Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft
File: 0PMTtkDG3nU1uB7GjEDubsmf_00.mft (raw, json)
Hash identifier: 4Li1py4u9d+guW9az6FMNT+P1PfdCktP2qrmfeGV7wA=
Subject key identifier: DF:36:99:C2:9F:0A:21:DB:72:44:8E:12:D4:2F:62:37:9F:1C:08:CF
Authority key identifier: D0:F3:13:B6:40:C6:DE:75:35:B8:1E:C6:8C:40:EE:6E:C9:9F:FF:4D
Certificate issuer: /CN=d0f313b640c6de7535b81ec68c40ee6ec99fff4d
Certificate serial: 019F1830F1D42CA3A8406F198A7F6D33533C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PMTtkDG3nU1uB7GjEDubsmf_00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft
Manifest number: 0AB9
Signing time: Tue 30 Jun 2026 11:01:28 +0000
Manifest this update: Tue 30 Jun 2026 11:01:28 +0000
Manifest next update: Wed 01 Jul 2026 11:01:28 +0000
Files and hashes: 1: 0PMTtkDG3nU1uB7GjEDubsmf_00.crl (hash: cL8SeT+TnXqNqLdq126dL255vB8GOyY9kwCuwvKh2gU=)
2: hGkf_qyDhU37-o9sEDt63JFfVyM.roa (hash: d3kiFkXGyIU+fZhFKa/d+1Nny2/miOmiUkEEuvkDS5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PMTtkDG3nU1uB7GjEDubsmf_00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:f1:d4:2c:a3:a8:40:6f:19:8a:7f:6d:33:53:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f313b640c6de7535b81ec68c40ee6ec99fff4d
Validity
Not Before: Jun 30 11:01:28 2026 GMT
Not After : Jul 1 11:01:28 2026 GMT
Subject: CN=df3699c29f0a21db72448e12d42f62379f1c08cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d7:82:6e:6b:f9:47:77:aa:ed:0b:6b:13:f5:
60:e4:a1:0d:e9:fe:6a:53:14:71:5d:b9:7b:36:80:
36:1f:01:4f:a6:ac:9a:84:1d:c2:29:40:fc:4c:43:
1e:89:d1:c7:b8:1b:e0:c2:6d:80:a1:f7:04:b3:90:
22:7e:17:07:02:d4:d7:fc:a6:59:08:5a:b0:1d:78:
61:6f:0f:96:52:f0:af:d0:90:30:cd:b4:bb:90:44:
6b:64:60:18:27:85:d9:08:a9:a7:60:ce:0c:38:b1:
2d:fe:8c:c7:2f:28:06:b1:7a:c6:77:e0:7d:0c:c1:
06:9a:32:70:9f:ce:63:3d:87:8b:49:6d:2d:15:ca:
08:cc:59:5d:36:29:d3:33:5b:86:1d:cb:e1:1d:b4:
87:29:69:02:a9:65:41:bd:ea:c0:b4:79:6b:9c:b8:
70:cd:ac:a2:23:73:05:8f:e4:40:8c:fa:9b:4a:22:
82:2f:91:2d:7b:34:bd:60:dd:8f:46:aa:ec:98:b1:
fd:c2:4c:8b:e3:10:2d:c7:ba:76:c0:84:0d:4f:98:
9e:d8:ec:98:0c:af:15:ed:f2:29:d1:b5:c4:50:3c:
df:83:ad:51:4b:8e:82:18:c2:32:9b:bc:74:73:bd:
79:d6:93:a4:3c:b3:13:e8:2e:9f:d6:19:38:54:64:
62:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:36:99:C2:9F:0A:21:DB:72:44:8E:12:D4:2F:62:37:9F:1C:08:CF
X509v3 Authority Key Identifier:
keyid:D0:F3:13:B6:40:C6:DE:75:35:B8:1E:C6:8C:40:EE:6E:C9:9F:FF:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PMTtkDG3nU1uB7GjEDubsmf_00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:99:1d:fa:7e:d7:54:22:a3:f6:8c:ef:60:91:0d:39:c9:05:
42:0f:80:da:8b:bc:ac:b5:1f:a5:56:6e:87:81:14:1b:88:59:
f4:5e:61:4f:7b:be:3f:1b:d9:b9:da:08:fd:33:6f:66:13:8b:
92:7a:01:1d:e9:aa:3c:93:b4:fd:ac:37:3f:ed:b7:20:4f:8c:
b9:6a:23:32:fd:a9:f1:4a:68:27:bd:62:d4:8d:ac:bc:be:3d:
f3:23:f7:0f:5d:90:71:c4:ab:d3:81:b3:23:96:15:83:e9:d5:
bb:97:c9:f6:c4:c0:c6:c6:81:7d:58:19:0e:f5:0a:46:fb:9b:
01:84:9b:70:9e:92:e4:81:39:17:e7:31:bb:93:bd:08:05:b5:
95:26:9d:42:f4:5f:43:47:64:a1:43:08:b8:78:1b:97:eb:66:
75:98:05:b6:81:5e:ea:41:e6:fe:9c:bc:7e:70:54:60:7a:88:
47:2b:ff:bf:10:d5:6b:0d:bd:27:f3:f3:83:76:6a:9f:07:19:
7e:01:a6:e6:1e:32:2b:f8:8d:be:5e:84:bc:60:23:92:32:cd:
6e:4e:a3:91:1a:cb:04:16:55:2e:b2:fa:3f:36:62:8a:4c:71:
ea:af:3b:a1:9b:b1:be:f8:d4:ad:a6:2b:95:4c:35:ce:6b:97:
4d:a0:b4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:29:58 2026 by rpki-client