Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
File: 0RaDXQN3hmIKnp96DjYEmLtlQSc.mft (raw, json)
Hash identifier: k68pbtULvZUq1wVaId4mWrjsD7/Wg/+cjahyVtjRMVI=
Subject key identifier: 35:33:33:6D:21:F3:96:3E:69:FD:0A:A6:72:24:CF:64:F2:78:34:09
Authority key identifier: D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
Certificate issuer: /CN=d116835d037786620a9e9f7a0e360498bb654127
Certificate serial: 019F84560321F8BB639B3A19BD67DB206AEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
Manifest number: 0DD7
Signing time: Tue 21 Jul 2026 11:00:57 +0000
Manifest this update: Tue 21 Jul 2026 11:00:57 +0000
Manifest next update: Wed 22 Jul 2026 11:00:57 +0000
Files and hashes: 1: 0RaDXQN3hmIKnp96DjYEmLtlQSc.crl (hash: UACDlZsn+kzUT5cCAM5TSayq+lmZUyhlF/QJuPuabpk=)
2: GxXxtmytTeePZFqMmjKewv0phDk.roa (hash: DQNMt4Qmq5pWK/m+65wngsoZgA7+I6etgVuEFLBf9P8=)
3: hrfVvtnK2yUD8q8kqhgwgxBrIWA.roa (hash: knPxWaldCF2NZQN6BPLTcSuiJLTa63/Ehra1OYIbZUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:56:03:21:f8:bb:63:9b:3a:19:bd:67:db:20:6a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d116835d037786620a9e9f7a0e360498bb654127
Validity
Not Before: Jul 21 11:00:57 2026 GMT
Not After : Jul 22 11:00:57 2026 GMT
Subject: CN=3533336d21f3963e69fd0aa67224cf64f2783409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ca:cc:83:dd:5e:03:df:79:e7:8e:e4:cf:d9:
78:a0:eb:df:4f:a3:3d:f1:df:f1:43:7f:dd:61:2b:
f9:03:6a:af:96:57:3b:f1:90:d5:8a:f3:63:41:f6:
1e:9c:81:8c:06:00:f8:0a:6f:a9:0c:89:a4:fa:e1:
44:33:fa:19:89:5c:23:15:53:9d:20:32:5c:38:e8:
67:a2:16:f5:07:e8:d5:b4:84:b9:9e:2e:d5:e7:94:
1a:fb:ad:1f:1f:93:f1:31:c8:40:95:b5:e0:37:9c:
67:3b:b0:85:44:b3:b1:dd:df:73:48:40:2f:16:58:
d7:46:8d:2c:e0:39:4f:77:31:ef:0a:6a:32:ea:7a:
64:75:c2:29:bf:47:42:43:ae:cf:25:5a:10:2e:74:
81:70:29:6b:36:29:1e:73:79:e8:84:f4:ab:82:ea:
5f:23:5f:7e:07:d5:0c:07:fe:c1:b9:a7:29:76:72:
2f:34:ff:ac:4e:c4:64:fb:0f:ea:19:91:45:dc:d5:
ef:f5:97:8b:ec:a7:70:53:85:71:7f:c3:92:97:be:
fd:d2:5e:b9:aa:c9:16:3e:9c:73:02:44:0d:43:f3:
e2:8e:3e:30:8b:48:8b:14:cc:3c:7d:b2:e4:ae:ff:
85:12:9b:8d:0c:e5:e0:df:e1:d0:fd:47:bd:87:79:
88:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:33:33:6D:21:F3:96:3E:69:FD:0A:A6:72:24:CF:64:F2:78:34:09
X509v3 Authority Key Identifier:
keyid:D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a9:b1:30:2e:e0:7d:39:5d:4a:d9:89:47:af:3a:a5:75:9d:
29:45:40:bc:15:7c:f6:40:4d:b6:fc:7d:47:b1:8e:8c:0d:19:
e0:a8:11:76:6e:cb:f2:82:a1:28:7e:09:3c:9d:7d:2b:5b:56:
38:43:10:ff:2d:ea:d8:20:c7:eb:a9:d9:91:f9:59:37:b5:d0:
94:32:a6:8e:1f:36:1e:68:4b:2e:99:47:37:3b:bc:08:ad:50:
e0:01:77:df:2a:0d:e5:fb:97:07:04:77:48:da:dd:2c:ef:3d:
8d:11:95:e1:f6:6d:1f:50:6f:0d:f0:4d:b3:97:7e:1d:5a:90:
81:ac:46:ac:24:c0:2c:ed:c3:e2:6c:e6:95:4e:ca:bd:02:0c:
0b:76:2e:c6:23:e2:4b:93:85:10:2c:3a:84:ed:f8:0a:78:f3:
48:96:0d:35:c8:8a:a3:84:62:3e:55:8a:1c:85:76:eb:3e:44:
49:a3:ee:c6:15:9b:1e:b3:80:d7:b5:34:01:a8:45:5a:cb:a5:
e3:4a:25:e3:58:73:a5:a9:64:f1:ee:c6:73:55:20:42:96:e8:
35:28:6d:9c:d3:66:76:05:0f:8d:63:3f:f5:01:52:21:5c:31:
3f:d0:ba:d3:1d:1e:fb:e8:b0:c2:1d:57:ec:ef:a9:f2:ca:6e:
75:db:ee:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:53:43 2026 by rpki-client