Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.mft
File: 0LYdHx2czatrbY4UUMLJNtOX5nA.mft (raw, json)
Hash identifier: JocLygwwzysRh2Ky7JItCW1pXCsmSOqCRmu6Rn1ns3k=
Subject key identifier: DF:CE:2A:6F:05:42:B2:DB:6B:C8:12:67:CE:C5:EB:C5:C2:97:63:44
Authority key identifier: D0:B6:1D:1F:1D:9C:CD:AB:6B:6D:8E:14:50:C2:C9:36:D3:97:E6:70
Certificate issuer: /CN=d0b61d1f1d9ccdab6b6d8e1450c2c936d397e670
Certificate serial: 019FFA5AE7FEFD660F3B707FB075F7CD5126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LYdHx2czatrbY4UUMLJNtOX5nA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.mft
Manifest number: 06F1
Signing time: Thu 13 Aug 2026 09:01:29 +0000
Manifest this update: Thu 13 Aug 2026 09:01:29 +0000
Manifest next update: Fri 14 Aug 2026 09:01:29 +0000
Files and hashes: 1: 0LYdHx2czatrbY4UUMLJNtOX5nA.crl (hash: fkvEmFmliSC+wzBruknduJDYXuQqUH7x0ZtkA2N3wKU=)
2: zga9Hrw7zuD_QLdtCJpMRKMP3DQ.roa (hash: AOEGUef18XORevLws81X/8IWws1WokZExo2mQVZZKN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LYdHx2czatrbY4UUMLJNtOX5nA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 09:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:5a:e7:fe:fd:66:0f:3b:70:7f:b0:75:f7:cd:51:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b61d1f1d9ccdab6b6d8e1450c2c936d397e670
Validity
Not Before: Aug 13 09:01:29 2026 GMT
Not After : Aug 14 09:01:29 2026 GMT
Subject: CN=dfce2a6f0542b2db6bc81267cec5ebc5c2976344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:da:ce:8a:16:32:a6:4b:ec:b4:24:ec:64:6e:
33:9d:c6:ba:3c:5c:f8:b8:a5:d5:68:2c:48:87:54:
2a:15:6a:94:59:c9:8e:9b:b9:52:c3:3e:28:bc:95:
14:70:f6:59:9f:fe:b3:78:84:e3:d8:63:dd:f4:73:
ee:94:f1:da:a5:13:3a:32:10:8b:7b:62:d1:b5:a3:
6a:18:b3:3d:03:b9:e8:34:0d:78:f7:de:fe:6d:30:
78:b2:90:cf:fd:a7:41:38:8f:a0:b7:6e:ea:8a:1e:
fd:ed:40:e9:77:c9:1a:a5:b0:f8:42:31:a7:17:e0:
9d:7f:25:e2:05:df:1f:99:60:06:87:0b:17:51:bb:
37:2a:61:05:e4:30:fb:a6:6b:80:d8:9b:d0:7a:90:
ad:95:51:1a:d5:da:9e:bb:0a:47:6d:3c:80:c2:39:
9a:43:7c:3a:06:2e:9d:b5:f9:61:b9:1c:d5:52:a8:
cf:fd:0f:87:7a:54:05:28:50:bf:8e:74:ef:46:d4:
40:4a:0d:5b:f8:3d:4d:99:da:e6:7b:e1:d4:f7:39:
04:ed:7d:32:c7:ec:90:af:94:31:75:2d:2b:5a:5a:
95:83:c7:64:e4:52:36:63:92:21:24:24:fb:87:23:
bb:e8:22:4f:40:52:8c:bf:24:68:f4:52:8e:9d:bc:
b9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:CE:2A:6F:05:42:B2:DB:6B:C8:12:67:CE:C5:EB:C5:C2:97:63:44
X509v3 Authority Key Identifier:
keyid:D0:B6:1D:1F:1D:9C:CD:AB:6B:6D:8E:14:50:C2:C9:36:D3:97:E6:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LYdHx2czatrbY4UUMLJNtOX5nA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:9a:4e:59:00:1f:a1:1d:c5:a7:f8:72:91:6d:64:10:21:63:
c5:f6:84:21:e1:72:27:e2:94:da:14:e5:fd:f0:cb:50:fc:2b:
1d:b0:05:d4:b0:dd:44:97:9a:3e:4f:c3:4d:ab:d9:f8:58:8b:
83:fd:8d:05:57:fb:95:2f:30:48:94:94:3c:35:32:f0:26:6e:
e6:07:bc:0a:4e:90:87:72:d6:6c:6a:61:9f:6b:10:a4:55:75:
b8:f9:d3:81:01:70:f1:44:7d:2b:cc:5b:c0:e1:67:2f:3a:bd:
21:e7:17:63:9f:0d:4e:77:e0:f2:f1:4b:9b:c9:dd:db:29:5a:
c6:fb:38:d9:1b:62:48:c9:f7:26:b9:95:0a:21:56:1f:87:0c:
53:bb:96:11:ff:43:80:ef:c4:65:2b:8f:26:c5:96:73:8e:1d:
54:44:b2:b5:05:bf:88:f4:91:ff:5c:9b:45:d0:d7:ab:eb:ed:
86:e4:84:83:ad:e6:85:a4:8e:96:77:a5:fd:ce:28:eb:20:1d:
14:4b:fa:cf:74:fa:6a:07:b4:fb:4a:77:4e:d3:12:08:b8:b8:
be:35:a8:fc:36:28:3f:89:9e:69:59:d3:c3:ae:f4:31:b2:ce:
d7:dd:8f:65:b3:aa:90:20:b7:2b:b5:54:bf:b3:b5:92:8b:ff:
ee:8c:69:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 13:05:13 2026 by rpki-client