Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
File: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft (raw, json)
Hash identifier: avMnrw0ErvPxr/VRu5xv1vv2mC1azqHszbZ1tFjWTxc=
Subject key identifier: EA:45:EA:BC:C3:10:36:0C:CF:5E:F3:DF:FC:7B:BA:7E:18:84:C2:E5
Authority key identifier: D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
Certificate issuer: /CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Certificate serial: 01A021313EBCD740F72A01837F0FD9BE34B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
Manifest number: 1737
Signing time: Thu 20 Aug 2026 22:01:10 +0000
Manifest this update: Thu 20 Aug 2026 22:01:10 +0000
Manifest next update: Fri 21 Aug 2026 22:01:10 +0000
Files and hashes: 1: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl (hash: KgZ0p/sAm6yEGnIsr7EAfbt6BiFeuQp4HucVw+5Co+A=)
2: 1-fLD9auB23Q-KgYeQIubXO96o4Q.roa (hash: /JJTz3wE1LRLJ7bz0AIRldwzfH3lc1HU/FwtYIJiaSU=)
3: T-8JhhcHQ5cIwEg6IG4tP0d0W4I.roa (hash: 9CdFc+e0Ar1W8fwX0HTyCIb5Mdz7Fe3CEQ/bMI8Efhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:21:31:3e:bc:d7:40:f7:2a:01:83:7f:0f:d9:be:34:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Validity
Not Before: Aug 20 22:01:10 2026 GMT
Not After : Aug 21 22:01:10 2026 GMT
Subject: CN=ea45eabcc310360ccf5ef3dffc7bba7e1884c2e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6a:33:09:14:5b:a5:f0:1e:fb:1b:ac:ee:c2:
b9:b5:51:44:78:34:9b:dd:df:b8:a8:e4:fb:c2:b3:
ab:e5:45:83:14:08:00:88:64:7a:31:0f:c4:c5:41:
0b:dc:7a:9d:c5:08:6b:d6:81:02:38:b8:a0:67:cf:
d3:9b:c8:5e:f3:97:47:9d:59:06:43:5a:f6:8a:98:
f5:e0:a4:69:46:4f:bc:d6:c1:b5:a2:a8:e5:2c:f5:
eb:21:70:21:3b:38:4d:a7:ab:2f:d1:ad:0b:7f:f7:
66:88:a2:5a:27:fb:4b:e2:02:a3:a2:64:b2:e5:6f:
c8:5c:b2:53:12:6c:47:64:bb:82:ce:52:c8:40:1d:
5b:5e:7d:65:e4:52:02:e9:6d:4c:df:b4:d3:d8:e6:
71:1b:65:8d:f9:ba:77:21:a2:eb:4a:71:8b:cb:14:
b1:07:bc:80:0d:8e:5c:c0:23:fa:2b:9b:9a:bb:2a:
da:90:0a:03:d1:2c:76:78:74:68:c5:e6:5b:b1:7c:
df:d8:38:24:d9:ff:77:28:e2:6e:20:19:0e:e8:55:
24:f5:9c:3c:d6:4e:01:d5:28:50:73:2b:b2:87:a8:
70:f1:bb:4e:40:ff:98:9e:c9:6a:2e:6d:09:31:bf:
ea:6c:98:a4:f3:54:74:74:c3:6b:57:1d:f9:f9:0e:
01:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:45:EA:BC:C3:10:36:0C:CF:5E:F3:DF:FC:7B:BA:7E:18:84:C2:E5
X509v3 Authority Key Identifier:
keyid:D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ef:45:53:7d:ff:22:16:dd:72:91:d4:2c:7b:b3:1f:91:78:
74:c2:e5:9b:b1:16:3e:4c:d7:d9:06:fb:ef:3e:fb:62:f9:3d:
e8:36:97:41:e8:c4:fc:3c:2d:7e:06:70:17:53:c7:93:1a:11:
19:a0:84:ff:d4:e8:1d:7e:dc:04:02:58:ea:13:79:10:c4:c7:
53:a2:a8:71:6d:89:38:9e:71:10:3e:77:68:7f:87:2c:77:b4:
8d:5a:c8:f5:85:67:d3:df:00:16:2a:d8:41:d3:ad:d1:17:6d:
a9:ee:bc:c3:c1:b8:14:41:86:6b:8b:dc:9e:a6:38:b3:6b:d1:
00:ce:83:b8:5e:0e:7c:a6:5e:c3:19:65:06:6c:74:41:6e:1c:
b8:b9:cb:5c:85:07:91:78:cc:f4:aa:91:30:67:78:e5:53:72:
1c:e4:88:14:41:4e:1a:6a:18:27:70:59:ec:e7:56:aa:64:ef:
d0:01:a7:f1:3c:65:fc:3a:06:8a:99:6e:6a:ec:bf:5d:b3:80:
f6:6c:1e:2d:af:cd:bc:16:f0:47:b6:f8:c2:84:21:11:2d:87:
01:9e:d3:b7:fb:7a:8b:4f:53:af:32:9d:43:34:48:a2:89:78:
f6:3d:08:31:55:eb:48:66:67:64:0c:ec:8a:2d:07:f6:a4:78:
7e:9d:63:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:32:50 2026 by rpki-client