Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
File: 0u2k-NnkgpUqESsu9aTyObf2JVE.mft (raw, json)
Hash identifier: d5IXo3Pxv4LxpHtLIv2L6QvaOM2kKOG/DXWdlL5sN4E=
Subject key identifier: 22:FB:B3:8A:9F:55:C8:0B:B7:C0:29:9C:D3:4A:9A:F4:D8:55:83:32
Authority key identifier: D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51
Certificate issuer: /CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551
Certificate serial: 019F90912D8BDB04A2205D384CF448B870AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
Manifest number: 0E59
Signing time: Thu 23 Jul 2026 20:01:01 +0000
Manifest this update: Thu 23 Jul 2026 20:01:01 +0000
Manifest next update: Fri 24 Jul 2026 20:01:01 +0000
Files and hashes: 1: 0u2k-NnkgpUqESsu9aTyObf2JVE.crl (hash: niP5oHXhzHeqH4Eyw53Z2FcEKvDJQfUhC9qm0gzvLhA=)
2: cH1uhcXR4yA_j8slffa5H1Hj5PM.roa (hash: 6BjMFM7dbeXnopz6sC8hF0DrckNn2/Fq1fNIhGQIPa8=)
3: vQ3Onh8zAP8fN-K_wTaZqAaUruI.roa (hash: ycldYOHAUvLotQf8PVaaFzvXxeLDOJ2gpiZO/0/3jvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:2d:8b:db:04:a2:20:5d:38:4c:f4:48:b8:70:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551
Validity
Not Before: Jul 23 20:01:01 2026 GMT
Not After : Jul 24 20:01:01 2026 GMT
Subject: CN=22fbb38a9f55c80bb7c0299cd34a9af4d8558332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:ce:4d:3d:41:07:08:1c:9a:88:be:ba:67:38:
d6:a2:44:4a:d8:6e:eb:a5:24:31:a4:3c:6b:90:73:
e0:f3:dc:61:66:5e:57:78:4a:5b:e6:ad:fe:3e:0a:
75:06:63:2b:77:b5:60:2f:9d:79:99:e1:9d:e7:49:
97:7c:78:cf:b3:3b:5d:40:d4:d9:06:fd:20:cb:1c:
d9:45:19:c8:8a:59:8d:31:f6:0b:e3:b0:21:88:e4:
aa:c9:b4:5f:06:3c:b9:d3:e8:47:56:70:0c:1e:79:
f8:ae:95:f6:be:fb:22:97:a8:dd:85:5b:69:73:9a:
84:c9:8b:8f:c4:d3:fa:10:af:2b:ab:63:28:86:1e:
fb:07:a4:06:4c:0d:cb:fa:11:a0:33:9e:7a:3b:d4:
10:72:3c:cb:9a:13:6e:0d:5b:f0:1e:72:17:62:7e:
28:f0:81:c2:45:79:c7:78:4c:82:b9:3a:8a:52:d0:
9d:04:aa:66:86:2f:ab:5a:8e:42:ab:74:66:75:bf:
db:4e:91:59:18:0d:3c:4e:8f:8d:45:e6:12:23:aa:
9c:ab:cf:ae:97:cc:29:7e:c6:98:41:6b:f0:76:03:
51:1c:d9:40:d3:f7:1c:bb:e8:79:1d:5a:32:8c:3c:
29:c9:0a:47:8b:9b:c6:fc:7c:ad:32:2d:27:b2:49:
28:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FB:B3:8A:9F:55:C8:0B:B7:C0:29:9C:D3:4A:9A:F4:D8:55:83:32
X509v3 Authority Key Identifier:
keyid:D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:bf:d9:b9:f9:5e:01:96:de:f9:98:ab:1a:e4:5c:cf:9e:9e:
f8:ee:f9:82:89:e2:e9:8a:d8:1a:0f:4f:8d:dd:ad:4a:c4:07:
7d:f5:dc:fa:d6:f3:af:85:b8:d8:e0:74:34:75:b9:ac:54:31:
cf:ed:16:65:bb:f5:e1:20:c8:55:20:76:e9:e7:4b:37:f6:80:
85:91:da:e8:3b:0e:a1:48:f7:33:83:20:ac:e6:d8:8a:d5:3d:
da:ad:a1:dc:db:7b:9b:63:92:fe:cf:ee:43:09:83:17:de:a0:
15:53:84:78:8b:a8:d7:78:9b:90:5b:45:fb:16:01:55:f0:23:
2c:5b:8b:07:52:bb:81:b0:7b:87:5d:9d:9c:6b:f3:c0:ef:ef:
5d:e6:39:e2:28:65:03:c3:88:b0:19:6c:62:e9:60:aa:8b:2b:
88:41:ae:9b:aa:e8:e6:b0:57:2d:4e:07:5d:09:2f:b7:6e:85:
a6:74:24:27:61:56:81:0a:30:0c:e5:09:cc:ec:e1:ef:0c:53:
26:91:74:09:18:3f:42:11:3a:0e:a9:e5:4a:e5:5e:57:13:32:
77:aa:57:c7:23:90:8c:39:15:83:26:ac:59:55:09:18:c6:15:
45:39:1d:27:eb:d2:66:af:58:e4:d7:e4:c0:5e:05:8b:17:5a:
54:bb:99:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:11:47 2026 by rpki-client