Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
File: 0PbNMLTPoZPiJrupKC42aiKjEQ8.mft (raw, json)
Hash identifier: ll1HWn1it7qQYGU1nnl9EL46lNkGgKQRkx9L3pjUjkY=
Subject key identifier: 4C:CE:32:D4:67:54:71:25:A8:B4:88:8B:23:A7:EA:42:B8:BA:55:3A
Authority key identifier: D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
Certificate issuer: /CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Certificate serial: 019F905A4C0A3B36A9F9598825FA75278B7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 19:01:04 +0000
Manifest this update: Thu 23 Jul 2026 19:01:04 +0000
Manifest next update: Fri 24 Jul 2026 19:01:04 +0000
Files and hashes: 1: 0PbNMLTPoZPiJrupKC42aiKjEQ8.crl (hash: TVaHLDHPlIsWBIoiUUZyx0TU7HlwOB1u/q5IkjFg8AQ=)
2: 0g907WBXD4qZBS5Lv--lVG4AGmY.roa (hash: ADx0uWHqRsIMIEM4zrRsIaFkNMUykkO7aZ3mKfDHgOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:4c:0a:3b:36:a9:f9:59:88:25:fa:75:27:8b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Validity
Not Before: Jul 23 19:01:04 2026 GMT
Not After : Jul 24 19:01:04 2026 GMT
Subject: CN=4cce32d467547125a8b4888b23a7ea42b8ba553a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:04:54:e3:1c:ad:8c:ca:a8:33:d8:f6:8a:70:
da:d6:b3:b3:68:da:10:24:a9:65:de:5d:42:bc:0c:
f9:62:cb:e0:c9:31:5b:80:7a:87:88:5b:5f:4d:5b:
9e:13:31:f3:1a:0f:a2:61:5f:c0:56:b7:31:dd:85:
c0:2f:aa:c7:73:44:1c:0b:c3:10:1d:b2:e3:2d:ba:
5e:37:f9:86:a6:6d:8e:1b:50:a2:ca:3c:89:8d:7b:
68:01:7a:c1:2a:1a:5e:0b:81:25:44:8d:a7:d3:ac:
04:7d:28:49:70:31:b1:5f:3e:e5:ec:7d:c0:4c:72:
de:53:b6:8d:0b:c0:40:f9:29:fe:64:57:d6:33:63:
4f:0e:ce:2a:ae:60:58:90:ac:ca:fb:de:e7:41:91:
64:61:58:ae:a6:56:d0:92:63:93:e8:b9:b3:35:f5:
72:47:56:c4:68:b5:d3:50:32:51:9a:f0:76:cf:55:
ee:a3:8f:b3:4e:c6:df:68:db:e2:c7:91:6e:bf:cc:
96:dd:5b:8e:84:e2:04:50:c8:29:6a:7a:7f:e7:48:
e0:df:74:16:f5:17:1e:bc:a0:22:89:83:5d:16:45:
84:2b:55:22:b1:36:f3:1d:47:7f:fe:95:13:b0:95:
aa:cd:63:54:b2:a6:37:55:f8:8f:f7:ac:d9:41:3f:
32:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CE:32:D4:67:54:71:25:A8:B4:88:8B:23:A7:EA:42:B8:BA:55:3A
X509v3 Authority Key Identifier:
keyid:D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:1c:90:e8:2c:3f:fd:69:59:a3:2c:f9:8d:b1:cb:e0:e6:9f:
7a:a8:93:72:b5:57:de:b8:6a:66:cc:44:57:d0:c3:ae:5e:f4:
f5:2b:69:93:78:f2:81:48:a5:06:d6:cd:52:20:a9:57:08:85:
7c:aa:f8:a6:95:3a:9f:d9:81:64:9c:48:fc:b7:e1:ef:47:17:
da:d8:03:bc:d8:ac:e0:65:1e:5e:64:a5:9a:ac:19:6b:6c:5c:
47:43:6b:a5:16:fc:96:5e:45:ab:d5:b6:f3:f2:e4:d3:08:55:
83:77:db:6f:1c:74:61:22:f4:e3:b4:26:3b:79:54:d3:c5:ca:
3a:90:1e:9f:9f:a9:e1:bc:08:a8:da:44:74:25:53:58:63:4b:
9e:f8:8d:16:34:83:11:f0:a1:ca:ae:2b:2f:69:21:35:1d:3d:
99:41:14:f2:1f:84:b9:29:69:89:f6:36:87:2e:6b:15:78:32:
df:09:46:6b:53:eb:e0:c3:ab:da:d5:ea:1f:62:ff:32:71:87:
e2:2d:c8:b7:cc:28:ae:cd:df:4a:d2:03:e1:7c:18:81:19:76:
7b:ee:2b:0d:17:4d:58:15:61:2f:40:ea:3b:e3:0d:bb:34:64:
b9:af:f2:2b:02:f0:44:07:97:1f:0d:c1:cf:8c:2b:f5:cd:9c:
8f:3f:f4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:14:20 2026 by rpki-client