Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/41dd00-b57b-4638-a08b-6853c41ca03e/1/0tS9caQ9jN1GKmHu4NlHAMfmQl8.mft
File: 0tS9caQ9jN1GKmHu4NlHAMfmQl8.mft (raw, json)
Hash identifier: Pchvx4mYGtcRtcAZFUPM4ugGd3IN75I77Lbd/mJX4+U=
Subject key identifier: D8:2E:4A:A7:F0:F1:72:0A:70:5A:F1:7F:5D:94:06:0C:57:51:0B:A9
Authority key identifier: D2:D4:BD:71:A4:3D:8C:DD:46:2A:61:EE:E0:D9:47:00:C7:E6:42:5F
Certificate issuer: /CN=d2d4bd71a43d8cdd462a61eee0d94700c7e6425f
Certificate serial: 019F90915DA2F9720A004BCB3C9B541384C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0tS9caQ9jN1GKmHu4NlHAMfmQl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/41dd00-b57b-4638-a08b-6853c41ca03e/1/0tS9caQ9jN1GKmHu4NlHAMfmQl8.mft
Manifest number: 0341
Signing time: Thu 23 Jul 2026 20:01:13 +0000
Manifest this update: Thu 23 Jul 2026 20:01:13 +0000
Manifest next update: Fri 24 Jul 2026 20:01:13 +0000
Files and hashes: 1: 0tS9caQ9jN1GKmHu4NlHAMfmQl8.crl (hash: 0xQXqMptAb4NKqzRTONm4l56K7du0tbXQYUF4KsG/Xk=)
2: 7y2-JyJSBLPzJ1F-GfRB9L2A1lc.roa (hash: Je64415GY9BUK++a0MLtgLPvf9KrlsWdU946uIXLKos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/41dd00-b57b-4638-a08b-6853c41ca03e/1/0tS9caQ9jN1GKmHu4NlHAMfmQl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/41dd00-b57b-4638-a08b-6853c41ca03e/1/0tS9caQ9jN1GKmHu4NlHAMfmQl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0tS9caQ9jN1GKmHu4NlHAMfmQl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:5d:a2:f9:72:0a:00:4b:cb:3c:9b:54:13:84:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2d4bd71a43d8cdd462a61eee0d94700c7e6425f
Validity
Not Before: Jul 23 20:01:13 2026 GMT
Not After : Jul 24 20:01:13 2026 GMT
Subject: CN=d82e4aa7f0f1720a705af17f5d94060c57510ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:82:c6:e5:89:35:da:5e:5d:29:d8:39:92:55:
32:f2:38:3c:65:3c:59:97:e1:d1:0b:2f:39:40:73:
f9:33:14:b0:b4:8e:b2:1f:af:52:db:15:47:8b:cf:
a4:5c:fb:2a:63:9c:b0:fe:c3:b2:7c:47:b1:6e:54:
bd:42:67:10:14:16:ce:c8:33:21:10:4f:3a:72:1a:
5a:c0:01:b4:79:93:97:29:88:4f:42:f2:af:35:ac:
79:f1:fd:ff:25:3b:b5:4c:e1:72:bb:55:47:59:8a:
e1:a1:8f:62:01:05:82:74:b7:b4:6b:cc:cb:4e:52:
bb:75:8f:cc:a3:3a:0b:f6:f9:de:0d:be:fe:c0:61:
b4:ae:f9:8c:73:2c:4d:e7:16:b3:a9:76:c9:6b:8d:
56:91:30:1b:67:68:3c:37:de:16:9b:72:c1:93:12:
fb:77:37:ae:29:75:e3:a9:59:0d:20:ee:cd:9b:79:
d1:cf:35:fa:ed:64:ba:2a:3c:54:44:65:b3:1a:28:
7e:53:2c:97:3b:20:44:66:2c:3b:f1:09:96:e6:7e:
fc:37:f9:74:88:50:ca:d3:d6:bb:28:9d:2a:b5:8d:
b9:94:2c:9d:72:8c:ef:df:06:85:2f:00:4b:cd:73:
85:fc:5a:20:c2:31:12:78:fa:0c:7e:5e:f7:5a:73:
d6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2E:4A:A7:F0:F1:72:0A:70:5A:F1:7F:5D:94:06:0C:57:51:0B:A9
X509v3 Authority Key Identifier:
keyid:D2:D4:BD:71:A4:3D:8C:DD:46:2A:61:EE:E0:D9:47:00:C7:E6:42:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0tS9caQ9jN1GKmHu4NlHAMfmQl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/41dd00-b57b-4638-a08b-6853c41ca03e/1/0tS9caQ9jN1GKmHu4NlHAMfmQl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/41dd00-b57b-4638-a08b-6853c41ca03e/1/0tS9caQ9jN1GKmHu4NlHAMfmQl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:53:99:4d:56:c8:1a:07:38:84:e1:03:a5:7d:e0:2d:4b:00:
6d:03:e9:0d:f7:98:47:dd:82:e1:02:41:3b:78:93:66:b0:e0:
6c:70:cc:dd:8f:87:a7:04:ae:a0:23:44:d6:51:75:2f:6d:3b:
a1:77:8d:34:f8:65:1e:e2:e3:9f:94:43:e9:13:ce:4a:9a:e6:
53:98:42:8e:d6:38:f7:35:26:91:70:e2:4c:02:49:c2:b0:0f:
a5:20:9f:df:35:47:27:3a:b5:cb:df:6f:44:61:5e:d1:b6:92:
05:49:d9:87:de:6e:08:28:06:59:40:1c:23:fc:38:f7:b6:2e:
76:d4:59:52:f9:14:7b:43:35:15:4a:32:3a:69:07:7e:e6:0c:
c2:00:7b:21:73:c6:82:b9:3e:e8:a9:d0:b1:a6:e4:02:a5:80:
c2:8f:db:be:1c:53:a3:d0:26:33:11:bf:67:81:93:62:75:cd:
31:3e:3b:a2:22:89:77:85:bc:27:d7:c4:4a:66:ea:78:5c:66:
78:e8:7a:84:fb:e0:18:23:0d:ff:29:4a:e5:17:d1:3b:bf:71:
c1:f5:b5:d2:b0:65:87:96:5a:5b:c9:8a:14:5c:b9:9c:56:2c:
91:f3:48:19:aa:3d:da:27:ae:02:26:ea:a9:11:2a:3c:c7:5e:
9a:30:6b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:50:05 2026 by rpki-client