Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
File: 0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft (raw, json)
Hash identifier: BEfvk7a9dELKTA4BTqO67cuiq80L4+x4n+knDcvVBxM=
Subject key identifier: 92:64:04:7F:93:6B:6B:BD:88:67:94:EE:A7:05:69:A0:AE:2B:74:73
Authority key identifier: D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD
Certificate issuer: /CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
Certificate serial: 019FA8D09B3F37FAEE368546D995BDE0D01C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
Manifest number: 0E34
Signing time: Tue 28 Jul 2026 13:01:11 +0000
Manifest this update: Tue 28 Jul 2026 13:01:11 +0000
Manifest next update: Wed 29 Jul 2026 13:01:11 +0000
Files and hashes: 1: 0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl (hash: dYUD64f5NnMHiZRphbF4cbt0iaWCZveXkI2ftcH2i9I=)
2: 1-bzA-LC9HAAJGIHNZyWh_5MoU-g.roa (hash: RnN32d6e4MWESaRTbw2K0CLbZb59w+5PKP+DYaK/k9o=)
3: rTSOfv72iKS4Od2LIB0_G10Sm1g.roa (hash: gNhIcqNEFyGD4jxJEKcU893kImcieeuHGUa4eFshagU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:9b:3f:37:fa:ee:36:85:46:d9:95:bd:e0:d0:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
Validity
Not Before: Jul 28 13:01:11 2026 GMT
Not After : Jul 29 13:01:11 2026 GMT
Subject: CN=9264047f936b6bbd886794eea70569a0ae2b7473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:64:be:3a:d7:42:7e:dc:0b:ad:ff:61:88:4b:
cb:86:8f:e3:b8:4e:63:c2:0e:b9:28:21:47:1b:32:
b3:c0:b8:d1:bb:9d:ec:c9:8d:2e:8d:5c:55:2d:1e:
89:ee:24:11:bb:7c:bc:05:72:5c:4d:1a:d9:e6:65:
23:ab:6c:23:f7:e5:a7:7b:75:a6:ba:2f:b2:ad:ee:
13:fa:94:f5:c6:80:3c:68:6b:6f:c2:5c:40:c6:27:
4b:92:48:20:99:e7:a6:f6:2b:77:74:82:b4:1f:fb:
09:06:0a:0b:a8:94:0f:35:e2:9d:18:4c:71:e2:d4:
04:ef:45:a8:aa:7c:a8:79:2d:e3:67:56:3a:14:21:
3e:27:5f:f6:2b:a0:2f:64:f8:a0:70:a0:87:0d:22:
ba:da:bc:cd:28:4d:10:7d:bb:d3:14:12:67:79:40:
76:f2:b1:8e:35:9b:44:81:9e:f8:ef:cf:ce:78:e6:
17:36:20:f4:39:46:88:44:e3:36:6b:4c:8e:a2:cb:
df:2c:28:1b:aa:8e:20:60:9f:22:3f:18:4c:10:30:
b2:3e:df:89:01:ab:be:d7:e9:87:ba:96:ed:b9:fd:
3d:2b:9b:a7:72:90:2a:65:11:68:5a:cf:9d:5e:69:
a9:3f:52:76:a2:9c:4b:f2:63:c4:cb:38:47:26:be:
81:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:64:04:7F:93:6B:6B:BD:88:67:94:EE:A7:05:69:A0:AE:2B:74:73
X509v3 Authority Key Identifier:
keyid:D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:68:71:14:50:87:78:07:56:03:5d:a2:b6:52:cc:45:0c:de:
83:c8:00:b2:08:2d:8a:1e:bb:c5:17:8e:22:02:b1:61:0e:f4:
7d:2c:59:ec:37:b6:c2:0c:27:8a:a2:b9:61:ff:eb:dc:60:51:
8c:df:85:d0:d9:91:44:f0:89:c7:f1:ce:02:42:aa:bd:86:63:
ce:6e:85:32:e5:08:1d:24:ff:8d:f1:52:d0:da:8f:45:fd:7c:
ec:09:d9:8a:b5:19:f4:c0:cf:6e:a3:fd:b2:e0:51:bc:54:79:
60:10:11:49:f6:08:5f:ec:43:b6:95:2d:d5:2a:aa:08:4f:c6:
50:ae:d2:83:09:f4:8c:b1:e0:f9:07:75:1b:98:49:4f:bf:2a:
9f:ba:54:90:ca:5b:aa:86:ee:5d:cf:6e:0e:cb:0e:25:39:bf:
a0:f0:76:0a:21:cd:db:f5:b3:2f:e6:ea:1b:e6:c1:d5:65:9f:
47:00:f1:dc:c6:34:6f:41:9f:76:e8:ad:47:ca:87:18:86:18:
c4:19:45:36:5e:ae:8e:54:41:85:e8:59:29:42:c6:a7:7f:87:
f1:30:1d:f9:d8:de:ef:a4:f8:18:f0:42:cd:bb:89:f7:fa:0e:
ae:91:21:75:3d:10:f6:bf:40:47:0d:54:0a:94:6d:86:27:ca:
64:1b:4a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:33:39 2026 by rpki-client