F:9A:2D:23:74:AA:6A:C7:14:B5:F8:A6:ED:DB:80:DC:69:67:9C:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5otI3SqascUtfim7duA3GlnnMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/00248c-3791-4629-a6c6-6d971992c349/1/D5otI3SqascUtfim7duA3GlnnMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/00248c-3791-4629-a6c6-6d971992c349/1/D5otI3SqascUtfim7duA3GlnnMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:30:70:6d:c3:a7:06:f5:76:9b:78:84:43:d7:63:96:14:f3:
4e:48:47:f9:60:70:1f:15:a5:e5:4d:d7:b7:c3:7c:0b:f2:35:
97:df:6a:01:41:f8:9d:d5:ec:61:00:d8:81:66:db:2a:19:6b:
43:83:a4:59:d0:3c:0a:a4:33:8b:bb:f4:84:94:c5:79:c1:cb:
52:3b:54:52:cc:41:44:b1:0c:90:43:21:6f:5c:16:a5:ae:6a:
6c:8b:54:3b:16:0e:9d:f2:df:fb:4c:4a:71:9a:c6:58:a4:36:
6a:be:f7:5d:19:95:ab:a1:75:c8:b2:57:f1:d2:eb:cf:46:b1:
3a:fb:50:67:2e:1f:a3:0f:33:0a:55:16:52:b1:80:31:e3:57:
fd:72:21:1d:e4:d3:73:b8:be:01:10:8f:58:3c:84:bc:da:14:
39:b5:c0:4b:54:a6:49:f3:90:8b:6d:ef:17:af:a5:b5:60:44:
09:25:d0:09:97:92:61:a0:d1:ee:13:08:ae:d3:c9:22:64:8b:
e5:ee:b0:7a:df:b9:57:54:3a:ea:9f:40:99:20:41:f0:cb:33:
92:94:0a:47:77:44:d9:14:41:c6:6d:48:1f:bb:ed:ec:3a:03:
7a:bd:f7:21:8e:c5:c8:18:2c:45:6a:a3:3d:f0:f6:a3:66:32:
87:ad:59:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:45:04 2026 by rpki-client