Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft
File: 0krezYS7F0i9NbmezqRncuAeyTU.mft (raw, json)
Hash identifier: srZ0zOYHaV6gUd6QEljSKI8IIYFIr2DuqNI2pQFJr18=
Subject key identifier: B8:2D:6F:8A:EE:16:B9:E3:32:03:8F:A6:61:A0:9B:B2:64:37:81:91
Authority key identifier: D2:4A:DE:CD:84:BB:17:48:BD:35:B9:9E:CE:A4:67:72:E0:1E:C9:35
Certificate issuer: /CN=d24adecd84bb1748bd35b99ecea46772e01ec935
Certificate serial: 019F905A42C513FD12EFF4066E0DB26DA388
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft
Manifest number: 19C9
Signing time: Thu 23 Jul 2026 19:01:02 +0000
Manifest this update: Thu 23 Jul 2026 19:01:02 +0000
Manifest next update: Fri 24 Jul 2026 19:01:02 +0000
Files and hashes: 1: 0krezYS7F0i9NbmezqRncuAeyTU.crl (hash: PpTOeIGS370ui7MX2l6+zCDRLwSMp6AeMf4eaFK7kJk=)
2: THoFRGj7we5B4orPSAEMrZc2v9I.roa (hash: nx8ZhN2tRi/Vu5vUK7/jsnnIAjWNN0LM5ZVA5cvmy60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:42:c5:13:fd:12:ef:f4:06:6e:0d:b2:6d:a3:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24adecd84bb1748bd35b99ecea46772e01ec935
Validity
Not Before: Jul 23 19:01:02 2026 GMT
Not After : Jul 24 19:01:02 2026 GMT
Subject: CN=b82d6f8aee16b9e332038fa661a09bb264378191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:73:5d:31:50:18:27:6b:91:bd:1f:6c:7e:c1:
7b:81:b9:a9:d5:3d:34:3a:d7:74:88:e9:de:34:a4:
96:c8:95:be:3c:23:fb:05:61:5c:9b:b5:e5:55:42:
97:74:99:e8:df:31:d9:f0:6e:89:e3:84:50:f4:c2:
c1:c4:01:87:62:01:97:3d:db:35:d6:ca:23:eb:3d:
2e:c2:a4:1e:48:4d:90:fa:3e:56:71:f2:96:ab:3a:
4b:80:1a:96:dd:c5:5d:7f:d8:81:19:dc:98:27:e0:
c5:98:fe:c9:3d:2f:24:2a:1d:8b:22:c5:0f:7b:97:
16:0c:1c:fe:d7:d2:19:e1:bc:ed:d7:6f:1c:71:25:
d4:6e:df:ab:30:0d:93:3c:a9:fd:d7:76:ac:0a:38:
ca:b4:a5:1c:3b:8f:6e:0e:cb:5a:4d:ec:10:73:c6:
73:47:a4:4d:ef:74:c4:02:43:4b:e0:2c:1c:11:97:
80:10:7c:7c:55:b2:ce:74:38:82:f9:89:d4:2f:22:
14:a8:ad:93:87:2f:7b:89:bd:3d:63:4d:72:23:17:
8d:5b:4c:b8:90:22:40:2b:df:8b:a7:c4:48:9d:97:
0b:70:61:19:5e:ed:ed:eb:38:80:12:c6:06:2f:84:
66:ba:67:b9:a0:80:83:a7:e9:bc:f2:6f:41:cc:b4:
c0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2D:6F:8A:EE:16:B9:E3:32:03:8F:A6:61:A0:9B:B2:64:37:81:91
X509v3 Authority Key Identifier:
keyid:D2:4A:DE:CD:84:BB:17:48:BD:35:B9:9E:CE:A4:67:72:E0:1E:C9:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:9c:58:77:fb:de:53:f4:59:bd:35:b3:e7:73:2b:62:29:44:
f9:af:38:a3:bf:ab:56:9c:49:ed:4a:d1:ef:9f:41:68:70:e9:
60:85:d8:67:7b:3e:34:ff:14:de:91:bd:17:38:4f:e1:79:57:
ee:c5:d7:5f:c1:4a:4a:a4:8a:f9:e4:1c:2d:fe:92:f4:5a:4f:
66:88:50:2e:e6:e8:83:68:1a:6a:f5:d5:e0:d5:e8:87:c2:3b:
c7:58:cb:12:ce:5d:d8:05:20:40:20:1f:c3:8e:48:75:63:3e:
db:76:0c:40:ed:64:56:70:1c:5a:5d:71:65:1a:d9:db:ed:c0:
7b:1b:f3:dd:ef:76:74:bb:ec:be:9b:2a:b9:0d:2c:4c:4b:ca:
d3:f9:c6:05:8b:39:db:9c:60:a2:30:ae:05:13:5f:70:bf:8a:
2e:d1:3f:f2:b7:16:98:a5:2d:fa:f7:c1:71:7f:71:5c:81:26:
d2:6c:fb:65:66:2e:43:1c:66:c9:a1:c7:e6:52:e2:d1:80:6a:
c3:2b:d7:73:e7:cb:6f:7f:ea:0e:fd:7e:e6:a0:37:ed:8e:4b:
53:ad:d4:74:e1:cf:c8:3c:ac:b5:d0:db:fc:05:79:b8:7e:5c:
8a:00:e2:2d:26:e1:ea:b1:b0:2e:58:25:e9:b6:ca:89:d5:51:
1a:5b:b3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:47:01 2026 by rpki-client