Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/5dbfe1-e49f-421b-a755-a983866070cb/1/0aJ0TmbValnwtKDjDNEUqusVJzM.mft
File: 0aJ0TmbValnwtKDjDNEUqusVJzM.mft (raw, json)
Hash identifier: fyf9pCY41FI+I6DoRIyFM70jI4tp9OL4bp0VVSJL/Y0=
Subject key identifier: EB:8D:B4:E3:99:BE:46:AC:97:62:A3:64:C2:9D:9C:81:5B:5F:05:73
Authority key identifier: D1:A2:74:4E:66:D5:6A:59:F0:B4:A0:E3:0C:D1:14:AA:EB:15:27:33
Certificate issuer: /CN=d1a2744e66d56a59f0b4a0e30cd114aaeb152733
Certificate serial: 01A0268ED10D7CBB3BBDA1AF1BCA17C0B931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0aJ0TmbValnwtKDjDNEUqusVJzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5dbfe1-e49f-421b-a755-a983866070cb/1/0aJ0TmbValnwtKDjDNEUqusVJzM.mft
Manifest number: 63
Signing time: Fri 21 Aug 2026 23:01:28 +0000
Manifest this update: Fri 21 Aug 2026 23:01:28 +0000
Manifest next update: Sat 22 Aug 2026 23:01:28 +0000
Files and hashes: 1: 0aJ0TmbValnwtKDjDNEUqusVJzM.crl (hash: lk6dQ1hUEqzDT2KCDMqKmk4n/jWMpJqBkfhjcdvR6bQ=)
2: ceyUVnmYWQ_dIwIKpX64k6Y4OLY.roa (hash: ptX3G2iVrVq3xSTlraGgIQKayhp9ftrtJBYKoRwKsRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5dbfe1-e49f-421b-a755-a983866070cb/1/0aJ0TmbValnwtKDjDNEUqusVJzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5dbfe1-e49f-421b-a755-a983866070cb/1/0aJ0TmbValnwtKDjDNEUqusVJzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0aJ0TmbValnwtKDjDNEUqusVJzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 23:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:26:8e:d1:0d:7c:bb:3b:bd:a1:af:1b:ca:17:c0:b9:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1a2744e66d56a59f0b4a0e30cd114aaeb152733
Validity
Not Before: Aug 21 23:01:28 2026 GMT
Not After : Aug 22 23:01:28 2026 GMT
Subject: CN=eb8db4e399be46ac9762a364c29d9c815b5f0573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:66:0b:a0:54:b0:31:ea:71:0e:7c:d7:7d:42:
f6:15:ac:ef:c3:42:ae:38:bc:1e:93:f9:24:83:22:
29:5b:bd:52:3a:01:ed:85:e9:8d:b8:3f:40:b0:0b:
dc:ef:10:21:17:98:a3:5d:d6:b5:cd:2b:d9:7c:95:
ce:c7:9e:4b:df:ec:c2:45:5d:73:78:9e:a2:fa:ce:
6a:da:4f:68:c6:76:86:1a:c8:35:a8:8c:d0:5f:d1:
dc:f9:2b:4d:6b:c6:04:39:48:bf:5c:63:7d:7b:8e:
72:98:7e:43:f3:d6:6a:3e:0c:d9:da:36:b3:29:24:
b8:c5:b3:62:1e:2d:21:07:42:9d:ea:82:d6:14:03:
2a:03:2a:2f:0b:e7:ea:46:24:cb:93:ea:c9:0b:42:
7a:34:51:bc:94:f3:9f:9f:29:66:77:21:be:21:a0:
e1:4d:ac:ad:58:66:d7:52:32:93:ad:92:57:c5:bd:
ff:f0:d1:69:ba:66:9a:b5:9c:91:00:76:3c:4e:9e:
5b:60:06:b2:51:9a:70:1e:ca:1e:02:51:76:5e:c7:
08:f6:ab:d0:ae:20:c7:21:52:38:10:d4:19:a1:0b:
79:04:de:c8:c7:e6:e8:5b:31:a8:78:f8:c2:a0:81:
8d:e0:b8:5e:8a:bc:28:f9:57:cc:5c:5c:e6:f4:b2:
a3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:8D:B4:E3:99:BE:46:AC:97:62:A3:64:C2:9D:9C:81:5B:5F:05:73
X509v3 Authority Key Identifier:
keyid:D1:A2:74:4E:66:D5:6A:59:F0:B4:A0:E3:0C:D1:14:AA:EB:15:27:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0aJ0TmbValnwtKDjDNEUqusVJzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5dbfe1-e49f-421b-a755-a983866070cb/1/0aJ0TmbValnwtKDjDNEUqusVJzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5dbfe1-e49f-421b-a755-a983866070cb/1/0aJ0TmbValnwtKDjDNEUqusVJzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b1:91:cb:2a:bd:89:7f:87:35:8d:f2:88:96:3a:43:3a:cd:
f5:54:9a:88:14:fe:56:30:99:b2:ad:f7:0f:ac:20:be:28:01:
8e:59:c1:14:4d:0e:44:28:d2:08:86:ad:03:d1:18:74:47:d5:
62:19:14:ec:98:5d:88:b8:89:1d:51:27:66:d8:ec:1f:88:5d:
46:5b:3b:3f:a7:f2:29:85:db:6c:e9:60:53:61:c0:a3:1f:74:
81:81:8a:e4:c3:b2:a8:3b:35:ab:30:c6:70:e8:6e:9e:bb:b7:
db:af:6d:66:31:51:cb:cc:72:1a:06:62:73:19:7b:7b:8b:4e:
72:6b:fd:7f:80:3e:d8:18:28:5e:eb:31:57:c3:5e:bf:5e:26:
3e:54:ca:35:e6:ef:70:94:58:a0:1f:f5:55:8a:3b:bb:a7:26:
a4:be:71:b1:d7:de:9b:0c:c1:29:73:bd:ec:ab:8f:ac:97:cf:
e6:4c:7c:6a:46:3e:28:40:8b:ec:89:13:7d:08:e1:51:c7:fb:
fd:47:d5:dd:fb:43:36:f6:aa:34:d3:c0:91:7a:f5:1e:bb:ec:
9c:c5:ae:4a:ec:12:7a:6d:cd:ac:0f:47:35:4c:6a:64:96:19:
b2:65:f2:9d:f4:53:8b:8d:af:17:60:8e:67:5e:32:6d:75:97:
f1:10:84:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:00:53 2026 by rpki-client