Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7fa172-8e55-4711-8c75-18f8925c6665/1/0gXOrys2rZ_lGQaehrlONtLsS94.mft
File: 0gXOrys2rZ_lGQaehrlONtLsS94.mft (raw, json)
Hash identifier: lW1pZ64sVeakqx/pBJJpIeIP1IjETU5ffujd7POoURw=
Subject key identifier: 17:F1:D2:18:E2:0C:15:5B:BA:FF:A1:59:4B:9D:89:D5:57:53:5A:82
Authority key identifier: D2:05:CE:AF:2B:36:AD:9F:E5:19:06:9E:86:B9:4E:36:D2:EC:4B:DE
Certificate issuer: /CN=d205ceaf2b36ad9fe519069e86b94e36d2ec4bde
Certificate serial: 01A0016F6BC53A6CE9068951C44B7296C53D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gXOrys2rZ_lGQaehrlONtLsS94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7fa172-8e55-4711-8c75-18f8925c6665/1/0gXOrys2rZ_lGQaehrlONtLsS94.mft
Manifest number: 0D30
Signing time: Fri 14 Aug 2026 18:01:14 +0000
Manifest this update: Fri 14 Aug 2026 18:01:14 +0000
Manifest next update: Sat 15 Aug 2026 18:01:14 +0000
Files and hashes: 1: 0gXOrys2rZ_lGQaehrlONtLsS94.crl (hash: J/o07ziKltl3ykPRup0B8d7rxlS9GwEnHgNyaAnoxJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/7fa172-8e55-4711-8c75-18f8925c6665/1/0gXOrys2rZ_lGQaehrlONtLsS94.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/7fa172-8e55-4711-8c75-18f8925c6665/1/0gXOrys2rZ_lGQaehrlONtLsS94.mft
rsync://rpki.ripe.net/repository/DEFAULT/0gXOrys2rZ_lGQaehrlONtLsS94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:6b:c5:3a:6c:e9:06:89:51:c4:4b:72:96:c5:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d205ceaf2b36ad9fe519069e86b94e36d2ec4bde
Validity
Not Before: Aug 14 18:01:14 2026 GMT
Not After : Aug 15 18:01:14 2026 GMT
Subject: CN=17f1d218e20c155bbaffa1594b9d89d557535a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cc:9a:81:b1:db:77:72:9d:e9:fd:85:e3:bf:
28:fe:dc:55:fc:0a:55:36:54:bf:8c:d1:ce:95:d6:
c7:32:2b:1c:35:52:64:bb:34:2e:5d:4a:49:e1:2e:
ac:07:21:e1:78:11:30:7c:ec:37:fa:9c:6d:fc:43:
bb:33:5f:43:2e:0e:53:20:7c:04:c2:08:ed:99:dc:
e4:a3:75:30:30:3c:24:d7:fe:63:a7:9b:a2:7c:cd:
fd:37:fa:3c:50:cd:be:5c:38:5f:7a:61:38:b4:4e:
74:e1:e8:e3:69:9f:6b:c3:0c:7c:d6:9d:13:52:23:
66:08:78:e4:51:e6:80:61:5d:33:22:79:c1:10:b1:
b2:50:b4:59:0f:a9:b7:47:b8:dd:4a:a1:5d:5c:94:
24:ed:e0:fd:4d:9d:47:50:be:18:77:00:db:fe:5c:
b4:45:3d:28:74:4d:f9:bb:d6:ee:f1:8c:b0:b1:5a:
5d:c2:1e:8f:2e:b0:87:ae:eb:85:bc:26:ce:1c:d7:
da:f6:91:05:0b:59:30:06:71:74:43:ca:e4:c8:f1:
e4:37:61:48:69:87:3a:72:4e:ed:79:4d:0c:cb:62:
5c:43:4f:37:a4:b0:16:27:7a:ee:c4:bd:b9:f5:98:
2c:7c:b9:ae:98:89:33:4b:87:a8:c9:c8:d0:04:93:
6e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F1:D2:18:E2:0C:15:5B:BA:FF:A1:59:4B:9D:89:D5:57:53:5A:82
X509v3 Authority Key Identifier:
keyid:D2:05:CE:AF:2B:36:AD:9F:E5:19:06:9E:86:B9:4E:36:D2:EC:4B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gXOrys2rZ_lGQaehrlONtLsS94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7fa172-8e55-4711-8c75-18f8925c6665/1/0gXOrys2rZ_lGQaehrlONtLsS94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7fa172-8e55-4711-8c75-18f8925c6665/1/0gXOrys2rZ_lGQaehrlONtLsS94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c9:e8:ae:a4:a6:d0:ab:79:ce:b5:13:80:91:03:b1:ec:21:
14:fd:99:fe:5f:21:c7:80:08:75:15:95:8e:90:57:e9:1b:e4:
95:9b:9c:4c:cd:ce:1e:85:18:0d:8f:6c:99:0b:08:62:1b:94:
00:0c:cf:63:46:43:9f:fc:40:2e:93:02:a0:58:8f:02:de:65:
bf:75:e8:eb:54:18:23:5d:9f:92:ad:43:9f:f8:c1:bb:6b:e8:
f0:a8:42:38:f7:b0:f6:48:f4:13:ef:7e:5f:84:3f:67:ec:30:
c8:92:f7:63:7f:c6:9a:b7:45:1c:a5:47:37:55:16:3f:7d:94:
05:85:50:b7:81:8e:0e:ce:97:63:41:9a:e3:1d:ea:94:e3:af:
03:1a:dc:46:6e:23:a1:2a:f4:7d:4b:67:45:ef:e0:22:3e:f1:
0a:49:5f:e3:06:fa:75:e4:5e:04:01:68:20:88:7b:8a:14:11:
8c:2b:d1:76:32:4d:25:3c:56:8b:88:ec:0b:2a:a9:05:08:73:
6b:7b:20:2b:e1:d3:ff:5a:0e:04:b2:77:99:e2:7c:f9:8a:2c:
75:1e:c3:0f:90:19:db:0d:32:bd:39:82:05:27:a0:59:9f:ef:
bb:16:09:22:fe:6d:4d:05:86:3a:52:c4:da:ae:08:86:8b:cc:
79:c3:42:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:48 2026 by rpki-client