Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
File: 0x1LlB4GS0a8Ka9kW8dUcE06lME.mft (raw, json)
Hash identifier: z6lwtp4DJm9ytoAklOpc3qP+k7XL8an3i8Qsq+b9yQI=
Subject key identifier: D0:00:29:E7:E4:87:C4:FF:B3:D6:8D:06:42:97:83:F4:A4:E1:56:EC
Authority key identifier: D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1
Certificate issuer: /CN=d31d4b941e064b46bc29af645bc754704d3a94c1
Certificate serial: 019F9022D7E88EA17DC0C4E8C05C0AEB93D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
Manifest number: 097C
Signing time: Thu 23 Jul 2026 18:00:30 +0000
Manifest this update: Thu 23 Jul 2026 18:00:30 +0000
Manifest next update: Fri 24 Jul 2026 18:00:30 +0000
Files and hashes: 1: 0x1LlB4GS0a8Ka9kW8dUcE06lME.crl (hash: wAKC87TVBtbJBXsFSLyKAhcfXuMUK7fDZ5t0V6qcz0g=)
2: yNpYoRN2Jui6WiJYc8qJGmLQ8ZM.roa (hash: N3NkPMi2wZ62GAfD3+jtEuabxW8VmrmktMjIWdHv/jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:d7:e8:8e:a1:7d:c0:c4:e8:c0:5c:0a:eb:93:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31d4b941e064b46bc29af645bc754704d3a94c1
Validity
Not Before: Jul 23 18:00:30 2026 GMT
Not After : Jul 24 18:00:30 2026 GMT
Subject: CN=d00029e7e487c4ffb3d68d06429783f4a4e156ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:87:23:cf:4c:66:4e:42:22:4b:3b:99:7b:83:
cb:67:35:e9:fe:2f:fe:5f:73:09:98:90:4f:18:5b:
49:be:77:95:61:32:6e:4b:e1:21:6e:1e:8c:3c:24:
22:52:db:c3:4e:95:f3:21:8b:b9:ec:1d:4b:8d:95:
38:45:de:56:84:ce:28:1e:35:58:61:a3:6e:86:a2:
ea:ca:cb:8d:7f:68:18:43:db:be:7d:4d:85:2a:c1:
7c:21:da:c5:64:3f:03:55:72:24:92:d4:4d:f3:62:
f4:11:e7:12:e6:c7:52:35:83:67:7e:8d:00:31:cd:
b2:ff:09:46:a0:95:b2:3b:bc:2f:e8:2e:14:7c:cb:
c8:6b:78:68:09:17:e2:3a:ae:34:96:e0:cd:8d:9c:
2f:11:d8:a5:08:d9:df:af:95:93:b5:84:04:fe:22:
0d:cd:ec:56:4a:1b:2b:f5:a7:9c:3c:8c:c1:1e:0d:
c1:00:6b:eb:8e:32:2f:6d:9d:ce:a8:2b:15:4b:fd:
db:82:8d:99:db:a7:9f:ec:e5:a6:67:41:ab:ad:8a:
55:d6:8a:e1:07:6a:82:82:6c:46:56:c1:b6:f8:d9:
4d:2f:de:82:67:87:f6:7e:30:02:43:69:b8:13:ee:
b8:77:d0:73:95:be:62:11:e7:70:d5:10:13:cc:1c:
f6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:00:29:E7:E4:87:C4:FF:B3:D6:8D:06:42:97:83:F4:A4:E1:56:EC
X509v3 Authority Key Identifier:
keyid:D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c0:80:2f:66:5e:a4:a9:dd:ec:fe:28:6f:b6:c2:e6:b3:ac:
ca:97:f9:b4:54:39:50:37:07:4f:18:85:48:a4:3c:e8:bd:e5:
5d:28:e6:5c:f1:71:0e:d1:30:cf:a7:68:76:5b:c6:06:51:5c:
82:41:77:0c:cd:95:b5:2f:bb:1d:e9:64:fe:6f:34:64:f8:97:
eb:b9:32:41:b1:5a:6e:1f:49:3a:1a:4a:ee:fc:4c:56:23:9a:
05:03:6d:49:91:a6:00:1b:46:55:f8:1f:3f:b6:14:9e:85:2e:
29:f7:6f:1f:ea:0b:6b:73:d8:a1:38:fd:62:72:ef:28:f7:d4:
c0:f7:2a:a0:8e:f2:32:ab:0c:86:36:a2:5a:c2:38:6e:0a:bb:
81:01:24:71:95:7e:81:16:40:56:cb:7b:82:ce:ee:62:50:9e:
0d:d3:e9:73:07:ca:a9:d6:4c:13:62:be:92:d6:53:88:f0:c6:
9b:4b:fd:e5:8b:20:5a:74:80:49:d2:00:3d:9e:4c:16:3e:e5:
ff:29:31:a4:47:91:ef:e9:e6:8d:20:8c:36:5b:7e:16:e5:ee:
73:24:e9:b3:fd:5d:48:a5:9f:66:21:12:43:c6:af:35:6a:17:
7d:d0:fe:42:61:39:ba:c7:d6:e9:1a:00:a2:0a:39:45:a3:98:
02:d5:c2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:01:04 2026 by rpki-client