Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
File: 0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft (raw, json)
Hash identifier: vr89KcQK2bkkTjZsNYpXFdRC8ZQesUMkFZFtUEK1Ueo=
Subject key identifier: 10:EF:5F:FD:DF:31:4A:B3:0F:44:A4:80:A3:41:E8:7A:19:80:15:55
Authority key identifier: D1:E5:EB:75:36:62:0B:58:57:D1:BF:59:01:83:D6:50:CA:23:22:7F
Certificate issuer: /CN=d1e5eb7536620b5857d1bf590183d650ca23227f
Certificate serial: 019FA8D03DEEB035CD87DAB4E48581864C2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
Manifest number: 068D
Signing time: Tue 28 Jul 2026 13:00:47 +0000
Manifest this update: Tue 28 Jul 2026 13:00:47 +0000
Manifest next update: Wed 29 Jul 2026 13:00:47 +0000
Files and hashes: 1: 0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl (hash: OUlytSYpiMlS1wKCk2VMVT19NxH7RfPj0gfp1Ku2gjE=)
2: he8kJ9DCXibthyRw5bWWfdO-zeI.roa (hash: CB90W0F1vwsIT9jZbtFWr7qRy3OvwRqYaZVqidxtkOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:3d:ee:b0:35:cd:87:da:b4:e4:85:81:86:4c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e5eb7536620b5857d1bf590183d650ca23227f
Validity
Not Before: Jul 28 13:00:47 2026 GMT
Not After : Jul 29 13:00:47 2026 GMT
Subject: CN=10ef5ffddf314ab30f44a480a341e87a19801555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:48:9e:71:06:80:aa:16:84:2c:fd:db:29:ed:
97:8b:a8:d9:de:e1:b9:c4:8a:73:38:9c:99:60:0d:
9b:bd:15:87:31:5a:70:9d:47:9c:ab:6c:78:9f:3d:
f9:8b:87:ea:a6:0a:9f:5b:5f:6b:e1:a0:dd:b8:3e:
58:e8:61:24:be:19:8e:df:65:a2:2c:c2:24:cb:3f:
4c:36:cf:c6:5a:59:7b:59:ae:1e:a6:05:9a:fb:04:
32:4f:14:57:85:b5:7d:13:17:fb:cb:cc:81:fe:3b:
66:19:f7:a8:b4:61:19:a3:fc:ef:98:dd:b7:da:0d:
d9:06:8b:55:aa:72:a6:e1:16:43:f1:54:79:2d:62:
55:da:c3:f2:82:45:a1:dc:f7:51:67:14:9c:79:c0:
a5:4b:f5:ed:3d:f1:fe:f7:e1:96:1a:d7:5c:cc:3d:
11:f2:68:0d:7a:6f:5e:b0:9e:eb:63:05:28:6d:a2:
1e:54:49:22:b7:cd:1e:ad:77:a9:97:90:e9:b3:7c:
1a:70:9c:af:b9:4d:93:ff:c5:fc:fd:64:6a:79:11:
fe:de:8c:be:01:83:54:53:c4:c3:0b:da:4a:c8:75:
ce:55:de:00:08:55:2f:30:c5:e4:66:6e:9b:81:fa:
7b:ce:4e:44:50:82:c2:43:50:d0:86:33:b8:2b:bb:
9c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:EF:5F:FD:DF:31:4A:B3:0F:44:A4:80:A3:41:E8:7A:19:80:15:55
X509v3 Authority Key Identifier:
keyid:D1:E5:EB:75:36:62:0B:58:57:D1:BF:59:01:83:D6:50:CA:23:22:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:49:40:a2:bd:fb:1f:b6:b5:a3:08:0d:5e:77:e3:3b:e1:1c:
89:f9:2b:a1:87:02:f5:d5:89:96:86:a4:97:70:19:1b:b1:ba:
9e:5b:f6:b3:95:4d:65:87:c8:8d:64:9d:59:22:53:34:1a:92:
2d:b3:19:d3:f1:82:67:62:03:f4:2a:28:de:34:02:6c:f5:fd:
18:3c:28:36:5e:13:4e:04:a7:3e:3c:38:2c:57:ad:8a:be:94:
92:26:0d:79:1e:2f:7f:57:6f:e3:75:c5:24:c1:32:53:14:e4:
cb:03:18:ff:45:71:58:5e:33:85:e1:bf:ee:48:16:b9:19:ab:
54:d2:ad:04:e9:72:c9:f1:cf:a5:5e:f5:a0:0d:4d:89:4c:0a:
fb:cd:34:92:56:72:a0:c4:65:62:6c:07:44:c0:27:73:9b:4e:
1e:cd:b3:e4:c1:64:77:94:75:2d:cb:5f:fa:71:ea:6d:1e:ba:
6a:35:2e:fd:8f:45:7b:b1:95:f0:00:12:7c:08:46:b8:fb:4d:
c4:48:d0:4c:40:97:72:e7:d5:a4:e4:14:44:c4:39:93:25:f0:
5d:af:c5:07:6c:9b:a6:73:00:a5:ec:3c:51:8f:d4:0e:a8:98:
2d:40:fd:a9:5d:d3:a7:2a:ee:9a:4f:6d:ed:e1:93:63:d2:b9:
2b:2e:23:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+o0D3usDXNh9q05IWBhkwqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZTVlYjc1MzY2MjBiNTg1N2QxYmY1OTAxODNkNjUwY2Ey
MzIyN2YwHhcNMjYwNzI4MTMwMDQ3WhcNMjYwNzI5MTMwMDQ3WjAzMTEwLwYDVQQD
EygxMGVmNWZmZGRmMzE0YWIzMGY0NGE0ODBhMzQxZTg3YTE5ODAxNTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUiecQaAqhaELP3bKe2Xi6jZ3uG5
xIpzOJyZYA2bvRWHMVpwnUecq2x4nz35i4fqpgqfW19r4aDduD5Y6GEkvhmO32Wi
LMIkyz9MNs/GWll7Wa4epgWa+wQyTxRXhbV9Exf7y8yB/jtmGfeotGEZo/zvmN23
2g3ZBotVqnKm4RZD8VR5LWJV2sPygkWh3PdRZxScecClS/XtPfH+9+GWGtdczD0R
8mgNem9esJ7rYwUobaIeVEkit80erXepl5Dps3wacJyvuU2T/8X8/WRqeRH+3oy+
AYNUU8TDC9pKyHXOVd4ACFUvMMXkZm6bgfp7zk5EUILCQ1DQhjO4K7uceQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBDvX/3fMUqzD0SkgKNB6HoZgBVVMB8GA1UdIwQY
MBaAFNHl63U2YgtYV9G/WQGD1lDKIyJ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGVYcmRUWmlDMWhYMGI5WkFZUFdVTW9qSW44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy82NWZhM2MtMDE3NS00Y2VlLTk5MzAt
NTljZmQ0NTNkZDE3LzEvMGVYcmRUWmlDMWhYMGI5WkFZUFdVTW9qSW44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy82NWZhM2MtMDE3NS00Y2VlLTk5MzAtNTljZmQ0NTNkZDE3
LzEvMGVYcmRUWmlDMWhYMGI5WkFZUFdVTW9qSW44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcklAor37
H7a1owgNXnfjO+EcifkroYcC9dWJloakl3AZG7G6nlv2s5VNZYfIjWSdWSJTNBqS
LbMZ0/GCZ2ID9Coo3jQCbPX9GDwoNl4TTgSnPjw4LFetir6UkiYNeR4vf1dv43XF
JMEyUxTkywMY/0VxWF4zheG/7kgWuRmrVNKtBOlyyfHPpV71oA1NiUwK+800klZy
oMRlYmwHRMAnc5tOHs2z5MFkd5R1Lctf+nHqbR66ajUu/Y9Fe7GV8AASfAhGuPtN
xEjQTECXcufVpOQURMQ5kyXwXa/FB2ybpnMApew8UY/UDqiYLUD9qV3Tpyrumk9t
7eGTY9K5Ky4j1Q==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:10:52 2026 by rpki-client