Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
File: do0jVpP2hnxbOBPaHzb-EHvR14I.mft (raw, json)
Hash identifier: MwOY0+EIrFHNPBlPnNp05o0r5ZrwsZtRI7FaL08ooSA=
Subject key identifier: D8:CA:AC:C4:A5:5F:AE:56:F1:F8:E4:0C:51:85:40:EF:2C:A9:CE:A7
Authority key identifier: 76:8D:23:56:93:F6:86:7C:5B:38:13:DA:1F:36:FE:10:7B:D1:D7:82
Certificate issuer: /CN=768d235693f6867c5b3813da1f36fe107bd1d782
Certificate serial: 019F9392572468E7AED085281973744AC781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
Manifest number: 109F
Signing time: Fri 24 Jul 2026 10:01:09 +0000
Manifest this update: Fri 24 Jul 2026 10:01:09 +0000
Manifest next update: Sat 25 Jul 2026 10:01:09 +0000
Files and hashes: 1: KuefoOzdZ9vrXjVoaWqLBNOd8Fc.roa (hash: Tr2+OxM2L2vZYYtrtzp3JmsEgxHYlAlF0KBqV8P0L1o=)
2: do0jVpP2hnxbOBPaHzb-EHvR14I.crl (hash: jA8VgTDDAiH3mNpYLKd5/TOH5eppCqmtJ8y+Iy/B8ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:57:24:68:e7:ae:d0:85:28:19:73:74:4a:c7:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=768d235693f6867c5b3813da1f36fe107bd1d782
Validity
Not Before: Jul 24 10:01:09 2026 GMT
Not After : Jul 25 10:01:09 2026 GMT
Subject: CN=d8caacc4a55fae56f1f8e40c518540ef2ca9cea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0d:8a:02:da:05:68:e0:c3:5c:a2:5b:07:02:
fb:18:ea:01:b0:1b:e8:bc:b5:e5:58:c7:f8:88:06:
af:f4:84:72:d7:87:20:01:4c:16:ab:52:0d:f7:0f:
5b:a9:f8:62:00:c9:81:23:d8:b9:a6:19:ef:2a:6e:
85:06:ee:ea:0d:56:03:15:03:82:ab:e2:01:52:fa:
7b:c2:20:45:49:4a:99:d7:0b:b9:5e:73:2d:83:eb:
66:bc:b9:f9:56:de:1d:26:f1:e4:f8:7f:27:eb:09:
e8:3b:3b:7f:fd:90:c6:e8:be:6f:ed:f2:f1:49:a4:
28:b8:56:c7:d9:6b:5e:a3:5e:2b:6e:5a:6c:4f:e3:
69:dd:09:d5:d5:47:8d:89:29:b0:14:21:05:af:1f:
c6:3b:35:0a:b4:4a:51:c0:1c:23:4a:fa:7d:e0:d7:
13:42:3f:f7:21:a4:f5:b8:0f:79:a3:ea:6b:29:50:
ff:d0:a9:4b:82:0b:cc:89:ad:6d:ea:ec:41:b6:53:
3a:00:84:b1:ba:a1:e3:9d:ff:fa:f8:47:ba:e7:18:
ce:b8:75:d4:2e:59:47:2f:8d:90:81:99:e3:8a:df:
77:e9:f8:b4:d2:7a:63:d2:f7:a2:c9:cc:6e:03:8c:
85:f0:91:ec:07:56:e1:62:cd:7f:1f:19:c6:6d:7d:
0b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CA:AC:C4:A5:5F:AE:56:F1:F8:E4:0C:51:85:40:EF:2C:A9:CE:A7
X509v3 Authority Key Identifier:
keyid:76:8D:23:56:93:F6:86:7C:5B:38:13:DA:1F:36:FE:10:7B:D1:D7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:1d:62:32:24:d1:fe:36:03:40:cd:c5:f1:72:37:50:fe:66:
b1:b3:ce:75:ed:0f:90:66:1c:a5:bf:34:b4:c2:47:21:8c:37:
25:93:d2:0d:c2:26:a6:dd:e3:03:a5:fc:0c:60:e0:4e:2a:26:
c6:0c:74:d9:9c:50:9d:c5:ce:60:c0:a0:db:8e:39:37:b7:0f:
b1:97:65:5f:7e:37:5b:27:bf:f3:9e:85:61:07:18:f9:5e:64:
3a:0a:ed:36:cc:27:e1:f8:a6:9e:8f:48:72:27:03:a2:40:a3:
1c:b6:53:bf:e5:37:a8:d4:ff:8c:2a:07:a3:da:a5:b8:73:0d:
a6:e4:1f:3a:6a:ef:cf:80:b7:71:ce:3b:4d:b7:35:61:66:89:
38:b8:8a:42:1f:cb:90:06:2c:04:3a:78:b9:79:e8:14:f5:44:
7b:b9:4e:02:a6:75:44:7a:d0:1e:2e:ce:94:f8:ac:89:d4:2f:
e7:4b:81:a4:a6:19:1c:9f:15:c2:dd:7f:23:89:e4:3a:1f:97:
db:fa:0c:76:20:42:72:13:c8:55:bc:cf:4b:c7:4a:93:41:e8:
4e:53:ba:44:83:a7:12:5b:ec:e2:e0:34:39:d3:c6:b5:e7:97:
29:36:35:06:a0:30:ae:98:1b:f9:42:8a:8b:14:61:3d:61:2d:
9a:3d:f1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:52:53 2026 by rpki-client