Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
File: 0CDxCDLEm61vFalgWMW6GFcqxSo.mft (raw, json)
Hash identifier: rrLcW1qJcoLo3OXQ3SVSPrPW4ZYIaXvPhyQAt3qEKIU=
Subject key identifier: 6A:D1:4A:FE:B8:37:8C:F6:07:D8:6F:84:C9:1B:CC:03:AC:4C:F6:83
Authority key identifier: D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A
Certificate issuer: /CN=d020f10832c49bad6f15a96058c5ba18572ac52a
Certificate serial: 019F924896E6CD890064FDD46EE79204E222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
Manifest number: 0D20
Signing time: Fri 24 Jul 2026 04:00:58 +0000
Manifest this update: Fri 24 Jul 2026 04:00:58 +0000
Manifest next update: Sat 25 Jul 2026 04:00:58 +0000
Files and hashes: 1: 0CDxCDLEm61vFalgWMW6GFcqxSo.crl (hash: 7XisCBF8RTl4RIr9kUyuBox/1EE3FOCD83nGm6nxkks=)
2: 7Qx48EmBn-OawWJSPpRThxXxGsw.roa (hash: vJn+IO3r8KyMcEh7oBKpoGl8tmbKCsu+EUXynkIKhkQ=)
3: lbl2pQkR5Gt2zpZZ9Jh22oLkisQ.roa (hash: x9+pd0aqdgxunGrrCWfBRzAZtvQjFOaQn2oOsjiZkVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:96:e6:cd:89:00:64:fd:d4:6e:e7:92:04:e2:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d020f10832c49bad6f15a96058c5ba18572ac52a
Validity
Not Before: Jul 24 04:00:58 2026 GMT
Not After : Jul 25 04:00:58 2026 GMT
Subject: CN=6ad14afeb8378cf607d86f84c91bcc03ac4cf683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:89:5f:37:25:32:43:8b:2e:61:ac:0d:68:86:
c0:8c:51:30:1b:b2:55:7a:57:30:d6:0d:d4:30:0c:
e4:b1:c7:d3:31:a5:15:0a:52:a0:0b:ac:85:38:a9:
23:ee:92:1d:fb:19:94:d8:a2:f4:2d:18:f0:df:54:
ac:f8:ad:ba:3d:6a:52:8a:4c:f2:e0:28:dc:3a:75:
6d:33:dc:73:fe:e3:5a:08:d2:f3:53:b7:b5:90:2b:
23:58:9e:15:df:28:e6:08:be:95:e2:07:80:a1:dc:
73:cd:fb:77:26:14:72:04:b0:0f:71:2f:42:99:3b:
85:e0:bc:fb:c2:f5:71:9c:a2:0a:c6:e6:c8:c9:3d:
74:c2:5d:4f:19:5a:f0:71:ab:20:ce:60:fd:da:3f:
84:de:80:4f:08:69:6c:99:d2:78:22:ce:a9:1d:8f:
3c:72:a1:c4:db:fd:17:18:a0:f9:3a:f2:74:5c:f5:
89:38:63:16:7e:88:20:9c:ea:32:33:e9:89:3f:f1:
36:dc:80:4a:a2:44:7b:10:0f:45:99:d9:6a:27:19:
fa:4a:81:3a:7f:dd:a8:45:5e:95:c3:b4:4c:be:61:
81:e8:94:06:7d:e2:5a:95:47:3b:1f:c2:bf:96:8c:
2f:2e:b8:8b:09:26:56:95:4a:81:a7:73:9f:b9:b2:
08:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D1:4A:FE:B8:37:8C:F6:07:D8:6F:84:C9:1B:CC:03:AC:4C:F6:83
X509v3 Authority Key Identifier:
keyid:D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:68:04:42:7e:1d:d7:90:04:7f:42:64:25:3e:b8:96:f3:12:
18:0f:22:ec:37:3b:85:85:50:40:31:a1:54:26:d8:04:ce:ce:
fa:f0:3a:df:a8:d5:45:99:c4:4e:bb:b5:2c:1f:b3:7c:c5:1d:
2a:86:72:7d:7f:d3:9c:a9:f8:4f:c8:f9:10:78:ca:82:66:af:
05:9d:64:ae:1d:d9:ff:a4:11:af:56:65:09:34:c0:68:3b:df:
af:e5:fa:3b:d3:a8:79:d0:f7:be:b8:07:ab:7f:a7:f3:11:03:
d8:b1:b8:8e:05:a1:83:47:ef:ba:cd:02:43:ba:99:28:6b:3e:
0a:f7:c6:28:93:f8:72:2f:91:c2:a7:43:69:0e:fe:b9:a5:8f:
09:78:18:cc:c3:dd:df:b6:c7:1e:0f:28:41:07:8c:87:52:94:
9b:6a:6c:0d:9b:68:29:d2:d0:67:4f:9b:a0:9f:04:0d:95:3a:
6d:6b:78:4d:d4:92:1b:de:93:96:94:a8:26:d7:6e:6f:25:79:
9b:75:98:7b:84:d0:98:04:f0:d4:c4:f5:9a:c5:f0:9e:ec:a2:
30:63:f8:61:ab:57:f0:8f:28:09:28:d7:34:55:02:0b:25:79:
4c:ed:b0:0b:0a:55:b8:61:5d:bc:fb:65:f8:66:b4:fd:4d:2b:
7e:38:af:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:46:08 2026 by rpki-client