Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/0kLjA3tgiO5t6UhiWWiT5uupT78.mft
File: 0kLjA3tgiO5t6UhiWWiT5uupT78.mft (raw, json)
Hash identifier: IfC8zxAgK0uoqcnZIMuf4qE/by2fcmHkrN9DstJOcAY=
Subject key identifier: 4A:42:D1:28:82:8C:1E:C7:FE:FB:1F:F0:A9:89:BC:26:9F:A0:00:16
Authority key identifier: D2:42:E3:03:7B:60:88:EE:6D:E9:48:62:59:68:93:E6:EB:A9:4F:BF
Certificate issuer: /CN=d242e3037b6088ee6de94862596893e6eba94fbf
Certificate serial: 019F8F7F5D7E2A95A42BACAA9BB23ED9A05B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kLjA3tgiO5t6UhiWWiT5uupT78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/0kLjA3tgiO5t6UhiWWiT5uupT78.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:56 +0000
Manifest this update: Thu 23 Jul 2026 15:01:56 +0000
Manifest next update: Fri 24 Jul 2026 15:01:56 +0000
Files and hashes: 1: 0kLjA3tgiO5t6UhiWWiT5uupT78.crl (hash: Pi9H4eGuROauAdgy89ec3OyGU34KDzUX3UM6tDPbcI4=)
2: BeW6fNTmqXgR5pM9jh3vGj3b64A.roa (hash: IkKehMA98jcUqaZ277fk0SXWhXVAaXeBHuf7iTvYGmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/0kLjA3tgiO5t6UhiWWiT5uupT78.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/0kLjA3tgiO5t6UhiWWiT5uupT78.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kLjA3tgiO5t6UhiWWiT5uupT78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:5d:7e:2a:95:a4:2b:ac:aa:9b:b2:3e:d9:a0:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d242e3037b6088ee6de94862596893e6eba94fbf
Validity
Not Before: Jul 23 15:01:56 2026 GMT
Not After : Jul 24 15:01:56 2026 GMT
Subject: CN=4a42d128828c1ec7fefb1ff0a989bc269fa00016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:23:bd:2d:52:72:1c:22:cc:82:ba:53:85:32:
e8:ef:a4:ff:f6:07:ae:7e:b1:ff:7a:79:ad:8c:0d:
1d:72:5b:c4:ca:59:18:6b:33:c1:04:d1:b5:05:f7:
3c:44:9f:72:8c:f6:b4:7b:1a:11:79:70:60:5a:c7:
b3:87:89:9f:30:6d:62:c8:5b:1f:10:40:82:9a:f4:
56:3b:fa:cd:30:3c:85:e8:a2:e3:ae:6b:1d:4c:2f:
3e:29:42:11:33:2d:9e:42:6a:72:fd:56:b2:6e:fa:
88:86:cb:45:6e:34:7a:ae:80:42:21:66:c9:a8:e3:
7c:1e:bb:a7:ae:5e:0a:1d:fe:57:32:ca:f1:20:b1:
9a:cc:0c:cd:29:af:09:e9:bb:0a:e4:55:93:e5:4c:
6a:06:db:63:73:5a:6a:a8:38:08:64:91:41:08:8d:
8d:cf:f7:10:16:4e:dd:57:03:7f:0d:bb:f2:94:e4:
53:76:2e:9a:c5:ff:3e:51:46:2a:9d:5f:7c:3a:a8:
43:67:3b:17:3e:66:05:e8:77:33:9b:66:25:92:70:
90:ae:d8:4b:58:8b:cf:64:54:83:03:34:e1:0d:cb:
71:1b:bb:83:8b:b5:ac:ea:94:37:21:0d:64:00:db:
7b:26:68:42:b0:aa:f3:e8:89:61:f5:bf:f6:00:e0:
a7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:42:D1:28:82:8C:1E:C7:FE:FB:1F:F0:A9:89:BC:26:9F:A0:00:16
X509v3 Authority Key Identifier:
keyid:D2:42:E3:03:7B:60:88:EE:6D:E9:48:62:59:68:93:E6:EB:A9:4F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kLjA3tgiO5t6UhiWWiT5uupT78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/0kLjA3tgiO5t6UhiWWiT5uupT78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/0kLjA3tgiO5t6UhiWWiT5uupT78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:8d:86:36:2a:21:64:e3:1f:c8:a4:7f:e8:8a:6c:36:84:ad:
3c:c3:f9:c4:6c:3a:74:55:7e:3b:63:00:a4:0f:bc:99:41:22:
67:79:ca:73:9d:aa:68:d2:f4:80:87:a8:14:f3:8f:77:61:69:
d1:ad:aa:77:62:e9:3e:cd:5c:a2:9c:06:58:59:bf:fb:da:7e:
d5:66:d2:1d:33:c1:67:a5:2a:46:5b:ad:14:06:bd:71:34:f5:
f3:65:f5:36:a1:55:f2:9c:b6:48:2b:8d:2a:52:0a:ff:d5:5b:
b9:3f:df:14:64:3a:05:fb:d1:fe:e1:45:04:ae:8d:62:41:1f:
26:d4:4b:85:b0:19:74:a1:37:62:50:73:b6:6d:13:26:95:21:
ff:19:62:be:e2:b5:97:e1:18:4e:ae:11:01:bc:cc:07:a8:0e:
23:1c:76:5d:e3:3e:e0:4f:dc:cc:4c:25:11:94:ca:34:35:da:
3a:6e:c0:e4:08:0d:b2:5c:5f:07:00:f0:d6:47:9f:11:d1:e3:
95:ce:64:33:5f:5c:e6:58:4f:5e:10:00:63:2e:3f:e3:25:00:
61:40:f5:1f:8b:a7:c4:4f:6d:92:e3:6d:c4:a1:17:22:b4:3a:
c2:8c:aa:2f:75:b8:c7:6e:90:4b:73:9b:ce:47:4d:d8:39:1e:
84:55:2f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:32 2026 by rpki-client