Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
File: dE3LcujLR4z8SyWusfA7QGJmN1w.mft (raw, json)
Hash identifier: JRIKTQFYSNGk+xRR4bGzVtaxXlcI2Fe7GmrOMJCDNkY=
Subject key identifier: 0F:6D:F7:31:A2:C0:29:2B:48:A5:7A:66:BE:AC:6B:FA:8B:81:5D:A7
Authority key identifier: 74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C
Certificate issuer: /CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
Certificate serial: 019FA2CE7DDD73261DAB9371CBBFD5B2EC49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
Manifest number: 0E1D
Signing time: Mon 27 Jul 2026 09:01:09 +0000
Manifest this update: Mon 27 Jul 2026 09:01:09 +0000
Manifest next update: Tue 28 Jul 2026 09:01:09 +0000
Files and hashes: 1: dE3LcujLR4z8SyWusfA7QGJmN1w.crl (hash: SRn0a37kh0xlS7xpJbqRwbtXDvlyYNC9EN6fjZlfMiE=)
2: tCljQdoQCYAGdZbsiUMFE-XsaJE.roa (hash: 00v6c7Mm0TodzD2o33hMR8x5qaiYr+lOoZwclNiSZ/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 09:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:7d:dd:73:26:1d:ab:93:71:cb:bf:d5:b2:ec:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
Validity
Not Before: Jul 27 09:01:09 2026 GMT
Not After : Jul 28 09:01:09 2026 GMT
Subject: CN=0f6df731a2c0292b48a57a66beac6bfa8b815da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a5:41:ad:4e:7c:b6:64:27:ef:d7:f2:27:80:
7c:ae:79:20:bc:24:08:d1:9b:1a:df:14:f5:4c:1d:
44:46:3c:4d:2c:31:4e:f0:f6:7f:31:2e:03:4f:44:
c9:2d:0b:dd:86:d6:44:12:7d:bd:b7:bd:80:80:5c:
72:c2:3c:39:d8:04:9c:45:e7:6c:69:99:06:4a:20:
e2:9e:91:03:fe:39:95:a8:3a:71:2b:fc:16:02:af:
5c:46:aa:13:1b:bc:32:66:bd:8d:7b:ff:1b:e1:9d:
db:80:aa:40:28:72:62:be:d7:03:dd:a6:a9:91:55:
50:50:19:df:01:63:a5:4d:73:ff:73:99:13:f4:6e:
7f:e9:e7:71:a4:2d:e3:34:6c:a3:8b:9b:91:cc:3f:
f5:ab:6c:01:91:9d:83:1b:d0:a1:94:cc:f0:fd:ef:
81:79:49:f6:7e:42:a3:60:43:ed:93:5d:8b:c4:31:
57:c4:90:77:d1:5b:22:f6:7c:62:db:60:62:0f:9c:
5f:11:6d:50:6b:35:46:e5:03:a9:3f:c8:f1:4e:2d:
2b:d3:b8:9d:82:59:36:54:eb:61:4b:2a:0a:cb:a8:
e5:48:66:eb:79:29:f1:9c:8e:20:12:a1:8a:38:6c:
85:28:aa:3b:30:85:6a:83:eb:32:a3:ae:fc:0b:b2:
6c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:6D:F7:31:A2:C0:29:2B:48:A5:7A:66:BE:AC:6B:FA:8B:81:5D:A7
X509v3 Authority Key Identifier:
keyid:74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:4e:66:9f:e1:6a:fe:0f:10:cc:c4:d4:f2:e3:5a:ba:1f:fa:
81:37:8d:7c:4f:a3:38:e7:20:a8:e3:8b:40:0b:e8:06:82:83:
d0:51:a1:19:9a:5e:00:07:62:31:75:fb:81:8d:fa:55:7e:ae:
f6:55:f0:d9:38:f0:da:4c:c5:45:06:a2:ec:cb:2d:55:7c:c6:
be:90:46:e9:a4:63:8d:ae:d1:4c:ca:80:0a:68:95:58:d4:c8:
ab:98:d9:37:47:c7:df:ab:69:2b:b7:74:82:d3:2c:f4:c5:14:
67:d3:3e:fa:4e:de:a9:bd:10:39:dc:88:48:27:df:04:eb:7d:
e4:1d:ec:e9:62:b0:48:dc:a0:c3:42:22:a9:03:26:31:66:a0:
01:af:57:2b:a2:03:90:a9:1a:ab:63:7f:73:96:eb:10:8b:1e:
7c:22:ec:55:81:d9:bd:25:da:5c:15:e6:6e:2e:25:03:6c:25:
ec:f2:99:41:c4:1d:81:5b:ca:ff:68:bf:fd:aa:e4:0b:71:a5:
3d:bf:a8:a1:94:b8:bf:5f:10:95:a7:bf:22:88:af:52:25:b2:
8e:f3:ef:8e:95:ec:7d:5c:97:64:0e:66:c2:d7:fb:8d:b9:78:
ab:e5:be:91:36:16:a8:09:09:29:a7:b9:f4:08:c9:ce:9a:b1:
cb:7a:61:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:24:50 2026 by rpki-client