Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
File: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft (raw, json)
Hash identifier: VMS+PuAE3XzJ7TpL/zJq7exoE+IImXfb6UmUvBZdpWQ=
Subject key identifier: 7E:68:7B:1A:3D:1E:FB:73:57:02:F7:B0:8D:1C:D9:7A:CB:E0:8A:AB
Authority key identifier: D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
Certificate issuer: /CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Certificate serial: 019F37846A1FAB5866FCE39670D8E1BD1607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
Manifest number: 16BE
Signing time: Mon 06 Jul 2026 13:00:52 +0000
Manifest this update: Mon 06 Jul 2026 13:00:52 +0000
Manifest next update: Tue 07 Jul 2026 13:00:52 +0000
Files and hashes: 1: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl (hash: lqG1i4FmmXKCEZ7YElWWAnvnTwpujYSHYNX0O1JyruM=)
2: 1-fLD9auB23Q-KgYeQIubXO96o4Q.roa (hash: /JJTz3wE1LRLJ7bz0AIRldwzfH3lc1HU/FwtYIJiaSU=)
3: T-8JhhcHQ5cIwEg6IG4tP0d0W4I.roa (hash: 9CdFc+e0Ar1W8fwX0HTyCIb5Mdz7Fe3CEQ/bMI8Efhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:84:6a:1f:ab:58:66:fc:e3:96:70:d8:e1:bd:16:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Validity
Not Before: Jul 6 13:00:52 2026 GMT
Not After : Jul 7 13:00:52 2026 GMT
Subject: CN=7e687b1a3d1efb735702f7b08d1cd97acbe08aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:58:21:be:11:13:44:ca:1d:5e:30:3e:18:65:
d5:6a:d1:4c:0a:4b:09:c6:a4:41:a7:5e:55:17:47:
b1:94:6e:59:4c:2f:2b:6a:53:66:bf:c0:4e:b4:84:
4e:29:8f:f3:29:04:25:b8:58:ce:81:b1:98:95:d7:
ae:a8:56:aa:17:68:ba:99:f4:8b:73:39:06:7c:ca:
d5:39:f8:6c:0a:4e:87:ae:08:18:d7:58:f4:b6:3d:
6e:ef:6b:52:d1:99:24:fb:f1:93:2c:e8:c7:42:cb:
59:e5:16:38:93:63:bc:90:9d:87:ab:a4:74:65:20:
59:9f:ee:cf:3c:18:11:bc:17:85:53:e6:70:d0:24:
42:ff:00:d1:40:4e:9c:e2:5d:5f:6f:ed:9d:81:95:
da:09:15:ea:73:8a:89:4b:6e:7b:a6:fb:5c:5b:61:
24:bd:97:9e:35:9f:c2:09:d4:27:ae:80:3c:b1:39:
06:9c:67:db:fc:06:2a:57:2e:86:ff:91:63:44:40:
0d:0c:86:55:96:ad:c4:32:7a:41:73:58:f5:d9:63:
e7:c8:a0:5d:5c:b0:03:36:0e:d3:b7:a4:0f:2c:82:
1d:e5:18:95:1a:44:2d:34:9e:18:92:3d:02:f8:ac:
5e:9a:a1:39:9f:ac:3f:9f:69:7b:23:2d:c4:cb:24:
c6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:68:7B:1A:3D:1E:FB:73:57:02:F7:B0:8D:1C:D9:7A:CB:E0:8A:AB
X509v3 Authority Key Identifier:
keyid:D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:14:75:5f:1d:db:68:f4:3c:13:fc:dd:1f:73:45:8a:c4:1c:
dd:88:64:0f:d3:9f:54:52:6b:54:ac:dd:72:b8:16:bb:4b:85:
49:af:80:bc:7b:9a:ba:f5:de:46:47:3a:73:a7:2a:35:68:1a:
3e:07:b8:2d:4e:f6:37:76:47:ce:58:1c:1c:83:07:bd:52:76:
3f:c5:98:5b:da:61:97:5d:76:4c:33:2f:76:b6:f0:78:e0:97:
28:e1:b6:12:fd:07:60:6b:0e:ca:d4:79:fb:3b:90:04:0e:08:
a3:ee:d7:9b:30:82:16:13:eb:54:d0:f4:28:63:54:dd:22:f4:
84:fb:f8:8a:0a:85:db:eb:da:f4:96:f4:f3:c0:e5:40:b5:2d:
76:0d:82:46:c7:92:20:64:bf:79:87:6e:a9:c7:9d:4e:6d:4b:
5e:ac:bb:d8:08:4e:2f:78:07:09:52:62:86:cd:c2:69:cd:b3:
d0:e0:5b:06:4d:98:d1:27:51:1a:4e:44:72:f4:fc:a0:89:48:
df:93:69:55:2e:12:bf:27:29:ab:61:8d:61:ba:76:58:8e:37:
a7:fe:a0:be:5a:07:e8:d0:c6:fa:a2:82:3b:7c:8e:2a:09:85:
15:d4:b9:3b:14:2c:a6:0f:7b:0e:b9:22:5e:ca:26:94:c4:e1:
c4:54:66:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:29:13 2026 by rpki-client