Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/0Bn0FfwpzBL6AmrIPTEA9uIJIUg.mft
File: 0Bn0FfwpzBL6AmrIPTEA9uIJIUg.mft (raw, json)
Hash identifier: Quk/r8QapV5MTUpV2IFxLUoCKjMoF+BXAf3gZBQrsXo=
Subject key identifier: AD:5D:37:F3:6E:30:5C:AD:C7:61:5D:19:65:BA:7C:CE:28:F7:01:5A
Authority key identifier: D0:19:F4:15:FC:29:CC:12:FA:02:6A:C8:3D:31:00:F6:E2:09:21:48
Certificate issuer: /CN=d019f415fc29cc12fa026ac83d3100f6e2092148
Certificate serial: 019FA899308ADC76EE7AA643AC0A2D9184E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Bn0FfwpzBL6AmrIPTEA9uIJIUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/0Bn0FfwpzBL6AmrIPTEA9uIJIUg.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:39 +0000
Manifest this update: Tue 28 Jul 2026 12:00:39 +0000
Manifest next update: Wed 29 Jul 2026 12:00:39 +0000
Files and hashes: 1: 0Bn0FfwpzBL6AmrIPTEA9uIJIUg.crl (hash: w0+WCxN8S4/49rPTeR1JfY5Fzp8RK1B7MNg1FyTxhhc=)
2: k2lMS0v-8ZOf1E11BS_9RMujfm8.roa (hash: JibFIlzou9UGAFwxOZbWBeEjMFoRGWPGctFSJs0fRL0=)
3: tBJ6g2XuB0MmvtUrV3mMYaonUfs.roa (hash: jt5pW5SGqOIlEHsV/lDRSmGfV+5btvSi3I+Lq6T23f0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/0Bn0FfwpzBL6AmrIPTEA9uIJIUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/0Bn0FfwpzBL6AmrIPTEA9uIJIUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Bn0FfwpzBL6AmrIPTEA9uIJIUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:30:8a:dc:76:ee:7a:a6:43:ac:0a:2d:91:84:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d019f415fc29cc12fa026ac83d3100f6e2092148
Validity
Not Before: Jul 28 12:00:39 2026 GMT
Not After : Jul 29 12:00:39 2026 GMT
Subject: CN=ad5d37f36e305cadc7615d1965ba7cce28f7015a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b3:df:0b:b1:4f:7d:89:2f:96:75:01:f1:d5:
fc:3e:ed:ac:56:8e:0a:a4:23:e8:36:fe:4a:c9:80:
34:4c:6e:c7:c7:04:e6:e4:51:69:ae:14:60:4c:14:
42:76:39:dc:85:de:fe:78:cc:0b:7d:93:08:c0:82:
e9:8b:67:80:bd:8c:c3:8c:15:40:6f:e8:48:81:8d:
be:97:cb:e2:f6:88:1d:18:73:28:47:27:bc:06:f4:
02:3c:d0:7e:45:e0:71:b5:2e:21:42:14:e1:02:0f:
ef:7a:c2:f1:42:bd:c0:e7:c7:2b:18:bc:b0:10:be:
69:b1:4d:17:df:80:9d:76:63:ba:36:c6:c3:6b:5f:
a7:de:ec:06:e2:4e:72:76:ee:85:61:39:e3:87:88:
f9:c2:54:ca:16:29:4f:f6:e6:d1:cb:ac:90:a7:f0:
e0:fa:70:6f:eb:61:4c:e7:5e:f4:f0:ba:98:98:9b:
8a:91:21:4a:2f:ea:d4:2c:5d:b2:5e:a1:c1:cb:8c:
69:30:98:13:6b:06:ca:b6:76:b7:a6:59:20:b5:db:
09:80:ca:20:14:6b:56:10:da:a6:1c:22:6e:bc:da:
01:10:85:9a:41:1f:87:ec:91:da:07:6f:1e:10:63:
21:a9:ee:a1:09:d4:e7:3c:f5:d9:b4:bb:47:93:6a:
75:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5D:37:F3:6E:30:5C:AD:C7:61:5D:19:65:BA:7C:CE:28:F7:01:5A
X509v3 Authority Key Identifier:
keyid:D0:19:F4:15:FC:29:CC:12:FA:02:6A:C8:3D:31:00:F6:E2:09:21:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Bn0FfwpzBL6AmrIPTEA9uIJIUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/0Bn0FfwpzBL6AmrIPTEA9uIJIUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/0Bn0FfwpzBL6AmrIPTEA9uIJIUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:3b:45:31:48:63:63:c2:e4:83:41:45:8f:f1:d4:56:35:2d:
b7:f0:2b:fd:f6:c5:ae:99:4d:2e:ed:14:56:b2:f9:b3:33:e8:
3b:80:e6:2e:ac:c2:57:bb:fc:bd:d0:55:5a:3d:fb:75:52:e4:
c3:38:6c:fb:42:bc:ea:1d:4b:b7:f7:c3:e6:80:e4:c4:20:46:
6f:ce:b3:7e:da:5d:2e:a2:6b:33:34:5a:05:97:6d:f6:84:a3:
aa:12:c6:a9:16:19:85:8b:5d:af:d8:89:d2:30:da:e3:16:e6:
84:93:42:6f:dd:ed:aa:38:2c:a4:17:54:a0:f8:1a:1a:ef:29:
37:dd:58:70:4c:a0:9a:94:da:00:5f:8d:39:af:c0:41:7c:ab:
7a:a9:3b:e5:f0:74:31:32:2f:a7:ba:eb:6f:5c:bb:d0:16:05:
0f:05:52:48:35:bd:25:d0:b7:01:39:29:c9:02:96:6a:f8:0e:
e5:05:30:0c:12:3c:25:50:76:eb:bf:ba:3f:ac:de:d9:ef:48:
80:88:51:4b:ef:a6:98:b1:05:34:cc:a3:17:7b:a5:4b:f3:9c:
6b:3b:92:9b:be:3f:3e:27:19:f2:ca:86:b4:c2:82:3e:7c:cc:
4d:b9:92:76:15:72:b9:d1:41:68:dc:b9:c6:2f:f6:bc:b9:c5:
24:dd:da:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:07:29 2026 by rpki-client