Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
File: 0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft (raw, json)
Hash identifier: bYSpGh2asFvpDBSCKwJ6Cfdtf40ZAe6PGea/q60JvFo=
Subject key identifier: 34:C3:2D:7A:1C:14:FA:49:AF:94:13:E2:83:4A:07:60:DF:EA:39:4A
Authority key identifier: D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08
Certificate issuer: /CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
Certificate serial: 019FAA878D91CDF6C6AF6D9AB661FE9FE6B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
Manifest number: 1787
Signing time: Tue 28 Jul 2026 21:00:37 +0000
Manifest this update: Tue 28 Jul 2026 21:00:37 +0000
Manifest next update: Wed 29 Jul 2026 21:00:37 +0000
Files and hashes: 1: 0NhTEIhVVHGuhHppc2WhR24nfps.roa (hash: UAiJiA/nFpUR+80xJrPSC3HfZCrrUkoKtrqsQ8RFQsc=)
2: 0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl (hash: S1QO8WQXpO2WxQUeVOQIplr9+zTgix9RoAq9Rc5gock=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:8d:91:cd:f6:c6:af:6d:9a:b6:61:fe:9f:e6:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
Validity
Not Before: Jul 28 21:00:37 2026 GMT
Not After : Jul 29 21:00:37 2026 GMT
Subject: CN=34c32d7a1c14fa49af9413e2834a0760dfea394a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:37:96:4c:d3:1f:3f:93:fa:d1:cb:1c:78:5e:
0a:e1:79:43:33:6e:69:4b:88:bb:21:14:15:c2:2b:
0f:19:41:f5:35:83:0d:9d:3d:92:2f:fe:10:f6:9a:
69:f8:b9:c6:af:a2:88:92:60:e8:69:de:84:3c:a2:
55:16:34:7b:58:cf:b7:f8:96:f8:22:dd:a4:57:6d:
cd:b7:da:98:7c:31:3c:e9:bd:5a:7b:65:3b:4c:85:
de:8d:39:bf:89:a7:83:e6:70:f2:7e:d5:a0:28:02:
84:2c:87:9a:a8:9e:4e:a2:fa:e9:20:66:2c:ce:3d:
7d:07:39:79:5a:38:e4:c8:08:31:93:2f:5c:2b:bc:
21:4a:82:9d:78:87:da:d4:87:ab:bb:c1:c6:40:73:
cb:d7:1d:8b:b7:4c:8a:29:cc:4b:57:14:8a:36:dc:
0a:79:dc:c9:ec:60:21:af:af:d9:63:4b:60:55:56:
01:da:9c:ec:0c:fe:f2:9a:91:4c:70:a1:32:2c:80:
f1:f6:45:44:7e:87:86:bb:58:07:26:18:05:cd:d4:
42:e5:be:f4:11:1b:da:2d:16:18:5a:e2:49:56:60:
8e:27:bb:ce:b6:47:87:54:3e:5e:78:c6:ca:ec:eb:
21:21:fe:fc:8d:54:88:5d:a2:6d:21:fe:6f:6b:e7:
b4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C3:2D:7A:1C:14:FA:49:AF:94:13:E2:83:4A:07:60:DF:EA:39:4A
X509v3 Authority Key Identifier:
keyid:D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:8a:cb:ae:4a:ca:e2:67:7f:27:bc:87:6b:bd:fb:9b:27:92:
e6:9b:34:72:c2:9c:82:7f:cf:74:c3:26:28:e0:ca:eb:16:96:
e2:83:e6:be:73:10:c9:61:b3:fe:02:fd:a4:53:72:66:9a:d1:
d0:92:8a:bc:13:70:89:f2:05:47:3e:ee:2d:4e:b0:f5:f6:fb:
81:13:ff:51:41:f1:16:25:d9:c0:35:4a:fa:e0:d6:c0:c2:e4:
0a:d9:df:ec:67:74:f2:0c:71:a5:85:be:e2:67:da:7f:0a:56:
bd:ce:1a:a9:15:0b:41:b1:96:10:c5:87:68:43:88:3a:18:77:
a2:bf:8c:bf:ea:07:7d:64:3d:22:c0:7d:3d:bb:16:b3:75:7d:
58:1c:ae:66:c1:b7:45:c0:8e:ab:fc:94:0c:b0:0f:c9:c0:a1:
2a:28:43:e8:cd:b0:e2:82:0a:ae:83:36:64:41:1b:c0:76:a1:
0d:82:12:aa:db:e2:a3:72:7c:b5:ba:37:5c:50:bf:82:89:db:
77:e8:56:04:07:21:e0:17:c8:c4:73:3d:d9:ef:2d:b6:10:22:
dc:3c:bd:7f:91:e1:65:dd:37:2d:27:1f:6c:e2:81:05:57:46:
c8:4b:8f:9b:00:40:9e:74:ad:9d:29:e0:92:97:8c:82:bd:d9:
1f:33:0a:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qh42RzfbGr22atmH+n+a4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZjZlNmI1YTM0ZmQxOGI0MzUzODVkYjg3YmIzYWU5NzQ3
ODUxMDgwHhcNMjYwNzI4MjEwMDM3WhcNMjYwNzI5MjEwMDM3WjAzMTEwLwYDVQQD
EygzNGMzMmQ3YTFjMTRmYTQ5YWY5NDEzZTI4MzRhMDc2MGRmZWEzOTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TeWTNMfP5P60csceF4K4XlDM25p
S4i7IRQVwisPGUH1NYMNnT2SL/4Q9ppp+LnGr6KIkmDoad6EPKJVFjR7WM+3+Jb4
It2kV23Nt9qYfDE86b1ae2U7TIXejTm/iaeD5nDyftWgKAKELIeaqJ5OovrpIGYs
zj19Bzl5WjjkyAgxky9cK7whSoKdeIfa1Ieru8HGQHPL1x2Lt0yKKcxLVxSKNtwK
edzJ7GAhr6/ZY0tgVVYB2pzsDP7ympFMcKEyLIDx9kVEfoeGu1gHJhgFzdRC5b70
ERvaLRYYWuJJVmCOJ7vOtkeHVD5eeMbK7OshIf78jVSIXaJtIf5va+e0qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDTDLXocFPpJr5QT4oNKB2Df6jlKMB8GA1UdIwQY
MBaAFNL25rWjT9GLQ1OF24e7Oul0eFEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHZibXRhTlAwWXREVTRYYmg3czY2WFI0VVFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS85YjBjNzctODA4NS00YTVhLWJhY2Ut
MTQzYzNkMzhkMTdjLzEvMHZibXRhTlAwWXREVTRYYmg3czY2WFI0VVFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS85YjBjNzctODA4NS00YTVhLWJhY2UtMTQzYzNkMzhkMTdj
LzEvMHZibXRhTlAwWXREVTRYYmg3czY2WFI0VVFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR4rLrkrK
4md/J7yHa737myeS5ps0csKcgn/PdMMmKODK6xaW4oPmvnMQyWGz/gL9pFNyZprR
0JKKvBNwifIFRz7uLU6w9fb7gRP/UUHxFiXZwDVK+uDWwMLkCtnf7Gd08gxxpYW+
4mfafwpWvc4aqRULQbGWEMWHaEOIOhh3or+Mv+oHfWQ9IsB9PbsWs3V9WByuZsG3
RcCOq/yUDLAPycChKihD6M2w4oIKroM2ZEEbwHahDYISqtvio3J8tbo3XFC/gonb
d+hWBAch4BfIxHM92e8tthAi3Dy9f5HhZd03LScfbOKBBVdGyEuPmwBAnnStnSng
kpeMgr3ZHzMKaA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:33:57 2026 by rpki-client