Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
File: dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft (raw, json)
Hash identifier: TdDOqHs3gS+dR7PLWgSDtASWCFzK4OkNcCoREMtdddg=
Subject key identifier: A0:6F:8D:BF:CB:91:F3:B7:89:3A:A3:23:A1:6D:3E:33:85:2F:82:F5
Authority key identifier: 75:9C:7A:4A:7A:0E:AE:48:81:37:73:9B:EC:71:A2:B3:24:70:F8:ED
Certificate issuer: /CN=759c7a4a7a0eae488137739bec71a2b32470f8ed
Certificate serial: 01A0114FC6B97848F3F6CC9EE4EF228BEA67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
Manifest number: 025C
Signing time: Mon 17 Aug 2026 20:00:35 +0000
Manifest this update: Mon 17 Aug 2026 20:00:35 +0000
Manifest next update: Tue 18 Aug 2026 20:00:35 +0000
Files and hashes: 1: 5vgf_9aZThkj_7VAzPV1SdycQ9s.roa (hash: WWuwQNMz2jPS1Lz9ZyTa8kKgvLVWvH3DolJRQpBYZVw=)
2: ZUFdt76XEIRqjB1ZsCU8KDPIIeE.roa (hash: +22Qmq4Y9pNmDRsynGIXRX9EtOmlc0lMrcEc8jeBxvw=)
3: dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl (hash: dqXZZ5yOYIjF3gP3oZFU86kqs1twgjGm7tsWvcVNDpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:11:4f:c6:b9:78:48:f3:f6:cc:9e:e4:ef:22:8b:ea:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759c7a4a7a0eae488137739bec71a2b32470f8ed
Validity
Not Before: Aug 17 20:00:35 2026 GMT
Not After : Aug 18 20:00:35 2026 GMT
Subject: CN=a06f8dbfcb91f3b7893aa323a16d3e33852f82f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:53:f8:92:5a:13:08:60:de:65:58:4e:9d:ed:
f4:17:e5:a8:e9:0d:61:6b:26:f2:e2:05:76:aa:3a:
89:b4:9e:b7:d3:21:7a:dc:6e:b3:6b:90:5f:3f:fe:
ca:c0:75:3b:a4:8d:6b:e3:44:24:48:1d:d9:6e:dd:
f3:59:9c:c0:6e:cc:77:df:25:26:38:13:a8:ed:5e:
49:e9:a2:aa:85:04:34:17:38:c0:7d:a0:e6:01:89:
b0:11:00:88:27:62:d7:59:6b:ad:10:ac:e4:dc:02:
53:48:30:69:4c:55:a9:df:e7:bf:b2:e4:08:17:18:
50:42:3c:01:1d:c6:b3:a1:b0:83:8b:a3:42:a4:6f:
1a:56:96:b7:29:64:59:60:70:de:e5:88:ee:ff:35:
0a:f2:d1:f1:c2:c5:d5:5d:11:5d:91:65:2a:91:23:
00:1a:8c:a8:52:2e:c7:7d:82:8d:96:dd:e9:ee:45:
43:98:ee:29:ca:3a:e1:8b:b8:23:2c:80:a2:57:f3:
97:bf:da:97:c0:55:28:84:af:c2:6e:26:2a:55:8a:
13:f5:cf:df:c5:77:20:ab:5f:ec:64:39:b4:96:10:
56:d4:f4:6b:ec:5f:80:1f:98:7d:9c:0f:e9:6f:3b:
26:ff:44:f8:17:85:31:2c:e8:76:fc:59:a7:cb:80:
67:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6F:8D:BF:CB:91:F3:B7:89:3A:A3:23:A1:6D:3E:33:85:2F:82:F5
X509v3 Authority Key Identifier:
keyid:75:9C:7A:4A:7A:0E:AE:48:81:37:73:9B:EC:71:A2:B3:24:70:F8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:01:04:07:97:10:61:cd:07:d4:71:6f:7a:52:6c:40:d7:4a:
ab:8d:97:44:97:02:15:91:a1:01:4d:e5:8d:33:34:32:50:ff:
eb:3d:9d:33:e1:5c:96:42:42:01:ae:a9:14:51:cc:22:e1:a1:
c3:7e:26:a2:c1:28:f4:5b:99:45:a9:32:f0:0b:cc:87:eb:ce:
b2:ba:37:bb:69:b0:8c:2c:ae:f3:1a:5e:a0:f3:ab:06:84:40:
d1:07:98:2a:ec:8f:5f:fa:0f:6d:05:45:25:5c:2a:1e:70:7f:
8c:f4:e4:0b:50:f4:10:54:04:c4:a3:35:23:4f:e7:8d:e8:ff:
c2:1e:21:e5:25:f2:b8:47:67:81:de:ae:95:7c:46:71:a4:1f:
cf:f7:a4:4d:af:60:58:8c:88:7f:e6:7a:77:8d:5a:78:cb:6b:
6a:48:1c:c7:cf:2c:ea:f2:c7:4a:cf:87:4b:b1:4a:2f:13:4c:
63:c9:4c:fc:85:30:6c:25:d0:4e:f3:05:16:72:5e:56:aa:8b:
b3:90:f0:fc:24:89:2e:32:a7:e8:c9:30:1c:ce:8f:00:6c:c8:
89:77:5b:30:53:e9:73:26:39:39:e8:61:16:d3:c0:2d:75:7b:
12:df:e1:e9:a0:46:de:20:66:e2:df:f6:c9:f7:a2:57:92:73:
3c:0a:0c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 01:09:20 2026 by rpki-client