Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
File: 0kkXcM6bZjACp5RULZiG0aLOY6s.mft (raw, json)
Hash identifier: jFk/vkhijk34mruvcjGuFZy6klhC1tYuH/JGG6tkuzA=
Subject key identifier: 5D:1D:71:AA:FC:59:B0:D0:9A:E5:AC:46:12:E3:13:F0:18:9B:42:2B
Authority key identifier: D2:49:17:70:CE:9B:66:30:02:A7:94:54:2D:98:86:D1:A2:CE:63:AB
Certificate issuer: /CN=d2491770ce9b663002a794542d9886d1a2ce63ab
Certificate serial: 019F909118E029F5AC71D6B705D54AEC6BDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
Manifest number: 0C29
Signing time: Thu 23 Jul 2026 20:00:55 +0000
Manifest this update: Thu 23 Jul 2026 20:00:55 +0000
Manifest next update: Fri 24 Jul 2026 20:00:55 +0000
Files and hashes: 1: 0kkXcM6bZjACp5RULZiG0aLOY6s.crl (hash: VCO84D5X5idzEAVacxo/EdW+89bOSwJvpRhksDjugCM=)
2: bHXHREeiIlZobWnv85pxED889VM.roa (hash: h0DRcaf7usOPw3gm22x0Kelqp60qYrawYYvGluccU04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:18:e0:29:f5:ac:71:d6:b7:05:d5:4a:ec:6b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2491770ce9b663002a794542d9886d1a2ce63ab
Validity
Not Before: Jul 23 20:00:55 2026 GMT
Not After : Jul 24 20:00:55 2026 GMT
Subject: CN=5d1d71aafc59b0d09ae5ac4612e313f0189b422b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4c:92:97:c8:4e:76:ef:53:e7:eb:06:2c:e1:
29:7b:01:ac:7e:05:8f:11:58:9a:9a:98:6e:dd:06:
a9:08:e2:f8:9e:e8:e8:b8:54:9a:20:db:5d:11:29:
22:ce:08:2f:3b:bc:c6:53:c2:f2:7d:d9:d0:ed:5f:
d0:5f:06:32:7b:f8:f3:01:5f:3d:83:d6:c9:ea:b5:
3c:0b:35:b4:77:02:33:5a:3e:4c:c3:72:cf:d4:b6:
52:79:84:ab:be:49:93:ba:1f:45:5a:4f:cc:b8:b5:
9f:0c:dd:f6:ea:86:3c:75:26:d6:80:1a:17:9a:17:
64:20:91:31:e6:eb:0a:4e:d6:22:56:a8:fd:7d:dd:
0c:f7:d2:ec:46:3f:18:5c:e1:4c:cc:5e:f8:30:40:
ce:53:21:5e:6e:19:51:43:1f:72:12:77:03:a4:2d:
62:6c:6f:6b:4e:cf:a6:2e:5f:91:72:4d:b3:8c:cb:
2e:12:d1:5a:0f:ee:f8:a4:14:42:d0:dd:29:f9:94:
02:ab:74:6b:57:fb:62:ac:37:04:1d:e0:ec:d0:7c:
26:95:27:ff:28:40:7c:9e:a2:e3:80:90:6f:e7:87:
b1:ee:14:93:40:87:be:b5:07:da:92:9e:d2:7b:8b:
88:3e:3c:dd:4d:fe:03:67:47:48:fd:7d:09:25:6b:
91:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:1D:71:AA:FC:59:B0:D0:9A:E5:AC:46:12:E3:13:F0:18:9B:42:2B
X509v3 Authority Key Identifier:
keyid:D2:49:17:70:CE:9B:66:30:02:A7:94:54:2D:98:86:D1:A2:CE:63:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:23:24:2e:c9:97:fa:41:15:93:a7:a8:c0:60:ea:b1:cd:4a:
96:79:48:47:1e:56:a1:66:c3:ed:77:8b:d8:4f:d1:d1:47:53:
1f:9c:16:1d:29:f2:ad:ff:15:d8:8b:b4:53:b1:1b:2b:72:9b:
21:df:dc:0f:31:b4:e8:1d:60:1a:40:dc:6b:99:54:d0:2c:b9:
fa:41:1f:46:ce:56:aa:13:1d:9b:e8:de:87:e8:05:0e:17:a6:
cd:bb:96:00:8a:c9:f2:6f:d9:62:70:55:d8:1c:52:26:37:a3:
f6:c2:a4:82:46:e0:d7:b5:83:79:56:62:78:08:f5:5d:7d:5f:
97:d5:ec:3d:de:43:7f:85:50:0c:d5:93:d0:13:85:42:0a:e0:
95:d0:3c:0b:8b:9d:7c:e1:b9:8a:6f:b7:e9:b2:68:80:1d:63:
d2:ed:c3:58:63:83:4b:0d:d0:7e:e3:73:b1:64:1b:3c:02:b5:
d7:b7:17:2c:f5:7c:d3:32:64:ed:e4:10:39:a2:a5:2b:e2:34:
47:d4:75:14:86:fe:c0:0e:60:9f:7c:35:23:6e:08:fe:79:2b:
ac:86:91:1b:6a:c6:b2:54:e0:dd:21:ff:4a:2d:c5:b6:a8:2e:
82:41:08:07:60:84:69:ed:86:79:76:33:5d:40:d3:b9:b0:b3:
59:92:7c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:08:49 2026 by rpki-client