Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
File: 0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft (raw, json)
Hash identifier: jkTszHiJf8ZadNrdaByo4aucii1wrTtUAPVbz2CuDE8=
Subject key identifier: 66:DA:DA:F9:6F:B5:49:86:C8:A5:0F:DC:F0:18:AE:35:FB:CE:A3:38
Authority key identifier: D0:5E:D7:A5:81:47:AA:51:4C:8E:6D:AF:BC:C5:D8:75:7C:7D:32:72
Certificate issuer: /CN=d05ed7a58147aa514c8e6dafbcc5d8757c7d3272
Certificate serial: 019FDEAC9A55A18410EDE221CE20BC44E007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
Manifest number: 04DE
Signing time: Sat 08 Aug 2026 00:01:21 +0000
Manifest this update: Sat 08 Aug 2026 00:01:21 +0000
Manifest next update: Sun 09 Aug 2026 00:01:21 +0000
Files and hashes: 1: 0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl (hash: YrhWILIV8SSaygyKDRib945/Of4THMTqFcngKKyuT7Q=)
2: RRSohk2nwrUzuw9Rw-D24vHj4iw.roa (hash: cMUbM2/hxrn9h126Zdm7DYzjZuRiajCmosfkit3vk8Y=)
3: c0Owme8MxYD620tsBpkMHThjdrE.roa (hash: Gh6CiZ1DobVHlOo0S4vuXYLdOtBEQiYqATFSpfC1Cik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Aug 2026 22:03:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:de:ac:9a:55:a1:84:10:ed:e2:21:ce:20:bc:44:e0:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05ed7a58147aa514c8e6dafbcc5d8757c7d3272
Validity
Not Before: Aug 8 00:01:21 2026 GMT
Not After : Aug 9 00:01:21 2026 GMT
Subject: CN=66dadaf96fb54986c8a50fdcf018ae35fbcea338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:28:d8:a1:f2:54:c3:4f:cd:32:c1:1d:26:44:
8d:a1:50:44:f2:44:bb:73:23:cc:28:94:52:d7:f7:
bb:f8:2a:a3:ef:d7:92:ee:74:e1:69:c1:9a:d4:04:
26:2e:43:c6:cc:97:f7:bf:f6:51:89:94:08:04:37:
dd:7b:86:81:78:c5:b6:12:0a:97:73:fe:a6:ba:e6:
53:6f:48:08:ea:c5:5d:8b:5d:c9:2b:4f:05:27:7c:
fe:27:59:29:5e:a5:3b:5f:71:3f:92:4f:ab:12:5f:
19:5c:89:ef:c1:d0:bf:2b:8a:8c:21:cc:4c:65:b8:
1e:3c:fa:ee:f5:6d:ae:ba:50:e8:d3:d0:2b:92:64:
d1:59:d5:50:7b:0a:d9:8b:50:a7:be:40:5e:ed:79:
38:3f:94:d2:4c:72:9d:2e:db:d6:b8:ea:d2:ce:df:
e7:53:9e:84:eb:1f:63:30:e2:d1:8a:13:3c:1a:11:
bf:ad:0f:08:00:2b:bb:d8:1a:43:1a:7e:64:5b:66:
08:4c:00:dd:f5:65:e2:16:84:5c:b9:14:58:80:da:
5b:b4:90:e2:25:5b:e1:5e:ed:28:c1:84:88:76:cc:
79:34:4b:19:d8:b8:84:39:33:25:f1:d1:4d:1f:00:
65:32:67:a8:c1:ab:28:6e:5a:c5:2a:49:04:21:7d:
35:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DA:DA:F9:6F:B5:49:86:C8:A5:0F:DC:F0:18:AE:35:FB:CE:A3:38
X509v3 Authority Key Identifier:
keyid:D0:5E:D7:A5:81:47:AA:51:4C:8E:6D:AF:BC:C5:D8:75:7C:7D:32:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:49:98:5f:f1:1a:fb:a0:3b:06:b8:be:7d:d6:5f:92:f4:04:
4e:b0:7f:08:4f:61:df:5d:39:96:c3:c5:34:7e:02:3c:20:02:
9d:7e:61:80:47:80:1f:f4:9a:d6:9a:02:29:be:d4:2c:e3:8b:
77:36:67:ab:55:ee:90:84:13:93:9f:06:01:eb:5f:a5:5e:97:
4e:e4:f5:cb:c6:b9:73:21:33:9b:43:ff:c9:4e:e6:40:f2:b4:
20:43:5b:1a:a2:51:24:e6:c5:c6:90:23:cb:f8:a4:54:fd:bf:
de:aa:50:5d:8c:c3:54:47:3a:7d:e0:ec:53:94:83:f7:f2:99:
98:f4:b7:a0:55:2d:f7:62:bc:74:dc:b0:ca:6f:3f:a2:61:d6:
40:eb:da:fc:ea:c4:7f:66:e8:5e:4e:6a:5c:5a:76:a3:f7:de:
a3:5e:a6:e8:17:91:c9:32:73:7f:31:88:d9:68:bc:b3:ea:a5:
57:70:68:eb:4e:27:2b:db:fe:de:db:36:63:72:3c:4a:2e:e3:
31:2a:df:71:a7:e9:e8:b6:9e:c3:0f:48:d9:0f:ab:f5:dd:d5:
ea:c3:ae:79:49:ff:d7:83:55:ca:a8:6a:02:71:58:d3:9e:4e:
ac:c4:23:50:36:88:96:13:8a:f4:29:3a:24:13:d2:80:12:ca:
9a:33:20:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 06:19:01 2026 by rpki-client