Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
File: 0lgUed7jtZlPEcnZVkYxv1pATAc.mft (raw, json)
Hash identifier: 0eVqe3PIv7rMAxkRs6pUjmHDKK/TkO0GoVMWT8FngoY=
Subject key identifier: 52:A3:7D:7D:D3:95:4E:B2:BD:9F:42:DE:38:B5:51:39:41:06:78:FC
Authority key identifier: D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
Certificate issuer: /CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Certificate serial: 01A0005CA1A68DC330C3B3C49331C888A5FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
Manifest number: 0B0D
Signing time: Fri 14 Aug 2026 13:01:05 +0000
Manifest this update: Fri 14 Aug 2026 13:01:05 +0000
Manifest next update: Sat 15 Aug 2026 13:01:05 +0000
Files and hashes: 1: 0lgUed7jtZlPEcnZVkYxv1pATAc.crl (hash: BbNwgPjWL72t+/yosnkxUL25XR+1HGp0MkUcSOB1Gzk=)
2: _anBuNNw0qAbfJJyR7NUzCXshEI.roa (hash: u/OzH4PvqgIz0IcQamVppLorgGwznO76WkLllc9zkBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:a1:a6:8d:c3:30:c3:b3:c4:93:31:c8:88:a5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Validity
Not Before: Aug 14 13:01:05 2026 GMT
Not After : Aug 15 13:01:05 2026 GMT
Subject: CN=52a37d7dd3954eb2bd9f42de38b55139410678fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:bf:df:39:59:83:b6:18:f9:28:b4:2e:fc:c3:
fa:ee:db:9d:39:d9:bc:9d:d6:13:37:5b:0c:d0:ee:
21:fb:bc:e2:83:b9:93:02:64:10:f5:f9:29:8a:8c:
bd:94:39:05:d2:93:a7:e8:53:24:0e:75:13:e3:d2:
ef:c1:43:9b:6f:86:2b:1c:27:db:e8:62:63:70:f5:
9d:d3:67:44:1a:98:54:59:0b:ed:fe:ff:7d:54:5b:
c0:2c:bc:b9:f1:fd:82:1f:c2:e0:48:87:df:7f:ab:
14:c4:2f:4d:f3:d4:8a:ef:9f:c5:5b:0a:4e:97:e1:
66:bd:6b:ec:d0:ce:46:d8:a6:2a:13:d9:af:50:c9:
e0:09:68:d1:dd:ab:38:7e:7d:29:76:17:99:ea:ea:
6d:72:88:00:be:9d:c9:6e:8d:aa:48:7a:f5:e2:4f:
1f:ed:3b:12:d8:12:80:3b:50:f4:14:e2:2e:77:fa:
19:0e:c9:64:31:5b:84:14:c4:58:69:a3:ea:40:69:
06:68:67:3a:26:c1:f0:35:28:7b:7c:91:33:26:1a:
9c:a5:dd:e3:e6:f4:5c:62:d4:29:2e:7f:84:07:c5:
3f:5f:b7:8e:c5:3c:e9:97:dd:39:17:69:9e:61:60:
1d:11:02:d4:c8:e2:27:c4:fd:b8:40:d6:11:e0:35:
ff:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A3:7D:7D:D3:95:4E:B2:BD:9F:42:DE:38:B5:51:39:41:06:78:FC
X509v3 Authority Key Identifier:
keyid:D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e8:bd:29:82:a3:df:f3:09:22:62:e6:61:6e:c1:0e:db:3c:
b3:35:c2:85:86:26:f8:05:01:64:ef:03:7e:b3:0e:e2:5b:04:
20:7d:19:33:d1:44:53:0e:a8:06:f5:ff:67:72:a9:4c:17:11:
79:41:1f:cb:e6:90:98:b5:9b:ca:23:ad:e1:a6:f1:3f:f2:f9:
8a:ab:d6:cd:76:7c:b8:55:19:09:12:96:c1:4d:eb:56:83:70:
51:df:81:0f:25:07:c1:a3:a2:b6:f2:80:cf:92:54:aa:a1:54:
e1:b4:56:b8:b8:b0:8a:d3:e6:da:f7:e3:f9:fb:a6:b5:e9:ad:
a1:7a:62:d4:99:59:d7:d3:4e:f6:e6:5d:10:95:91:c3:ad:08:
24:9a:70:ae:1c:cf:69:30:92:92:29:dd:12:5b:ce:bb:c8:1a:
9e:0c:fd:da:8e:5c:84:83:95:cb:2a:b8:5e:82:0c:58:71:4a:
58:82:25:df:32:d4:5c:2b:c3:4e:d9:5c:cb:20:6a:6a:53:40:
9a:ed:ee:1e:48:1a:2f:4a:49:f5:06:74:01:79:4e:c1:22:79:
ed:4a:d1:86:43:7c:fb:32:69:50:eb:63:ca:a8:16:fb:fc:14:
b5:77:d0:b7:ce:65:fe:19:96:08:c4:e3:3a:a2:d9:b1:89:de:
30:75:57:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:05 2026 by rpki-client