Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
File: 00vPISevCy4KJGrkV0MEx653Fek.mft (raw, json)
Hash identifier: bD0RqNOIDZ9lor6w/PHndCUiEWN9h4VS5WUAQNbQfKU=
Subject key identifier: B1:95:CC:6B:34:37:2E:9C:7B:63:81:CD:27:5D:E8:56:AE:7F:63:59
Authority key identifier: D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9
Certificate issuer: /CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9
Certificate serial: 019FA97510E6DC1275E78D0E21970685E861
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 16:00:49 +0000
Manifest this update: Tue 28 Jul 2026 16:00:49 +0000
Manifest next update: Wed 29 Jul 2026 16:00:49 +0000
Files and hashes: 1: 00vPISevCy4KJGrkV0MEx653Fek.crl (hash: XSHS6zZhmuQOrK0FTDd1ghXgzg97kAyghaDPsS7+fRs=)
2: LNdrd32mL4o15Pj5JcWmBKR2Q2I.roa (hash: hLgQdqBGoRGoVp14crN6xd2B0BaQtU78dsrL7Dz6tOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:10:e6:dc:12:75:e7:8d:0e:21:97:06:85:e8:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9
Validity
Not Before: Jul 28 16:00:49 2026 GMT
Not After : Jul 29 16:00:49 2026 GMT
Subject: CN=b195cc6b34372e9c7b6381cd275de856ae7f6359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7e:31:3a:ca:73:e6:af:ad:63:4e:bd:e5:f6:
3f:f6:17:52:fc:e8:c7:f7:4d:5e:cc:56:ab:1f:7c:
47:67:c9:e6:35:1a:93:ac:cd:a8:8d:85:e2:e0:ff:
b4:f1:b1:09:db:cb:b8:99:0e:fc:a8:a7:c3:b7:07:
74:86:9e:9b:04:fa:a5:63:36:0d:23:91:6d:34:c8:
34:a2:d0:82:32:91:8c:d7:bb:8d:f1:d8:37:db:ba:
5e:26:97:2a:24:30:95:05:77:bc:18:33:70:7a:d6:
32:9c:d5:00:74:f7:56:7d:3c:d3:0a:3e:f6:25:49:
a5:58:17:fd:6e:e4:1d:b9:53:54:b0:bf:f1:26:81:
d1:02:12:bd:a3:8e:c6:40:c5:3d:fa:e3:7c:2b:4b:
d5:e9:93:38:fa:10:c8:0c:db:a7:69:4d:03:a2:2b:
50:f6:3b:e0:7f:1a:76:78:97:4f:d7:e9:90:65:8f:
07:6d:7a:97:7a:30:0c:46:8c:be:7b:cf:65:01:07:
7a:a2:38:63:a3:fb:ba:7f:ed:24:0f:81:68:b1:b5:
81:d6:37:f0:0c:6d:5c:b4:f3:0b:93:8a:d9:6a:fe:
3e:fd:03:43:87:5e:38:82:2e:e6:a4:0a:78:63:2c:
1a:e8:98:d5:eb:b8:e1:09:ba:f0:e3:ff:b5:3f:2b:
ec:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:95:CC:6B:34:37:2E:9C:7B:63:81:CD:27:5D:E8:56:AE:7F:63:59
X509v3 Authority Key Identifier:
keyid:D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:56:df:8e:12:da:91:29:52:36:00:0c:e1:33:f5:42:ad:dd:
1b:61:cf:94:53:f9:df:3f:6a:f4:94:8c:1a:8d:66:10:9c:f0:
81:db:a7:4d:f0:0f:8c:d7:7b:9e:fd:35:f8:e2:e6:d3:57:60:
1b:13:22:b9:2a:44:c3:d2:42:35:30:7b:4b:fb:4b:44:42:22:
ce:50:1f:0f:83:d4:08:e0:ec:24:d5:d4:41:fb:79:39:1c:b0:
c1:8c:4b:a5:59:58:26:c0:75:c0:bf:5b:3b:f8:52:5f:98:d6:
46:39:89:76:9d:45:7d:80:ad:85:45:09:d8:37:cf:51:9a:00:
5e:67:b7:36:83:04:4c:c7:e7:76:4f:7f:56:86:55:56:cc:0f:
73:b7:01:46:65:d1:b7:8b:87:d6:59:4f:bf:51:a5:e3:dc:92:
04:59:70:22:75:7e:11:07:ad:7d:52:85:e2:1b:93:12:42:56:
bd:72:3a:0e:63:f6:24:a6:55:31:08:b7:c0:1e:00:21:0f:40:
39:ab:ec:6e:49:58:d2:12:80:24:6a:42:8c:cf:97:e6:f8:fa:
8b:49:f6:f3:85:e1:24:7f:d0:1c:0b:0d:77:71:ef:9b:74:cf:
9b:e6:fb:d0:ab:cf:dd:fd:26:bc:ce:ef:5e:4b:1a:c2:95:6e:
22:9d:e6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:27:51 2026 by rpki-client