
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft
File: d0972iMD4D6ANP52MfUEi5mF9n4.mft (raw, json)
Hash identifier: 79/yLnDsr+V7zUMcK+r+W5mlFojwphqYpJ7vDsyGdLU=
Subject key identifier: B8:09:6E:1E:DB:EA:DC:4E:A1:0E:D5:2B:60:ED:BB:4F:B9:2D:FD:AF
Authority key identifier: 77:4F:7B:DA:23:03:E0:3E:80:34:FE:76:31:F5:04:8B:99:85:F6:7E
Certificate issuer: /CN=774f7bda2303e03e8034fe7631f5048b9985f67e
Certificate serial: 019F27A48983B62F8B2394D848963BDD6CE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0972iMD4D6ANP52MfUEi5mF9n4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft
Manifest number: 02EA
Signing time: Fri 03 Jul 2026 11:02:02 +0000
Manifest this update: Fri 03 Jul 2026 11:02:02 +0000
Manifest next update: Sat 04 Jul 2026 11:02:02 +0000
Files and hashes: 1: d0972iMD4D6ANP52MfUEi5mF9n4.crl (hash: OnD2b3MgjjXTkvONVjJTb+0A8UoP2mNKrAtJBAJhcMo=)
2: vr-KcEvzFupIdELOEs6eVsczP7A.roa (hash: sVJX8b77ReEC5s9osN7ZZ4vvNkbfeOM17MUXGpuCdfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0972iMD4D6ANP52MfUEi5mF9n4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:27:a4:89:83:b6:2f:8b:23:94:d8:48:96:3b:dd:6c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=774f7bda2303e03e8034fe7631f5048b9985f67e
Validity
Not Before: Jul 3 11:02:02 2026 GMT
Not After : Jul 4 11:02:02 2026 GMT
Subject: CN=b8096e1edbeadc4ea10ed52b60edbb4fb92dfdaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:32:58:45:74:59:f9:77:0e:eb:77:34:a1:cf:
01:9d:f8:10:d3:16:1a:02:c2:5d:54:82:aa:55:da:
8d:3e:21:16:a2:d6:71:e9:2c:2c:5e:0b:50:55:a0:
1d:38:b3:90:96:cc:59:f9:c6:0d:4b:b2:30:dd:22:
64:c4:34:fa:b8:18:f2:57:35:a3:82:f7:66:b1:21:
da:08:20:78:94:ce:6e:92:e6:93:52:06:eb:e5:70:
22:e0:59:ac:8f:28:26:47:92:70:74:f4:f6:ea:da:
8e:e7:71:c4:3c:6b:58:56:1b:c0:c2:ba:1e:65:ef:
87:66:36:da:61:e5:72:a6:81:3f:f7:5d:f7:29:81:
15:ff:83:e9:8b:aa:52:92:1b:87:f5:8f:8e:cd:90:
f3:ae:ad:f9:b8:f0:81:10:a4:8e:6f:bf:4e:b2:d0:
8c:49:b0:7a:2c:09:73:e1:60:20:e6:b5:3a:6d:d0:
2e:59:6e:05:53:25:45:19:ce:b4:38:4b:8d:37:28:
84:93:9e:6d:74:9f:7e:53:4f:d0:63:72:34:31:25:
ff:6d:a8:1a:e4:95:ab:c9:94:2c:47:30:57:80:98:
d1:98:f9:9b:06:17:bb:25:a2:2d:ba:9f:9d:6e:1f:
c2:9d:b6:10:d0:71:bd:34:49:67:b7:a5:0e:fa:c0:
09:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:09:6E:1E:DB:EA:DC:4E:A1:0E:D5:2B:60:ED:BB:4F:B9:2D:FD:AF
X509v3 Authority Key Identifier:
keyid:77:4F:7B:DA:23:03:E0:3E:80:34:FE:76:31:F5:04:8B:99:85:F6:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0972iMD4D6ANP52MfUEi5mF9n4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:7f:6e:c8:b9:77:d9:90:d0:4d:95:b3:51:6a:3d:2d:87:b8:
77:0f:45:7b:0a:3a:83:a7:4d:86:36:f0:01:9e:45:52:2e:99:
6e:21:2f:8b:46:7d:b7:e7:fc:27:20:33:76:a2:28:03:fb:b9:
5e:3b:98:38:7d:6b:ed:a0:95:30:4b:81:63:13:06:7d:ea:01:
88:09:3a:3c:ea:b2:3b:ce:90:c2:56:8e:4f:50:5b:97:7a:c7:
27:87:9c:1d:de:02:bb:7b:65:1c:48:bd:c2:19:4b:9f:26:63:
68:bd:0b:bc:26:78:92:23:0f:64:e3:a8:c3:f2:ff:ca:b8:3d:
5f:7b:77:24:92:70:89:bf:98:97:8e:e9:f3:d4:d2:d1:6f:24:
4d:b6:5e:db:ae:dc:87:1e:22:fe:4d:34:50:cd:b9:9a:a1:e5:
11:7e:95:64:a0:da:34:fc:a7:b8:40:47:7c:14:3e:bb:94:13:
70:a3:c4:98:92:d0:fc:96:ac:bb:53:3b:7e:3d:92:c4:19:05:
f6:d0:50:74:0e:48:5f:d7:6b:bf:12:80:3e:0f:a3:0e:a3:1b:
e5:af:69:19:fb:8b:b1:e8:c1:ac:a2:d6:5b:bf:aa:1a:fb:57:
4b:87:62:b7:cb:a1:2d:e8:43:d9:66:4e:f7:2d:7d:f4:95:67:
66:5f:a8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 17:41:20 2026 by rpki-client