Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
File: 0mIv3sj638pY51dcKfEOc653VxU.mft (raw, json)
Hash identifier: B1aErsYoCZ5GY9NyrGJqAx1UVr0rE4VmugDfWoU/oIA=
Subject key identifier: 44:68:CE:6A:C9:D1:A3:84:7B:C6:91:06:29:25:93:A8:11:EF:78:66
Authority key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
Certificate issuer: /CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Certificate serial: 019FAD8903D0572A217CF9DC03848618F9BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
Manifest number: 19E0
Signing time: Wed 29 Jul 2026 11:01:05 +0000
Manifest this update: Wed 29 Jul 2026 11:01:05 +0000
Manifest next update: Thu 30 Jul 2026 11:01:05 +0000
Files and hashes: 1: 0mIv3sj638pY51dcKfEOc653VxU.crl (hash: cuFllepIAD7v3jrXTdvl00WRuOf2NQ7wQwZaSdzGwTE=)
2: 48XlQQk7zLyObitRBott5O0TEZc.roa (hash: 0iveZkv2QdOfuGHu5qZcDP2k1JFUITllYLIt0mS1hLw=)
3: JXkrwkvLZXqvLpWo6GIqE9djHow.roa (hash: pvxp7edBiYpg9R4WGN/sBmyvZQpHSdt5YdDqPGYyoLU=)
4: Jb48XUzprHRQSa7zDmEwkm8bHB8.roa (hash: UeQ11+qXjfNfzNk6IX1DTTmTHuYUChCRYnGGfuhQmW8=)
5: M4MI8IskioFX_GL9An1slOnzOXk.roa (hash: +6v5Ea5o3E61ySsVOGY9En91TXxPv4H1t9U0YnMleQI=)
6: cFUEIWQu7qe64nrzejsq3hzv3fw.roa (hash: Y5DG1bnBMtUo7Z76/zjvm84VdL7RwBfBAjPP2M8PD/c=)
7: hkFrsNhiq0TnoVB5lv6ukrym9kU.roa (hash: Lpo1dIydhWwC2a6odejRAjq7zYy9EyLkYPWh1THs0As=)
8: svxysR0fryYPn1ckppavIVkehYU.roa (hash: 8MNRRTqy3XlQo1M7+GUmMiXWjPTZpOon/19BgW0t8Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:89:03:d0:57:2a:21:7c:f9:dc:03:84:86:18:f9:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Validity
Not Before: Jul 29 11:01:05 2026 GMT
Not After : Jul 30 11:01:05 2026 GMT
Subject: CN=4468ce6ac9d1a3847bc69106292593a811ef7866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:60:58:5e:fa:a2:e9:15:09:25:bd:a4:1a:25:
79:cd:e8:6d:58:e9:be:b3:a6:6b:78:51:f0:5e:3c:
16:d1:2b:41:b1:38:09:75:17:51:f3:9f:57:b9:7b:
f9:ab:b6:9d:c3:b5:91:a8:29:dd:71:8d:c4:56:bd:
ae:68:3c:0f:81:73:f3:9b:2e:a0:c6:5a:30:1d:82:
ea:5c:37:a8:25:49:bc:e6:34:d1:21:95:d4:1b:fd:
4f:04:6c:83:e6:5e:e2:5e:17:7b:32:c2:7c:9e:cf:
8a:c9:2b:01:09:a2:34:ed:92:b1:7e:fb:7e:21:b5:
89:12:39:0e:e4:7d:a2:60:6b:f8:0f:be:3f:79:5c:
15:3e:10:84:6f:63:bd:70:e4:c9:44:1f:0b:fc:df:
b1:80:86:ff:79:42:a2:56:0e:62:39:bb:30:52:f6:
45:63:29:1a:50:48:de:64:f2:ce:eb:46:c3:29:3a:
ca:7d:e4:11:41:55:80:04:86:a2:15:2d:15:c4:85:
08:a2:58:bb:32:1d:d2:48:c4:1e:bf:b6:92:60:c5:
2b:61:31:72:05:02:26:fa:66:dc:ad:db:5f:4a:74:
2b:0d:79:48:9a:09:d3:90:52:1d:a1:f8:db:0e:af:
4d:55:35:f5:ad:aa:2a:3c:52:85:9c:9b:4a:03:25:
6a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:68:CE:6A:C9:D1:A3:84:7B:C6:91:06:29:25:93:A8:11:EF:78:66
X509v3 Authority Key Identifier:
keyid:D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ab:70:f3:55:56:6e:a1:ee:81:28:a9:59:5a:bd:8f:a3:ca:
87:df:f7:86:4b:e5:b2:9f:bf:3d:6a:d6:8b:30:14:31:8f:86:
7a:77:15:30:40:f9:5f:2e:87:ec:ee:31:79:8e:26:43:57:31:
34:39:2c:c5:40:b7:84:ea:0a:2e:6d:21:5d:2c:96:12:9e:59:
9d:24:fb:22:96:19:01:bf:51:77:c6:2d:ee:21:1e:4e:b7:1f:
ab:56:ac:fd:3c:c2:f9:b2:1a:99:57:63:77:51:e7:91:bb:b5:
fa:8e:e4:80:25:25:59:83:88:66:34:c7:3c:86:d6:38:88:66:
9c:db:7f:a3:de:bc:a7:17:0f:fd:d0:be:d0:f5:8f:23:cc:a9:
c5:9d:ee:da:fc:ed:1d:6a:66:a7:f5:cd:89:d8:d8:5b:b5:0d:
63:07:fb:77:e3:94:88:7b:51:7b:c6:eb:29:34:23:43:66:90:
ed:92:43:2f:d8:2a:12:9f:6e:58:65:eb:48:d0:fa:ac:63:88:
91:19:59:58:a8:c2:cc:5e:e8:03:da:80:84:bb:d0:2c:e5:ae:
bc:63:1c:3e:1b:c5:00:be:cf:8e:a6:bc:9f:5c:62:4d:e0:1c:
28:ff:42:d2:c1:84:90:77:8f:da:ee:07:93:c7:0e:27:df:d7:
b1:85:14:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tiQPQVyohfPncA4SGGPm+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNjIyZmRlYzhmYWRmY2E1OGU3NTc1YzI5ZjEwZTczYWU3
NzU3MTUwHhcNMjYwNzI5MTEwMTA1WhcNMjYwNzMwMTEwMTA1WjAzMTEwLwYDVQQD
Eyg0NDY4Y2U2YWM5ZDFhMzg0N2JjNjkxMDYyOTI1OTNhODExZWY3ODY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmBYXvqi6RUJJb2kGiV5zehtWOm+
s6ZreFHwXjwW0StBsTgJdRdR859XuXv5q7adw7WRqCndcY3EVr2uaDwPgXPzmy6g
xlowHYLqXDeoJUm85jTRIZXUG/1PBGyD5l7iXhd7MsJ8ns+KySsBCaI07ZKxfvt+
IbWJEjkO5H2iYGv4D74/eVwVPhCEb2O9cOTJRB8L/N+xgIb/eUKiVg5iObswUvZF
YykaUEjeZPLO60bDKTrKfeQRQVWABIaiFS0VxIUIoli7Mh3SSMQev7aSYMUrYTFy
BQIm+mbcrdtfSnQrDXlImgnTkFIdofjbDq9NVTX1raoqPFKFnJtKAyVqiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFERozmrJ0aOEe8aRBiklk6gR73hmMB8GA1UdIwQY
MBaAFNJiL97I+t/KWOdXXCnxDnOud1cVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG1JdjNzajYzOHBZNTFkY0tmRU9jNjUzVnhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NWYwMmUtZjFhYy00NGZiLTkyZWIt
ZjA1YWEyMjlkNjM4LzEvMG1JdjNzajYzOHBZNTFkY0tmRU9jNjUzVnhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS84NWYwMmUtZjFhYy00NGZiLTkyZWItZjA1YWEyMjlkNjM4
LzEvMG1JdjNzajYzOHBZNTFkY0tmRU9jNjUzVnhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ6tw81VW
bqHugSipWVq9j6PKh9/3hkvlsp+/PWrWizAUMY+GencVMED5Xy6H7O4xeY4mQ1cx
NDksxUC3hOoKLm0hXSyWEp5ZnST7IpYZAb9Rd8Yt7iEeTrcfq1as/TzC+bIamVdj
d1Hnkbu1+o7kgCUlWYOIZjTHPIbWOIhmnNt/o968pxcP/dC+0PWPI8ypxZ3u2vzt
HWpmp/XNidjYW7UNYwf7d+OUiHtRe8brKTQjQ2aQ7ZJDL9gqEp9uWGXrSND6rGOI
kRlZWKjCzF7oA9qAhLvQLOWuvGMcPhvFAL7Pjqa8n1xiTeAcKP9C0sGEkHeP2u4H
k8cOJ9/XsYUUDA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:12:38 2026 by rpki-client