
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
File: 0pigcUzBvyWsfH8c9sKIbIxhkqM.mft (raw, json)
Hash identifier: dR8G3nh1rXOM1oRc2P8IRHKSrunXCKqjA1Yi90pIvvU=
Subject key identifier: 7A:B5:DC:26:0B:31:F3:39:10:98:75:60:0E:DD:BA:01:9C:EB:46:2D
Authority key identifier: D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3
Certificate issuer: /CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3
Certificate serial: 01A08B316BE2B96D091CE2FAE96A7CAC3676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
Manifest number: 07C3
Signing time: Thu 10 Sep 2026 12:01:06 +0000
Manifest this update: Thu 10 Sep 2026 12:01:06 +0000
Manifest next update: Fri 11 Sep 2026 12:01:06 +0000
Files and hashes: 1: 0pigcUzBvyWsfH8c9sKIbIxhkqM.crl (hash: nqQjhQy1/I5+RgAygYQdtimmMy26HuRG55jbSRx4bKs=)
2: cMXu7WrvsmC-lThLKVR5Js2GYXY.roa (hash: EpVFpanfzZyTV+MCY5Rt4j7mVt0TS3sr2EacwZSVOVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:6b:e2:b9:6d:09:1c:e2:fa:e9:6a:7c:ac:36:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3
Validity
Not Before: Sep 10 12:01:06 2026 GMT
Not After : Sep 11 12:01:06 2026 GMT
Subject: CN=7ab5dc260b31f339109875600eddba019ceb462d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:aa:49:48:d6:d1:4d:67:5a:ab:05:4a:c7:a7:
65:c7:98:c7:7a:18:d2:80:c6:6e:db:85:41:2e:6a:
90:bf:15:8e:00:73:cc:24:04:9c:46:91:e8:b7:d8:
0c:94:74:2b:a0:40:de:2f:a7:a1:4a:10:b4:af:71:
9b:78:e7:98:a9:91:10:43:6d:10:00:79:b2:f6:08:
b0:46:d0:22:16:e7:e4:d8:29:5a:fe:79:8d:91:d3:
2a:08:ef:63:13:cf:dd:da:48:2a:90:18:c8:48:04:
56:58:b6:5d:d4:85:5c:bb:80:47:f2:9b:44:fa:ec:
e9:17:d5:11:64:6f:bd:7c:20:76:ad:f1:7f:a5:81:
83:88:45:a9:8c:31:a1:28:a6:ac:54:65:a9:3a:30:
55:ff:54:9a:34:a1:f9:6f:2c:76:9b:5e:65:3c:1d:
b1:d4:20:21:16:48:0e:cc:24:59:38:3b:20:a0:17:
1f:9a:34:3d:c9:d2:d5:d4:ab:0a:40:3d:ad:d4:ad:
b8:69:30:b0:c9:1d:e8:a6:4b:22:dc:b9:fd:6d:1d:
22:00:7d:a0:2a:26:b4:a5:27:72:94:61:24:b2:db:
3a:e6:9b:a0:24:42:bd:fd:17:cb:e7:d4:03:e5:21:
98:1a:5d:45:e0:34:98:7b:bf:71:92:c7:4e:00:de:
5d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B5:DC:26:0B:31:F3:39:10:98:75:60:0E:DD:BA:01:9C:EB:46:2D
X509v3 Authority Key Identifier:
keyid:D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d4:5e:8f:50:74:44:e4:75:eb:f0:9e:d3:f1:61:f4:52:26:
50:38:2c:05:c4:30:94:7e:23:8a:af:60:76:5f:eb:89:03:24:
be:b9:db:b2:d7:4e:2d:ad:85:f2:05:2f:ad:d1:5a:d7:29:b4:
b2:f4:90:5f:b4:19:ed:50:64:e1:cc:ed:74:28:2c:ef:12:53:
68:71:6d:f4:5c:54:f3:e6:b9:84:60:f4:66:ce:73:bb:c7:47:
e4:af:98:31:b7:a8:89:7a:12:87:84:07:40:09:9d:96:e6:69:
c7:03:56:e6:41:4e:d2:87:b8:33:a1:f1:bd:da:37:71:b7:81:
2c:c8:8e:49:65:af:f4:1d:cd:b8:33:84:86:04:89:fc:f0:62:
23:88:12:26:82:5d:5b:59:ba:69:0b:07:a3:89:e1:88:4d:c0:
9f:6c:45:59:f1:90:83:7f:9b:ba:cd:42:1c:ff:9f:8d:70:c2:
88:ac:b0:3a:e4:26:59:8d:cf:a8:f2:77:42:3a:f6:72:e8:e4:
74:91:27:82:d4:31:ab:ec:63:01:97:8a:e2:a1:1f:ea:dd:2a:
3e:77:81:24:c4:e8:93:c7:35:e6:bc:89:de:8d:e7:4e:e2:b3:
91:e1:8a:81:e2:a0:6e:ef:5e:f1:30:4b:eb:6c:68:4b:76:31:
b6:31:d9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:27:42 2026 by rpki-client