Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.mft
File: 0d2oMnacMWgfglaFFHNorzoR9vg.mft (raw, json)
Hash identifier: 2nnfAOCnhHxParZyr/nwNysFE2ZkiDI8mATbbeOSssQ=
Subject key identifier: 80:51:18:A8:BF:1E:34:2E:13:80:E5:9D:A8:CC:0C:DC:A2:8A:23:FA
Authority key identifier: D1:DD:A8:32:76:9C:31:68:1F:82:56:85:14:73:68:AF:3A:11:F6:F8
Certificate issuer: /CN=d1dda832769c31681f825685147368af3a11f6f8
Certificate serial: 019FA8CFD17A4BA013C26008F4610B336F5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d2oMnacMWgfglaFFHNorzoR9vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 13:00:19 +0000
Manifest this update: Tue 28 Jul 2026 13:00:19 +0000
Manifest next update: Wed 29 Jul 2026 13:00:19 +0000
Files and hashes: 1: 0d2oMnacMWgfglaFFHNorzoR9vg.crl (hash: Cvdpt/goX7nZtCWh00KOU0mgd1VGgKCE8Jn4RwyADJc=)
2: EHzjD2BaSdt6dlWwGmMzrIvaNCg.roa (hash: S94ye2gvt+ykcb3AuWBczPrNA3UQ52LMfEF8Lq+CnR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0d2oMnacMWgfglaFFHNorzoR9vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:cf:d1:7a:4b:a0:13:c2:60:08:f4:61:0b:33:6f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1dda832769c31681f825685147368af3a11f6f8
Validity
Not Before: Jul 28 13:00:19 2026 GMT
Not After : Jul 29 13:00:19 2026 GMT
Subject: CN=805118a8bf1e342e1380e59da8cc0cdca28a23fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:32:c8:af:2e:a8:f9:09:ee:73:ef:3c:09:08:
7f:15:33:15:49:88:4b:c1:dc:18:9d:d1:37:aa:c5:
4d:c9:69:99:9f:b7:04:26:b9:be:1b:45:fd:67:0a:
92:c9:87:47:b2:29:ed:68:bd:80:a6:33:7f:ec:03:
e8:42:95:7e:77:b8:ef:85:6e:0e:73:1f:7e:7f:98:
88:3c:f7:39:86:94:5f:6d:20:67:51:57:48:ea:f6:
28:93:43:48:7f:5f:47:71:b2:eb:38:c7:ea:fc:2f:
d9:ba:c5:fc:94:96:00:95:44:05:c3:95:80:c8:56:
68:73:ea:1a:c9:57:29:a9:95:19:04:1d:55:75:23:
0b:14:4a:c1:1a:8d:2a:1b:14:95:3c:78:20:5f:8d:
d5:60:5d:30:68:f4:dc:7d:c2:1d:52:6b:7c:0e:90:
d4:ab:52:c1:cf:dd:61:6e:29:63:c6:37:34:15:51:
ec:92:59:27:b9:ad:87:24:53:34:a5:6f:35:67:51:
04:74:eb:6a:cd:99:80:5f:3f:9e:1b:1c:6d:dd:a0:
d7:01:19:81:6e:56:3c:a4:ea:26:a7:ea:c7:91:bb:
49:44:a7:72:4b:90:fe:12:2d:0b:e3:c0:d5:71:06:
7d:26:e6:0a:62:9c:bc:a1:ad:7c:72:5a:9e:98:11:
52:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:51:18:A8:BF:1E:34:2E:13:80:E5:9D:A8:CC:0C:DC:A2:8A:23:FA
X509v3 Authority Key Identifier:
keyid:D1:DD:A8:32:76:9C:31:68:1F:82:56:85:14:73:68:AF:3A:11:F6:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d2oMnacMWgfglaFFHNorzoR9vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:31:29:74:55:40:de:13:e5:2f:ef:de:0b:96:f2:85:e6:78:
35:16:94:1f:c2:16:f4:82:c5:aa:a2:01:3c:c2:ba:f5:25:f4:
82:36:64:f5:92:66:c1:6f:83:da:38:cf:12:fa:75:25:54:42:
53:b2:b2:b4:76:18:5d:49:3c:29:78:ed:e1:5d:8c:a5:3e:fb:
b6:61:cf:43:5b:d4:13:e4:43:e9:3b:97:d8:c4:62:a2:1f:3d:
e9:d0:38:9d:bb:22:bc:c8:88:e2:e2:77:08:e0:ca:95:7d:12:
72:5f:16:db:57:f0:46:c0:9e:4c:09:7b:c0:db:ef:3f:a7:75:
3a:09:ff:88:49:29:be:05:1b:fb:c8:78:20:b1:d0:72:81:0d:
e6:26:94:ff:11:2f:f6:f4:23:1b:56:22:82:17:b2:db:9d:87:
b5:72:cf:18:48:4a:30:f5:93:08:29:13:6d:82:d4:01:dc:63:
cd:d6:3b:1a:63:1d:93:0d:e6:f0:3b:e0:8e:6a:be:46:18:d3:
a9:ae:85:53:e8:a2:d1:94:b3:43:40:89:c8:93:bc:5c:58:be:
84:9f:7d:8a:b3:36:b1:f1:97:cc:5c:9e:e1:bd:3e:b4:d4:2d:
86:d2:40:b3:c9:53:b3:23:d5:65:19:3e:96:80:f9:1c:eb:d7:
41:e1:8c:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oz9F6S6ATwmAI9GELM29dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZGRhODMyNzY5YzMxNjgxZjgyNTY4NTE0NzM2OGFmM2Ex
MWY2ZjgwHhcNMjYwNzI4MTMwMDE5WhcNMjYwNzI5MTMwMDE5WjAzMTEwLwYDVQQD
Eyg4MDUxMThhOGJmMWUzNDJlMTM4MGU1OWRhOGNjMGNkY2EyOGEyM2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6zLIry6o+Qnuc+88CQh/FTMVSYhL
wdwYndE3qsVNyWmZn7cEJrm+G0X9ZwqSyYdHsintaL2ApjN/7APoQpV+d7jvhW4O
cx9+f5iIPPc5hpRfbSBnUVdI6vYok0NIf19HcbLrOMfq/C/ZusX8lJYAlUQFw5WA
yFZoc+oayVcpqZUZBB1VdSMLFErBGo0qGxSVPHggX43VYF0waPTcfcIdUmt8DpDU
q1LBz91hbiljxjc0FVHsklknua2HJFM0pW81Z1EEdOtqzZmAXz+eGxxt3aDXARmB
blY8pOomp+rHkbtJRKdyS5D+Ei0L48DVcQZ9JuYKYpy8oa18clqemBFSuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIBRGKi/HjQuE4DlnajMDNyiiiP6MB8GA1UdIwQY
MBaAFNHdqDJ2nDFoH4JWhRRzaK86Efb4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGQyb01uYWNNV2dmZ2xhRkZITm9yem9SOXZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC81YTZkM2MtMTdkYS00NGQzLWE0MDIt
ODYyMzZiYWMxMzA4LzEvMGQyb01uYWNNV2dmZ2xhRkZITm9yem9SOXZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC81YTZkM2MtMTdkYS00NGQzLWE0MDItODYyMzZiYWMxMzA4
LzEvMGQyb01uYWNNV2dmZ2xhRkZITm9yem9SOXZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKjEpdFVA
3hPlL+/eC5byheZ4NRaUH8IW9ILFqqIBPMK69SX0gjZk9ZJmwW+D2jjPEvp1JVRC
U7KytHYYXUk8KXjt4V2MpT77tmHPQ1vUE+RD6TuX2MRioh896dA4nbsivMiI4uJ3
CODKlX0Scl8W21fwRsCeTAl7wNvvP6d1Ogn/iEkpvgUb+8h4ILHQcoEN5iaU/xEv
9vQjG1Yighey252HtXLPGEhKMPWTCCkTbYLUAdxjzdY7GmMdkw3m8Dvgjmq+RhjT
qa6FU+ii0ZSzQ0CJyJO8XFi+hJ99irM2sfGXzFye4b0+tNQthtJAs8lTsyPVZRk+
loD5HOvXQeGMhA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:01:43 2026 by rpki-client