Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
File: 0_-XSe4i8Akle4nYNAzGT7QL_JE.mft (raw, json)
Hash identifier: nSPq6OwKbjucluDaIrxt/QX6SEQ1v3NiOKkK1vSLlLI=
Subject key identifier: DF:35:A5:C6:78:5C:30:F8:C9:B5:84:ED:E0:98:6D:0A:E7:56:E3:C2
Authority key identifier: D3:FF:97:49:EE:22:F0:09:25:7B:89:D8:34:0C:C6:4F:B4:0B:FC:91
Certificate issuer: /CN=d3ff9749ee22f009257b89d8340cc64fb40bfc91
Certificate serial: 019F90234CB0C444988BA7E24D4EA8B9CFA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
Manifest number: 05A1
Signing time: Thu 23 Jul 2026 18:01:00 +0000
Manifest this update: Thu 23 Jul 2026 18:01:00 +0000
Manifest next update: Fri 24 Jul 2026 18:01:00 +0000
Files and hashes: 1: 0_-XSe4i8Akle4nYNAzGT7QL_JE.crl (hash: HigqN1J9+sML6K/M/P3EDvMZoEw2Jra7bWMPDJpdLYs=)
2: PBcKVUNT6cnzq3vzaBEo4gtl5Z8.roa (hash: HYfjlIXaOozI/rCMC4UWmLkpHij9kD07KSE4H24zW7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:4c:b0:c4:44:98:8b:a7:e2:4d:4e:a8:b9:cf:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3ff9749ee22f009257b89d8340cc64fb40bfc91
Validity
Not Before: Jul 23 18:01:00 2026 GMT
Not After : Jul 24 18:01:00 2026 GMT
Subject: CN=df35a5c6785c30f8c9b584ede0986d0ae756e3c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:ac:27:80:43:52:68:b7:aa:33:ac:a7:cd:92:
76:76:6a:a3:ff:78:ee:62:6e:26:d8:1d:d7:c5:f1:
bb:0c:56:08:dc:4d:60:22:23:65:93:c5:88:8b:44:
84:90:04:81:eb:05:77:9b:43:ee:c2:79:b4:29:6c:
be:32:38:60:1f:39:1e:cb:8a:7f:87:07:77:cb:fe:
7e:97:9d:10:f9:c2:ba:a0:91:c1:ae:72:97:ee:35:
41:eb:81:c2:85:b9:be:1b:dc:18:be:f3:0d:67:5e:
0e:9a:4b:74:f5:42:c4:b1:ee:37:4b:dc:d2:15:53:
92:90:d4:1a:88:fc:53:aa:17:79:c7:13:e3:75:e7:
cd:97:00:8a:92:63:8d:80:a3:92:44:6a:9e:e6:8c:
f6:b2:ae:6f:20:02:e8:ab:39:c5:6d:2b:a9:92:b5:
5e:d1:06:d5:69:ff:81:41:b9:1d:40:8b:48:3e:8e:
83:d3:89:d2:6d:a8:94:c2:d9:05:d7:14:75:bd:bd:
b9:ae:c3:26:7a:43:e9:db:b3:58:e9:cb:3d:13:ca:
c0:16:42:62:a4:82:db:07:b8:03:f8:fc:aa:4e:f3:
5c:50:7a:e9:9a:50:4c:d6:48:e1:0d:6b:47:58:5a:
81:0a:0f:13:f5:38:7b:55:22:91:74:61:bb:21:08:
50:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:35:A5:C6:78:5C:30:F8:C9:B5:84:ED:E0:98:6D:0A:E7:56:E3:C2
X509v3 Authority Key Identifier:
keyid:D3:FF:97:49:EE:22:F0:09:25:7B:89:D8:34:0C:C6:4F:B4:0B:FC:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:38:09:89:4f:73:f3:0d:80:17:b2:ea:87:e8:8f:6f:52:a8:
03:80:72:a6:f7:6a:46:19:f6:cf:f5:5b:02:fc:44:c2:4d:6b:
7a:0f:7f:f7:40:a8:00:cb:7a:82:da:44:4b:cb:63:f8:e3:5e:
45:a1:4f:30:e3:20:d9:d5:63:ac:1d:2e:32:af:2b:5b:cd:da:
fd:e0:5c:7d:d1:9f:4c:2e:0a:96:2e:26:93:70:a4:94:d9:88:
1f:1d:e4:81:34:6d:19:19:9b:f5:95:e2:c9:58:ee:aa:23:3e:
70:51:22:d8:b8:88:2b:b5:8e:2a:23:7a:8e:8d:97:5b:09:f6:
53:58:3d:19:b4:e8:58:f4:04:8d:70:ea:30:e9:26:58:61:75:
93:4d:00:ca:a1:d2:13:bb:cb:da:9b:09:8b:dc:b3:39:1c:ce:
67:d4:49:a9:aa:36:98:60:19:36:c6:8c:c8:fc:cb:12:43:65:
59:cb:4c:80:34:f0:27:3c:93:ad:88:ee:76:2b:a9:af:e5:95:
0e:2e:b3:89:e0:75:df:a3:7e:5f:23:b9:49:63:4c:95:0f:c6:
84:6a:06:62:58:dc:f6:4b:5e:98:b7:84:e2:3a:f9:e1:19:c0:
f8:c4:36:f1:f4:d2:d0:7c:85:1e:7e:d4:80:10:c0:97:94:bf:
66:21:61:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:52:24 2026 by rpki-client