Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
File: 0nXXqLrAR39VCd_xG5GVymDfh9o.mft (raw, json)
Hash identifier: lv8wQQZDGrlsCVq0JLEK7wbYUrrzToGmhxHA8NwmFZI=
Subject key identifier: 74:0F:CD:41:7B:34:5D:80:76:01:3A:2D:C1:D2:4C:D2:81:C2:4F:34
Authority key identifier: D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
Certificate issuer: /CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Certificate serial: 01A0013857B18DA4B620699F22BBE089A819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
Manifest number: 1A16
Signing time: Fri 14 Aug 2026 17:01:04 +0000
Manifest this update: Fri 14 Aug 2026 17:01:04 +0000
Manifest next update: Sat 15 Aug 2026 17:01:04 +0000
Files and hashes: 1: 0buhRJjHXTiILzpXwukDNlvcl6A.roa (hash: dS469I3s9ALuc1j5wYrMGtFrrCgHDmpnkp67+jT2dqk=)
2: 0nXXqLrAR39VCd_xG5GVymDfh9o.crl (hash: JCpfcu8xpDHtfqTOwInJ7qi8PsodlNJC+ePbbNbb0E4=)
3: 6hsgDYrDCCi2j0jUVtm2wbtCdNU.roa (hash: sWQmCUUNLY3nJEy93toy8HB4mgFo7yvPBWu0Rdag+ZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:38:57:b1:8d:a4:b6:20:69:9f:22:bb:e0:89:a8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Validity
Not Before: Aug 14 17:01:04 2026 GMT
Not After : Aug 15 17:01:04 2026 GMT
Subject: CN=740fcd417b345d8076013a2dc1d24cd281c24f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6a:d9:0d:7a:6e:6b:de:91:55:e0:c9:6a:37:
e4:8e:44:05:2f:a3:5a:3f:a8:ec:13:04:2b:0c:38:
74:44:a5:71:30:ee:02:59:86:6f:e8:f0:9b:6b:bf:
e1:a5:f0:2f:55:23:3f:3c:f2:f6:f0:04:76:a2:f9:
fd:df:2b:6b:0f:a6:dc:75:c8:de:2d:20:47:ce:7a:
46:54:0a:34:10:5d:51:14:30:ea:fd:cc:7e:5f:46:
8e:fd:09:8b:fe:81:1c:0f:3a:18:7c:a0:01:3e:82:
09:d3:7e:8c:b6:e4:a9:2d:28:3b:da:91:d6:9a:42:
58:70:e1:98:06:7e:eb:bd:1e:ca:93:f2:07:d6:76:
5a:94:aa:f9:bc:de:d3:d6:c9:2c:55:2c:8c:71:82:
9a:58:6f:2a:0b:8d:fe:30:26:be:31:6a:bc:16:da:
6b:bf:e9:86:20:bb:16:6a:80:0a:50:43:1b:f4:f4:
c9:6e:57:94:13:9a:e9:09:16:0e:c5:74:69:00:b0:
ba:eb:8f:87:78:0a:b3:04:c9:d0:59:28:f7:79:24:
dc:40:e7:bb:aa:6c:fe:1c:ac:4b:33:4d:1b:dd:73:
5d:41:59:2b:50:f2:52:11:5a:ba:23:cf:93:34:aa:
78:f0:22:30:c1:0a:55:6c:7d:90:74:b6:e5:13:47:
78:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:0F:CD:41:7B:34:5D:80:76:01:3A:2D:C1:D2:4C:D2:81:C2:4F:34
X509v3 Authority Key Identifier:
keyid:D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:19:49:a4:34:f5:dd:7b:4a:e7:a7:18:51:49:63:3b:1d:2a:
a1:80:b1:61:5d:ff:34:d8:2a:7a:fe:53:1c:ba:31:0b:da:2d:
63:cf:82:ca:b0:19:2a:75:d9:9b:96:5e:21:37:c7:c2:93:9b:
4d:3e:cf:2c:ab:03:4d:62:e2:2c:fa:d7:16:51:91:47:c1:2e:
3a:ac:09:92:a4:8e:7d:3e:ad:02:07:af:a0:54:fe:93:87:ea:
6a:68:8d:19:ad:d0:49:91:d5:73:08:6f:0a:59:28:4d:40:93:
52:e3:62:38:25:aa:8a:30:14:aa:b1:2c:01:7a:0a:d6:83:e1:
81:d8:fd:66:0b:c4:4e:9a:e8:cc:dd:ef:72:08:5d:b3:de:10:
34:9f:8c:95:68:3e:3c:9d:af:55:be:19:28:b3:e6:e6:c9:a3:
88:2f:bd:51:70:12:c0:52:57:f6:35:e5:64:ad:d9:5a:9b:16:
88:14:60:93:66:f6:75:58:75:94:74:98:ee:09:b4:5f:63:33:
70:2c:b0:d4:af:39:46:6d:31:84:69:c0:90:02:f2:de:12:06:
cc:99:26:8b:b9:57:59:65:ae:f6:8a:45:69:c8:4d:53:c6:08:
b7:04:40:75:18:2e:89:2e:ca:bd:7e:f0:0f:05:62:81:d5:65:
4f:e7:33:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:29:25 2026 by rpki-client