Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
File: 0lgUed7jtZlPEcnZVkYxv1pATAc.mft (raw, json)
Hash identifier: 5MB5OTE7egV7rkw3XMcE/UTQr8bTQafgmeViawABg2A=
Subject key identifier: 2A:6B:45:48:77:A8:57:57:BF:8E:60:4F:27:AE:0A:D2:3B:D7:7F:FF
Authority key identifier: D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
Certificate issuer: /CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Certificate serial: 019F9059F6EBC4F25852AA852D13A3F32329
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
Manifest number: 0AD3
Signing time: Thu 23 Jul 2026 19:00:42 +0000
Manifest this update: Thu 23 Jul 2026 19:00:42 +0000
Manifest next update: Fri 24 Jul 2026 19:00:42 +0000
Files and hashes: 1: 0lgUed7jtZlPEcnZVkYxv1pATAc.crl (hash: yf5J2S7d21A9Oi5gwnBCcxV/NqiEaaM7bgQ27unk+oU=)
2: _anBuNNw0qAbfJJyR7NUzCXshEI.roa (hash: u/OzH4PvqgIz0IcQamVppLorgGwznO76WkLllc9zkBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:f6:eb:c4:f2:58:52:aa:85:2d:13:a3:f3:23:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Validity
Not Before: Jul 23 19:00:42 2026 GMT
Not After : Jul 24 19:00:42 2026 GMT
Subject: CN=2a6b454877a85757bf8e604f27ae0ad23bd77fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:94:73:88:79:e1:b8:da:d0:72:6b:77:00:51:
a1:d3:98:e3:dd:ba:99:b3:76:88:f4:a3:24:ad:6a:
3c:42:8f:f5:89:ef:ea:44:8a:bd:50:59:69:fa:65:
56:c2:d8:90:4e:d6:72:c0:e1:39:44:ba:6b:62:98:
fb:ff:a9:f1:c9:1e:0b:3a:4d:63:4a:d5:c6:71:6a:
28:61:18:3d:51:1a:c6:41:b0:b3:7a:7e:0f:62:c3:
27:1a:a1:9f:f3:87:c9:9b:7e:c3:80:0f:8f:8d:f6:
c4:a7:45:91:50:b5:94:69:38:00:3b:f4:0a:e1:50:
48:ba:09:45:3d:29:e0:ea:74:d5:84:30:98:ac:4a:
27:22:ad:6e:90:92:3c:62:b6:46:d3:a0:a1:8a:d6:
7b:ce:bb:ad:0b:b6:9d:01:28:30:f0:8b:09:a1:3a:
86:70:65:8d:e4:aa:4a:1f:1d:c8:39:39:4b:3d:f5:
77:29:2b:cd:b8:0c:e9:e9:14:17:97:80:43:3e:98:
83:85:d8:47:12:0a:44:72:a5:77:06:ad:f9:b5:65:
7a:33:6d:d8:7c:38:e2:b4:04:e6:f2:74:63:51:2b:
39:d0:e7:01:52:42:a7:5b:3f:38:e0:a3:29:be:71:
67:cc:c5:9d:32:92:f8:50:2c:ab:d5:0d:2e:e4:44:
ad:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6B:45:48:77:A8:57:57:BF:8E:60:4F:27:AE:0A:D2:3B:D7:7F:FF
X509v3 Authority Key Identifier:
keyid:D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:15:eb:34:48:41:7c:63:07:74:31:76:e2:74:2c:57:65:49:
b0:8d:91:f6:9f:93:35:5b:1f:aa:29:10:70:95:35:45:70:e5:
bd:33:3a:5d:83:9a:81:16:a3:43:3d:a7:76:d7:3b:94:70:ef:
b4:ae:23:1f:89:cf:83:6b:d8:d1:51:d2:50:49:b3:cd:e7:ae:
02:3c:a4:57:b9:36:dd:db:03:c3:f8:1f:01:fc:09:50:0e:7a:
41:c1:6b:6d:10:5b:2c:c1:8c:51:cf:07:6d:1c:5e:ef:bc:df:
8f:ef:d7:f0:2b:04:18:78:1d:d5:e1:dc:85:b4:89:71:1c:bf:
16:ba:cd:2d:87:a5:0a:ea:f3:c3:44:b1:72:e8:f0:f1:ba:11:
d4:a0:9b:41:e3:b2:4b:da:0a:3f:7b:16:00:b0:ad:25:b9:55:
99:b7:bd:68:e2:4b:50:82:7f:1b:41:bb:47:d8:e9:bc:ec:3d:
12:fb:73:a2:7c:59:98:9d:b4:1b:57:2c:d8:71:fe:b0:cf:b0:
e7:99:a4:98:88:00:f8:f9:00:12:8b:0a:a7:e7:db:00:12:65:
fc:03:de:ae:39:1e:87:45:ac:49:8b:22:eb:5a:20:2f:dc:90:
01:79:45:14:9c:9b:5c:29:e5:6f:4f:77:0e:57:87:9a:bb:f4:
27:4e:27:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:31:32 2026 by rpki-client