Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
File: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft (raw, json)
Hash identifier: N1pHhxswTkToVNMkfGIgk1JEIQy42+YcPkjK30MVnLE=
Subject key identifier: D0:62:3B:1E:A7:30:70:81:8F:83:35:6B:8B:4F:F5:44:97:01:4E:CE
Authority key identifier: D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
Certificate issuer: /CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Certificate serial: 019FA974BA1318A4E896B6619ED663365275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
Manifest number: 16F9
Signing time: Tue 28 Jul 2026 16:00:27 +0000
Manifest this update: Tue 28 Jul 2026 16:00:27 +0000
Manifest next update: Wed 29 Jul 2026 16:00:27 +0000
Files and hashes: 1: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl (hash: knzy70iFa+1QfWRJyx+WF01XLDuUZpmRXvun15ZRCMQ=)
2: 1-fLD9auB23Q-KgYeQIubXO96o4Q.roa (hash: /JJTz3wE1LRLJ7bz0AIRldwzfH3lc1HU/FwtYIJiaSU=)
3: T-8JhhcHQ5cIwEg6IG4tP0d0W4I.roa (hash: 9CdFc+e0Ar1W8fwX0HTyCIb5Mdz7Fe3CEQ/bMI8Efhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:ba:13:18:a4:e8:96:b6:61:9e:d6:63:36:52:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Validity
Not Before: Jul 28 16:00:27 2026 GMT
Not After : Jul 29 16:00:27 2026 GMT
Subject: CN=d0623b1ea73070818f83356b8b4ff54497014ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:39:ec:72:50:ae:99:d1:1e:3a:7b:c2:c4:c0:
43:85:84:51:76:21:71:ac:c5:76:49:0f:e7:22:bb:
ef:49:8b:60:f3:60:b0:b0:77:25:b8:19:d1:45:67:
6e:29:d7:5d:1a:eb:88:a7:a9:1d:df:27:3c:a6:d3:
26:88:19:24:18:d8:2c:2d:36:c7:26:ad:10:51:31:
ee:79:9f:9f:77:08:22:c1:8c:5b:40:89:a7:66:3a:
0b:37:87:a3:05:cc:78:bc:0c:51:45:cf:4a:9f:53:
23:82:a0:4b:f9:93:aa:5b:c8:12:bc:e7:14:85:4b:
58:45:d7:fd:cd:96:7b:07:cc:75:b9:1b:7e:38:a7:
03:20:94:49:90:91:52:dd:83:ed:86:66:d2:91:88:
bd:e8:7b:5c:e5:52:ea:c4:44:87:13:ef:2d:aa:d9:
be:e2:c1:4f:3f:41:42:f8:c3:a8:68:e6:75:c3:e4:
c2:b8:c1:10:15:7b:d5:0f:7f:40:04:0d:2a:9b:6f:
a1:ce:c3:94:bd:e6:42:71:ad:62:c8:09:99:70:67:
49:2c:74:a3:ec:74:6d:43:38:a1:dd:00:d0:41:c5:
3f:47:24:41:f1:e9:34:92:35:30:3a:91:f3:db:fe:
5e:99:61:77:60:23:bf:6c:0a:20:5f:a8:59:4b:f4:
2a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:62:3B:1E:A7:30:70:81:8F:83:35:6B:8B:4F:F5:44:97:01:4E:CE
X509v3 Authority Key Identifier:
keyid:D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e4:34:98:e4:14:ba:73:88:df:ee:34:13:bd:f1:b5:16:b7:
ef:58:b2:a9:14:1f:d8:95:6d:f7:9f:dc:6b:3e:c6:05:38:a4:
a8:2f:03:e9:7c:8e:8f:2f:45:e4:d8:87:6a:31:fc:5f:36:d5:
72:87:eb:41:81:ab:69:b0:92:f6:0b:ad:42:1a:06:ac:9a:dc:
b8:d9:aa:61:72:53:1c:e0:77:56:63:0d:6a:59:4f:08:a4:38:
b7:56:ef:59:de:e2:d1:62:5e:8a:f4:5b:e6:5d:47:71:6a:20:
39:a0:0e:06:3f:2f:da:da:c1:89:bf:7e:75:82:d7:d4:f1:b7:
f5:79:aa:90:a0:2f:69:1d:43:a8:a4:25:f5:c7:b2:d3:23:ad:
1a:d6:40:a2:28:b4:7b:cf:6e:59:e7:05:50:21:cb:6b:7c:f0:
24:2c:29:ee:fb:0e:d5:ed:44:d6:0b:8e:7c:ff:bd:96:c9:ff:
3e:8e:8a:64:2d:92:bf:be:c0:5f:4c:e7:57:5d:ef:d6:9a:ed:
e0:09:de:3d:b1:56:08:7d:d5:e1:03:75:b8:7c:6f:ed:58:08:
ce:98:49:93:31:33:7a:8c:1f:02:29:f4:0b:ab:bd:0b:3e:66:
59:a2:8f:e8:3d:f5:71:ca:28:c5:8f:04:8a:cc:5e:c3:6c:a0:
48:d6:3b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:14 2026 by rpki-client