Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
File: 0-2n3wX226CeOefUvex7rg7_urA.mft (raw, json)
Hash identifier: aDhqleLwkUDKT/L/HDQIqC5+ejfKGgl+P8474aMiakU=
Subject key identifier: 4D:0C:34:D0:2A:3D:EC:ED:5D:79:19:0E:63:3C:95:43:ED:AF:65:69
Authority key identifier: D3:ED:A7:DF:05:F6:DB:A0:9E:39:E7:D4:BD:EC:7B:AE:0E:FF:BA:B0
Certificate issuer: /CN=d3eda7df05f6dba09e39e7d4bdec7bae0effbab0
Certificate serial: 019FA2973F72B1EC8E561D1AE6E86610CBC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
Manifest number: 06D8
Signing time: Mon 27 Jul 2026 08:00:48 +0000
Manifest this update: Mon 27 Jul 2026 08:00:48 +0000
Manifest next update: Tue 28 Jul 2026 08:00:48 +0000
Files and hashes: 1: 0-2n3wX226CeOefUvex7rg7_urA.crl (hash: jwjkvxR2JXObLjNB+UN/rv+NFYLhoEhMEE763jtYzpM=)
2: qTWraqPBRkXUgfYW4gfB3AS-jm0.roa (hash: Rbt0ZTsq9hRwXO+cnDLn20WShDhAg5xFObZyVKiajFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:97:3f:72:b1:ec:8e:56:1d:1a:e6:e8:66:10:cb:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3eda7df05f6dba09e39e7d4bdec7bae0effbab0
Validity
Not Before: Jul 27 08:00:48 2026 GMT
Not After : Jul 28 08:00:48 2026 GMT
Subject: CN=4d0c34d02a3deced5d79190e633c9543edaf6569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:13:b9:02:be:d3:d3:5e:05:d8:fa:5d:de:da:
25:81:06:f8:3d:ac:9f:c6:b3:39:bf:17:a0:71:fa:
e9:b9:82:59:ab:5c:d8:05:b7:80:c5:ea:58:b7:86:
61:c4:a7:0b:80:69:c4:90:e3:ff:8c:4d:ec:70:0b:
5d:fe:dc:a7:a9:f2:b7:29:b3:d7:a8:de:64:82:66:
11:57:65:18:da:8f:23:75:e8:b1:0c:87:7e:4b:32:
f9:e7:4b:03:37:f3:c7:c8:d7:bc:4a:15:4b:9f:d3:
90:75:2d:1f:62:15:3e:b9:50:61:bd:c9:98:09:e8:
66:ea:f4:7b:77:e3:68:03:7e:8b:ca:64:b7:a7:30:
84:80:ac:37:1b:5e:93:8e:cd:f9:43:bd:4d:fa:ac:
d0:e7:96:f4:1f:13:a5:4b:52:bb:65:a8:49:cb:75:
4e:10:a9:bd:10:f4:85:21:92:d7:39:e0:13:d0:07:
af:d1:d9:3e:99:b0:30:60:8e:d7:32:1b:5d:70:3d:
09:13:29:19:47:98:81:eb:ac:46:9a:2e:da:6c:b6:
82:46:b9:69:a4:fb:07:99:c3:41:e9:9c:9b:87:8e:
2b:bd:8e:71:b7:dc:0c:f5:3f:de:bd:18:df:ec:33:
a1:de:f3:ea:8c:4f:6d:f9:24:99:7b:bd:59:14:80:
9e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:0C:34:D0:2A:3D:EC:ED:5D:79:19:0E:63:3C:95:43:ED:AF:65:69
X509v3 Authority Key Identifier:
keyid:D3:ED:A7:DF:05:F6:DB:A0:9E:39:E7:D4:BD:EC:7B:AE:0E:FF:BA:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:68:e9:3a:1d:d2:21:1f:fa:48:c3:19:2f:a1:5e:6d:71:8d:
dc:a0:be:34:09:68:3d:26:84:2d:95:61:41:31:00:c3:40:a6:
80:90:ef:2b:4d:37:7c:a3:ff:3a:7c:dd:47:21:7e:54:4b:e2:
0a:31:5a:1f:df:d9:5c:25:e5:5f:47:1c:2f:ea:98:88:64:0e:
7b:30:fa:2f:80:ea:ed:3c:e1:c0:c0:fe:a6:89:02:59:b5:2a:
f0:10:1e:8e:bc:80:cb:20:e1:c3:f1:63:b6:87:89:28:56:36:
f4:54:0d:fc:40:34:61:83:11:ca:f1:f9:8e:52:fa:df:8d:c7:
5a:9a:4d:6c:f7:6b:bd:ab:20:90:d5:d0:c2:8a:f3:a4:da:dc:
a4:e9:57:78:ea:f4:73:a5:2f:c0:a5:5c:f3:b7:e0:89:27:25:
63:3c:2e:70:ff:f4:3f:95:41:69:e7:8e:1b:ba:59:09:48:92:
2a:67:52:ae:e3:c5:c4:ef:89:3d:0d:53:13:5b:ba:e8:64:8a:
5a:98:ab:5e:4d:6d:05:75:8d:46:a8:7d:46:42:3e:f1:c6:5f:
47:3f:c6:b1:20:66:47:c0:69:bf:a6:a0:9e:15:c1:92:a0:55:
e6:c9:4c:5d:e6:46:88:dc:fe:cc:76:e4:49:d5:53:f6:49:ea:
a0:46:e7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:35:39 2026 by rpki-client