Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/217726-2df2-47af-a0ea-d94131da861d/1/0PDiyMFKgktU4AvZR5pIXXG_5HQ.mft
File: 0PDiyMFKgktU4AvZR5pIXXG_5HQ.mft (raw, json)
Hash identifier: dUXYl+LtjfXEe4pjV98WOQq+9z385/NIzyhmv1ZrH2Q=
Subject key identifier: 22:FB:88:ED:74:51:D5:02:A5:79:C6:76:E6:C4:97:AF:37:BB:57:F0
Authority key identifier: D0:F0:E2:C8:C1:4A:82:4B:54:E0:0B:D9:47:9A:48:5D:71:BF:E4:74
Certificate issuer: /CN=d0f0e2c8c14a824b54e00bd9479a485d71bfe474
Certificate serial: 019F91A3DDACB74A2528AAD052EF2C7142F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PDiyMFKgktU4AvZR5pIXXG_5HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/217726-2df2-47af-a0ea-d94131da861d/1/0PDiyMFKgktU4AvZR5pIXXG_5HQ.mft
Manifest number: 0181
Signing time: Fri 24 Jul 2026 01:01:03 +0000
Manifest this update: Fri 24 Jul 2026 01:01:03 +0000
Manifest next update: Sat 25 Jul 2026 01:01:03 +0000
Files and hashes: 1: 0PDiyMFKgktU4AvZR5pIXXG_5HQ.crl (hash: GeFNE8du29JQjMGcdeRlxdb4TlRMj6NLJfiwQDYURQM=)
2: vz9xDUONTQdNGh2H7pR1j8DJb4U.roa (hash: wQlmjv0wxtwfgnsZbxR6Yv1Bicu90n9KXilxDJKClFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/217726-2df2-47af-a0ea-d94131da861d/1/0PDiyMFKgktU4AvZR5pIXXG_5HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/217726-2df2-47af-a0ea-d94131da861d/1/0PDiyMFKgktU4AvZR5pIXXG_5HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PDiyMFKgktU4AvZR5pIXXG_5HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:dd:ac:b7:4a:25:28:aa:d0:52:ef:2c:71:42:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f0e2c8c14a824b54e00bd9479a485d71bfe474
Validity
Not Before: Jul 24 01:01:03 2026 GMT
Not After : Jul 25 01:01:03 2026 GMT
Subject: CN=22fb88ed7451d502a579c676e6c497af37bb57f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:74:e2:c0:f1:61:80:61:d6:93:b5:3c:96:b3:
ed:14:e6:44:db:47:9b:b7:80:86:78:ec:7a:79:ad:
a0:6b:2e:ed:a9:2a:1a:22:96:f6:f5:38:bb:de:40:
42:aa:ac:68:65:f5:c5:8e:a4:f5:51:d4:7d:6b:18:
36:58:1b:d9:8f:29:6b:ae:a9:e9:03:1d:2f:5b:7f:
32:02:42:4a:1d:4a:a8:70:25:67:34:d4:2f:2e:60:
0d:f0:70:0e:03:7a:59:a6:fe:80:8a:cb:f1:cb:ad:
a8:29:f0:fe:29:67:c5:7e:5c:df:7d:f9:39:c8:49:
c4:e7:c7:fb:95:ea:be:7c:d0:80:02:a5:b2:b0:c3:
ee:b6:c1:e1:1f:97:a4:2a:ab:58:c8:6e:29:03:73:
a7:4b:73:7d:a2:3d:66:42:f5:0c:f1:a7:4d:d3:0a:
53:5c:c0:f1:86:21:e5:15:64:c4:f5:77:b4:1d:66:
94:9c:08:34:ec:88:c6:21:8d:3c:47:51:81:10:cc:
c9:e5:26:fa:ea:31:26:f6:92:cb:52:c3:48:8c:3b:
ef:6c:99:1d:89:04:60:35:00:09:ce:3f:11:7c:2e:
6d:71:56:79:ac:a4:a7:5b:b4:57:66:9c:66:de:68:
f0:21:60:72:73:ae:bd:e1:c3:83:12:4d:40:58:41:
9c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FB:88:ED:74:51:D5:02:A5:79:C6:76:E6:C4:97:AF:37:BB:57:F0
X509v3 Authority Key Identifier:
keyid:D0:F0:E2:C8:C1:4A:82:4B:54:E0:0B:D9:47:9A:48:5D:71:BF:E4:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PDiyMFKgktU4AvZR5pIXXG_5HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/217726-2df2-47af-a0ea-d94131da861d/1/0PDiyMFKgktU4AvZR5pIXXG_5HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/217726-2df2-47af-a0ea-d94131da861d/1/0PDiyMFKgktU4AvZR5pIXXG_5HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:1c:8b:85:a4:0c:cf:e2:b7:4e:6c:5f:a5:8b:21:eb:05:88:
f5:e7:b8:c2:97:f4:6f:a7:8b:d8:c2:ac:39:d9:4f:21:6c:c3:
12:99:c8:e0:2f:ef:f1:a8:ae:f0:24:87:e9:03:da:5d:30:82:
46:e4:53:96:ae:f3:eb:a6:39:a9:f5:11:e4:4c:d8:8b:b4:2c:
7d:3f:a6:15:09:84:f7:51:0d:c3:28:87:79:48:be:dc:67:e9:
de:56:63:2f:09:f8:ff:41:f4:27:ba:1c:83:4d:14:bc:9d:57:
ee:98:75:0e:87:84:f9:39:6a:29:1b:df:45:04:4b:80:16:0e:
51:8e:44:76:c1:4c:1e:68:cc:14:89:90:de:fd:f3:c1:7e:44:
4e:0c:fc:6c:05:69:4b:33:2a:78:f0:c1:d5:e1:e4:d3:aa:3c:
8a:92:d0:02:79:68:44:58:4b:c1:e1:ce:d5:d5:f8:bf:8e:80:
02:df:2c:52:81:98:08:aa:c4:6b:62:33:26:0b:a5:fb:24:f3:
00:88:94:05:b9:dd:25:b5:68:db:72:a6:6f:df:3a:0a:d3:06:
57:b8:dd:c0:3b:96:1f:aa:9d:4e:a6:36:36:1d:ad:fe:82:11:
5e:57:9e:58:d1:d8:6f:25:3a:30:00:39:d5:fc:91:90:77:40:
b3:54:39:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:18:10 2026 by rpki-client