Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
File: 0vHIhC58-JGyNNOh4OLg73PoQqo.mft (raw, json)
Hash identifier: ZVHJWNiqwqN0mo7khHlPmaJgXrZtEX53u/DBTSfpNmQ=
Subject key identifier: 9D:68:0D:C7:C7:DE:B1:A8:B5:76:94:82:BA:E4:B0:0B:3F:28:AA:18
Authority key identifier: D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
Certificate issuer: /CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Certificate serial: 019FA8D019CE922A856939BAAEB41AC29C0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 13:00:38 +0000
Manifest this update: Tue 28 Jul 2026 13:00:38 +0000
Manifest next update: Wed 29 Jul 2026 13:00:38 +0000
Files and hashes: 1: 0vHIhC58-JGyNNOh4OLg73PoQqo.crl (hash: /+573ygV+feNYUHxOMfwb+bDmEi+5p0RWRl05GfboEc=)
2: l9fT_tPQilc8kDDpXdmC63EbBTU.roa (hash: e0hhcAS9+zmOEL/7aF5yJ1rOw5m87GlUo2fUEzHI/tc=)
3: zZqdbpX91TjBbrVKBU--OsfsNgs.roa (hash: 5bqwY0fuE7qADoXdmI9CeMVMqqLQteAK+rBOtRg2eMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:19:ce:92:2a:85:69:39:ba:ae:b4:1a:c2:9c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Validity
Not Before: Jul 28 13:00:38 2026 GMT
Not After : Jul 29 13:00:38 2026 GMT
Subject: CN=9d680dc7c7deb1a8b5769482bae4b00b3f28aa18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0d:94:e9:51:13:04:24:df:69:c0:fd:38:c4:
1f:6b:3c:9e:54:50:c4:81:cf:f4:d5:e9:e1:d1:65:
4c:0c:df:57:54:14:62:fc:e7:63:54:04:38:f5:22:
4e:cf:7e:0f:a2:0d:25:28:47:dc:e5:44:9b:8c:a5:
bf:21:38:77:63:4f:97:31:7c:62:88:ea:95:4a:3b:
73:26:db:48:26:3f:80:9c:06:0e:80:9f:84:f3:05:
70:89:3c:e6:15:61:b1:be:21:cf:83:06:37:5a:47:
4e:03:f9:58:cc:84:ec:00:3a:ba:ff:3c:e6:7e:5b:
a2:95:7e:2a:68:59:3f:39:f0:10:df:c6:ac:f7:53:
d3:32:03:76:15:97:85:2c:78:d7:7e:05:9c:4b:ba:
86:e4:70:42:0d:aa:98:a6:1e:10:4b:79:7a:a7:cf:
52:5b:1e:ce:1c:9a:3e:77:e5:90:6c:9c:54:f1:63:
61:50:45:8e:06:49:b4:00:27:db:98:f4:79:ca:98:
d2:d1:8f:05:65:c4:e3:99:78:d9:93:b8:2e:c0:62:
30:95:27:dd:4a:81:59:6b:ad:43:c0:97:0a:6a:1f:
db:64:be:bc:13:1f:8c:e2:bf:6e:05:f4:ac:7a:75:
0b:f6:3a:71:75:de:e0:e4:a8:57:a3:e5:fa:41:9c:
00:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:68:0D:C7:C7:DE:B1:A8:B5:76:94:82:BA:E4:B0:0B:3F:28:AA:18
X509v3 Authority Key Identifier:
keyid:D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:69:45:cb:2b:d4:cc:0d:22:ec:ac:65:84:5c:9c:b3:84:64:
d6:0d:19:a5:56:1d:50:e6:47:38:fd:33:fa:8f:1d:a4:dc:94:
97:f9:1b:3a:8d:b9:0b:16:ec:66:47:3d:ba:18:f8:e9:c5:dd:
15:96:6f:b7:39:8e:b3:24:99:fd:38:16:71:1f:c5:50:ab:98:
d4:78:ee:4c:a0:d4:51:1a:1a:85:ac:76:25:c4:8e:09:58:4b:
f9:85:b6:f3:fb:df:83:78:4d:62:5f:c6:0f:5a:11:a6:83:60:
df:ce:f4:0f:e2:0e:e2:e9:36:70:18:a1:b9:e7:63:1b:fd:fb:
91:6c:33:3f:ed:92:72:3a:d5:da:6f:a3:96:95:07:92:35:2f:
81:9a:e1:c2:ac:04:aa:bd:d3:a6:07:89:1f:d6:cc:4a:36:90:
cc:ad:17:48:92:8d:08:19:0d:a3:2b:20:9e:54:10:3a:b6:65:
cd:49:ed:9a:a5:c2:2a:62:56:f8:8d:ff:c9:61:be:1d:7e:36:
b7:eb:fc:a0:72:f6:69:eb:5e:93:8e:20:ed:d9:25:c6:09:e5:
8d:25:07:93:01:bc:22:81:79:2d:50:a7:ae:46:18:b8:d7:04:
46:cd:ee:98:0b:7b:89:97:f0:41:7b:10:64:2f:28:78:c1:c0:
dd:40:7c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:01:29 2026 by rpki-client