Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.mft
File: 01VdufbNy92wUqRTSO8Nam1bwcE.mft (raw, json)
Hash identifier: Ehz6ZdYyiJgzhf+CQjB0+oVkdIkSYy3Kpv7aD/69RnY=
Subject key identifier: 68:4B:CA:F7:86:5D:AA:EB:D3:20:0E:B4:E1:6E:13:BE:03:8F:B4:56
Authority key identifier: D3:55:5D:B9:F6:CD:CB:DD:B0:52:A4:53:48:EF:0D:6A:6D:5B:C1:C1
Certificate issuer: /CN=d3555db9f6cdcbddb052a45348ef0d6a6d5bc1c1
Certificate serial: 019FF9B632197F9240CDA088726E14B4AC2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01VdufbNy92wUqRTSO8Nam1bwcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.mft
Manifest number: 0154
Signing time: Thu 13 Aug 2026 06:01:34 +0000
Manifest this update: Thu 13 Aug 2026 06:01:34 +0000
Manifest next update: Fri 14 Aug 2026 06:01:34 +0000
Files and hashes: 1: 01VdufbNy92wUqRTSO8Nam1bwcE.crl (hash: jWzO+5SdCLGFZqUp5RDdZzCwhXzjnQeHnQDxzv+gheA=)
2: szLd58h9ss7j2xagBuMXF5WP0yk.roa (hash: 8ob8pb7Gxq2C51p/RiIuL1KyizGRkOlyyDDvo7AtTm0=)
3: uXRaOLAunE2UdEOM1lTRedX_8jQ.asa (hash: 5LEXYsw/l0m4ESugD1zDY5cY+ORuB71qGoxgj35oZFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/01VdufbNy92wUqRTSO8Nam1bwcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:b6:32:19:7f:92:40:cd:a0:88:72:6e:14:b4:ac:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3555db9f6cdcbddb052a45348ef0d6a6d5bc1c1
Validity
Not Before: Aug 13 06:01:34 2026 GMT
Not After : Aug 14 06:01:34 2026 GMT
Subject: CN=684bcaf7865daaebd3200eb4e16e13be038fb456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:6c:a8:9d:df:f5:95:10:49:0a:e3:73:e3:d2:
dc:28:ef:ca:d8:02:23:ec:42:a8:71:54:3c:4e:65:
14:46:d4:53:a8:f8:15:39:c2:47:8d:bd:d5:6d:e1:
ba:30:53:3c:1b:95:bf:bd:f8:9d:db:43:86:6e:fc:
a3:12:9e:da:e6:65:77:9c:99:6d:2f:5d:81:45:2a:
19:15:03:56:f3:82:75:2f:dd:ba:67:54:e9:69:6c:
ce:a9:d4:a5:24:6e:0c:bb:74:b6:05:b1:56:76:fd:
c3:d7:d7:70:6c:f5:89:b1:47:27:4a:12:59:52:56:
b5:ae:fe:3b:85:f4:6d:27:97:4e:56:9f:93:90:c0:
a6:26:77:a4:9e:04:e9:0b:c8:20:7f:e5:10:50:b7:
4a:b8:6f:a9:be:ab:a8:4a:77:09:ce:b3:62:7e:31:
3e:25:d9:6d:c0:bf:97:94:38:79:f6:06:76:d2:33:
bb:9c:5c:e4:c3:52:9c:21:a1:12:56:dc:9f:66:56:
2e:5f:2f:ca:91:a1:04:e4:e3:53:33:38:16:3c:ac:
2f:e1:ff:55:20:f5:56:b7:2e:d4:90:f0:a6:79:ff:
b3:a0:bb:03:45:55:41:84:25:41:a6:69:d2:de:eb:
6e:35:be:0e:c0:bc:b3:13:08:12:32:f2:9a:84:15:
09:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4B:CA:F7:86:5D:AA:EB:D3:20:0E:B4:E1:6E:13:BE:03:8F:B4:56
X509v3 Authority Key Identifier:
keyid:D3:55:5D:B9:F6:CD:CB:DD:B0:52:A4:53:48:EF:0D:6A:6D:5B:C1:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01VdufbNy92wUqRTSO8Nam1bwcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f4:af:d2:86:5b:1f:e9:b4:c8:f4:9e:f8:1c:82:20:4c:19:
6e:19:c1:85:87:76:49:b8:cc:47:8b:73:1d:86:ed:e5:68:10:
44:87:27:50:a2:2a:30:af:8a:2b:7d:71:4a:34:95:fe:01:61:
04:f5:15:93:49:b6:9b:bb:e8:a1:af:37:0a:84:b5:b0:6b:66:
9d:fa:7d:15:99:81:dd:b2:f3:42:f9:34:c0:d2:dc:b1:72:92:
59:3e:9c:b6:5f:9b:94:4d:33:7a:27:7c:23:b3:a1:7c:7c:84:
ca:80:61:88:49:ca:1f:5b:bc:42:25:80:45:b5:23:ba:f4:5e:
4e:04:02:6c:0d:99:33:bf:fd:f7:7c:f4:8d:05:96:6d:61:04:
6f:e2:f6:9a:4d:3a:fe:3d:c8:4e:02:f7:83:02:b6:94:03:c1:
b1:6c:1f:07:89:5e:53:c6:19:75:e7:c0:67:04:eb:d2:cb:fe:
82:e5:a1:33:65:9f:ea:cf:be:0a:83:07:f4:32:73:2d:c4:76:
d1:5d:2b:31:91:7f:1f:80:3a:3e:f1:93:49:81:c0:56:73:80:
e4:24:24:af:8b:5b:83:b6:99:98:d4:8a:80:0d:75:11:c5:af:
78:3c:ec:8d:43:f0:dc:8b:aa:3e:df:22:cd:d4:12:3b:46:35:
83:fb:26:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:59:18 2026 by rpki-client