Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
File: 0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft (raw, json)
Hash identifier: tfvrTu4UDug+QKcMO9Ce7Sa2ta5/jTI6Q/D3OIgEM3M=
Subject key identifier: 76:96:D5:13:19:58:E2:6F:1C:36:9B:64:BE:C1:FB:D7:46:53:00:91
Authority key identifier: D2:76:C4:1A:21:76:25:4F:23:6D:23:D3:91:FD:56:09:06:19:67:0D
Certificate issuer: /CN=d276c41a2176254f236d23d391fd56090619670d
Certificate serial: 019F905A87A69E8EECF8929F97D1456DA0C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
Manifest number: 04C4
Signing time: Thu 23 Jul 2026 19:01:19 +0000
Manifest this update: Thu 23 Jul 2026 19:01:19 +0000
Manifest next update: Fri 24 Jul 2026 19:01:19 +0000
Files and hashes: 1: 0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl (hash: QtvqLRsc9p4xEFZqp1xXN6LU4ASRb7vpq/iBJ4Z9HlM=)
2: W4cImxro0S1Oqpe5aOmc9Zk1to0.roa (hash: 2C5FiGId1eEcbsSAENT53ABjs4YVPjHtZepjzsteNl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:87:a6:9e:8e:ec:f8:92:9f:97:d1:45:6d:a0:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d276c41a2176254f236d23d391fd56090619670d
Validity
Not Before: Jul 23 19:01:19 2026 GMT
Not After : Jul 24 19:01:19 2026 GMT
Subject: CN=7696d5131958e26f1c369b64bec1fbd746530091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d6:ba:b5:31:14:ad:69:d9:f4:17:9d:3d:61:
fa:63:26:3c:90:46:70:78:42:87:16:2c:fb:90:72:
78:f7:52:2c:d2:b8:ff:2f:98:f6:f0:a7:1e:9c:48:
96:08:b7:0e:82:f1:93:7f:12:1a:7a:8b:4b:b5:b2:
0f:2a:59:f4:4d:e6:db:1d:8b:91:f2:c6:73:6a:5d:
6e:15:4c:bd:e9:01:e0:59:14:05:37:80:aa:92:28:
ec:d5:48:96:78:25:48:f9:b2:29:d3:31:33:43:97:
53:98:91:7f:dd:f6:cb:c0:f2:19:c9:95:3f:06:4d:
8e:16:31:71:66:e2:02:d2:63:e6:7b:d9:46:ae:20:
91:b3:4f:80:8c:ee:8e:b0:78:93:4f:99:06:47:76:
9d:9d:8b:cb:65:38:d4:3b:a6:70:68:85:78:8e:bf:
a6:b3:4b:ef:56:91:6a:ce:4e:ae:ed:21:46:6a:85:
c7:2e:7e:d2:78:db:25:56:6b:23:66:69:49:39:f4:
1d:18:7f:ec:47:d1:60:db:86:71:0d:bb:4e:db:96:
b4:91:e3:16:ee:43:f9:7b:3e:0f:a0:2f:c2:12:87:
6c:14:6d:10:5b:27:54:8a:7d:0e:63:12:26:16:37:
0a:ee:16:f2:cd:8e:89:12:c1:2d:17:fc:27:1c:50:
d5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:96:D5:13:19:58:E2:6F:1C:36:9B:64:BE:C1:FB:D7:46:53:00:91
X509v3 Authority Key Identifier:
keyid:D2:76:C4:1A:21:76:25:4F:23:6D:23:D3:91:FD:56:09:06:19:67:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:6d:04:e6:e8:45:d3:6c:56:49:09:5f:bc:ba:1d:72:84:ec:
b9:cc:5d:16:27:83:d1:5d:f4:2b:ca:f9:02:81:c9:79:1f:4c:
25:d1:ff:ec:8e:7c:fa:84:b5:e9:b7:eb:01:d7:99:25:c4:57:
73:80:32:5a:4f:41:2e:ad:b0:8b:1f:25:61:af:b9:ad:80:fa:
38:03:30:e0:be:c5:6e:ab:1a:46:a2:6e:a7:da:f5:f6:19:80:
11:c9:67:54:5f:61:9f:b6:74:f2:d2:08:fc:2e:5f:8c:bd:b4:
9f:b6:05:a4:af:15:83:a5:22:cd:35:e7:b5:15:6e:6d:dc:8b:
8e:dd:d3:4d:25:78:18:57:71:01:11:55:3b:40:7d:dd:ec:4e:
16:42:8c:c0:4e:9e:cf:5a:d0:8f:3f:f3:d0:0b:1a:4c:bb:96:
17:d4:a7:3f:50:1e:76:7e:52:92:7f:61:9a:64:5e:df:23:17:
6b:f3:6a:a6:0f:dc:ac:9f:0d:96:cf:c9:90:be:31:39:52:75:
7e:4e:60:65:8c:c1:88:4c:67:a0:57:f7:82:8b:5d:2f:9b:d0:
5e:23:17:21:94:b8:35:96:bd:30:29:67:08:9a:c0:41:38:bf:
0c:8e:92:ab:0c:d2:6d:c3:58:07:da:e1:98:06:09:f3:07:37:
e2:2f:a7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:39:21 2026 by rpki-client