Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
File: 0bvzaAza5sJnqY0D0I9rI9DtHUY.mft (raw, json)
Hash identifier: QWu5ezyHA5wfLWxGtR2+r5depXriwShGvpY5CexnNNk=
Subject key identifier: 32:D6:98:19:24:C9:C9:C1:9D:91:E8:E1:03:FA:8A:2F:82:16:57:EB
Authority key identifier: D1:BB:F3:68:0C:DA:E6:C2:67:A9:8D:03:D0:8F:6B:23:D0:ED:1D:46
Certificate issuer: /CN=d1bbf3680cdae6c267a98d03d08f6b23d0ed1d46
Certificate serial: 019F91DB038615766F00B1B6CC08B6F09C66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 02:01:17 +0000
Manifest this update: Fri 24 Jul 2026 02:01:17 +0000
Manifest next update: Sat 25 Jul 2026 02:01:17 +0000
Files and hashes: 1: 0bvzaAza5sJnqY0D0I9rI9DtHUY.crl (hash: Esyb4Vq/wopNuUHqXcwOuEfLdp59L8+aWBgALxVP5HU=)
2: 7Se3cx4TBdWjHAwq4txVyQrcrpQ.roa (hash: qn754SyayB45Cx33yiucDcB81nUdDdHn60qsbH3DxoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:03:86:15:76:6f:00:b1:b6:cc:08:b6:f0:9c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1bbf3680cdae6c267a98d03d08f6b23d0ed1d46
Validity
Not Before: Jul 24 02:01:17 2026 GMT
Not After : Jul 25 02:01:17 2026 GMT
Subject: CN=32d6981924c9c9c19d91e8e103fa8a2f821657eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2c:3b:6c:92:76:9d:0d:37:68:96:e4:88:cb:
95:5b:11:b1:b8:92:73:73:9a:27:4d:17:cd:a7:8a:
f9:a6:c4:ff:dd:f0:60:8a:29:14:06:0c:49:3c:f1:
03:8e:0e:b8:d7:8b:08:73:69:0e:08:1b:6c:60:cc:
7a:5d:4f:13:f7:40:e2:4e:9f:88:fe:0f:67:65:5e:
2a:a1:6d:b1:a2:5e:d7:72:c0:5f:81:64:38:f6:ad:
47:f7:95:a4:1e:f4:7e:bf:92:89:37:20:7c:5a:ca:
a0:d0:63:75:be:0c:d8:8b:e8:84:09:05:40:cc:30:
99:ad:ea:c5:99:19:04:50:b1:0a:79:c7:d3:55:a6:
f5:64:3d:8a:f0:68:16:66:cd:3a:78:7b:4b:bf:7d:
03:3e:81:da:e5:22:7f:85:a8:d9:d8:d8:c7:dd:43:
92:64:da:f4:4f:a0:ad:f4:db:65:8f:13:3b:6a:a1:
c2:67:26:1f:ad:b7:2e:86:58:07:4d:19:ce:c5:f2:
33:9c:99:3c:07:45:30:6c:cd:20:2a:12:ea:3e:e8:
09:5e:b6:60:01:79:cd:08:db:92:32:ae:84:ca:9b:
bd:b8:ba:8f:ff:8c:6a:e4:f3:9f:e3:ec:72:49:a7:
32:ec:ad:f4:ec:94:0f:53:0c:83:25:c1:e3:e8:2e:
0e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D6:98:19:24:C9:C9:C1:9D:91:E8:E1:03:FA:8A:2F:82:16:57:EB
X509v3 Authority Key Identifier:
keyid:D1:BB:F3:68:0C:DA:E6:C2:67:A9:8D:03:D0:8F:6B:23:D0:ED:1D:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:5d:95:c6:ab:93:3f:44:1e:a3:a6:2b:a4:85:29:88:cf:03:
fd:49:13:0f:d4:2b:1d:f6:52:42:8d:60:0d:7d:e7:fc:13:dc:
0f:43:0e:3f:44:15:ca:7d:8b:ca:35:81:b7:75:a4:2e:0d:e6:
cd:e7:80:7a:29:fe:0f:98:a7:28:9d:92:75:72:59:3c:f6:80:
bb:f5:9f:2d:99:81:b4:12:d0:5c:54:16:fd:66:f8:f8:45:e6:
9b:41:41:8e:0c:2e:75:b0:57:3f:bb:18:59:f7:e4:91:af:5d:
73:86:0e:46:63:81:c8:09:3e:db:36:e4:5e:36:ca:12:16:30:
30:be:22:dc:b6:7a:97:e9:af:6d:6d:88:c0:8c:93:fb:7c:bd:
1f:a0:14:c5:a2:d9:8f:35:57:b3:19:51:b4:73:b8:28:88:75:
64:b0:c3:64:6b:22:d9:47:ea:27:bf:db:f7:07:6c:94:50:a9:
4f:b6:cd:54:6f:28:52:52:76:f0:4b:a2:24:04:75:25:47:6b:
de:df:38:4d:54:80:d5:b5:94:46:71:c7:c6:f5:7a:45:ac:5c:
00:0d:a1:dd:a3:d8:21:fe:c1:30:02:76:a1:bd:a5:ff:58:bd:
70:64:39:a6:8f:14:95:78:df:dd:9b:f2:76:53:a1:dc:36:89:
90:eb:3d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:30:53 2026 by rpki-client