Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
File: 0hNMcoigwXozuLX-jFgGa0RC8YM.mft (raw, json)
Hash identifier: xiqPOm8T3oEKfetrcUKIF+SmQ12iO46J6oqLbRmBxRQ=
Subject key identifier: 25:D9:BB:06:DC:64:80:54:4A:CD:11:1F:AA:99:5C:8F:BA:F0:1C:DA
Authority key identifier: D2:13:4C:72:88:A0:C1:7A:33:B8:B5:FE:8C:58:06:6B:44:42:F1:83
Certificate issuer: /CN=d2134c7288a0c17a33b8b5fe8c58066b4442f183
Certificate serial: 019FAABE723ABD82A293ABBD2DC387DF5B88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
Manifest number: 0805
Signing time: Tue 28 Jul 2026 22:00:35 +0000
Manifest this update: Tue 28 Jul 2026 22:00:35 +0000
Manifest next update: Wed 29 Jul 2026 22:00:35 +0000
Files and hashes: 1: 0hNMcoigwXozuLX-jFgGa0RC8YM.crl (hash: 7Rw4YEUUG0KU9UT4ua58bTNWTBnQ9JPTOGJj8HJeThI=)
2: snrfUjBn7hs_JXI-JDADVPqBfu0.roa (hash: chl5WtQulq1NJ8dnVwRq5DKzxSTQgdztVrgONAQmO1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:72:3a:bd:82:a2:93:ab:bd:2d:c3:87:df:5b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2134c7288a0c17a33b8b5fe8c58066b4442f183
Validity
Not Before: Jul 28 22:00:35 2026 GMT
Not After : Jul 29 22:00:35 2026 GMT
Subject: CN=25d9bb06dc6480544acd111faa995c8fbaf01cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:68:08:f5:10:43:b5:77:2a:10:21:31:c1:5d:
7d:c1:34:99:ed:aa:98:a8:93:b6:25:a8:48:9b:9f:
3c:40:f1:0d:66:5b:21:57:cc:17:42:0c:df:8b:35:
3c:33:41:6d:a1:19:d1:b6:f7:84:dc:e8:88:91:32:
0c:1e:6f:58:26:5c:33:29:0a:fa:c9:77:85:19:81:
c0:58:eb:0b:ab:d1:aa:df:d5:bd:61:3e:01:21:6c:
e2:79:58:40:41:27:18:3b:3a:27:40:f5:f4:b5:2e:
43:7f:20:48:d8:99:c8:d5:f6:e1:7f:0b:0e:66:b1:
79:b6:db:c8:74:0f:3a:90:bd:a8:53:dd:6c:4d:c4:
97:0c:4c:53:3c:f1:b1:e0:1c:8a:5c:5e:99:ff:b2:
a2:06:9b:88:81:94:06:82:1d:e3:2f:3a:e2:12:1a:
3f:23:a0:7b:fe:20:f2:61:92:c6:00:0d:99:1c:1f:
92:1c:16:da:a9:14:4b:8f:2e:e9:4c:37:e5:4a:42:
05:83:31:bb:28:80:72:e1:a3:13:78:05:7b:1d:e0:
90:ff:5e:84:d1:a6:6e:21:d5:e6:39:38:2b:62:07:
9c:37:11:9e:9c:50:55:a4:f9:96:3c:1e:02:3a:23:
82:92:7b:89:97:b0:ef:92:08:c0:d6:87:2f:f8:b7:
0e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D9:BB:06:DC:64:80:54:4A:CD:11:1F:AA:99:5C:8F:BA:F0:1C:DA
X509v3 Authority Key Identifier:
keyid:D2:13:4C:72:88:A0:C1:7A:33:B8:B5:FE:8C:58:06:6B:44:42:F1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:0d:31:95:76:f3:6a:c1:cf:f5:11:73:e1:7b:e1:61:83:c4:
f6:ca:b0:7c:1c:30:ea:07:fb:0c:45:83:1b:5c:58:7f:de:96:
53:05:51:ed:c5:95:8b:4f:cc:ba:b4:d8:88:bc:fa:98:13:69:
c9:84:1a:44:32:63:dc:37:4e:b1:0d:b5:79:ac:95:57:1e:8b:
79:4a:c5:0b:b8:ba:7a:54:f0:cc:a4:7a:24:d8:d8:bc:37:e1:
18:8e:6c:cb:7a:1a:f5:e9:4d:cb:97:91:d0:9a:1d:22:f5:24:
46:9f:24:6f:b7:b4:cf:27:80:45:2c:41:b2:64:d9:0a:ac:8b:
11:9b:73:f0:30:f9:20:88:1c:eb:2a:e6:29:2d:6f:9a:f5:c4:
7e:fa:dd:bf:6e:9a:8f:73:4a:68:81:0b:f5:d1:87:59:13:8e:
1a:dd:80:91:1f:1a:92:75:6e:fa:18:25:19:f8:1b:1f:49:96:
81:9e:72:d5:b8:98:f5:d6:2b:1d:15:54:c8:0f:bc:56:ed:8e:
6a:b6:8e:eb:54:7c:6f:be:61:4b:a3:e7:ab:c1:49:a0:06:0f:
02:6b:5a:0f:f6:5c:6b:53:cc:0f:13:ac:1a:65:21:c1:f4:68:
f4:2f:75:d5:ee:90:85:6a:e9:a1:e3:b5:b8:cf:88:6b:d1:a9:
27:51:33:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qvnI6vYKik6u9LcOH31uIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMTM0YzcyODhhMGMxN2EzM2I4YjVmZThjNTgwNjZiNDQ0
MmYxODMwHhcNMjYwNzI4MjIwMDM1WhcNMjYwNzI5MjIwMDM1WjAzMTEwLwYDVQQD
EygyNWQ5YmIwNmRjNjQ4MDU0NGFjZDExMWZhYTk5NWM4ZmJhZjAxY2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2gI9RBDtXcqECExwV19wTSZ7aqY
qJO2JahIm588QPENZlshV8wXQgzfizU8M0FtoRnRtveE3OiIkTIMHm9YJlwzKQr6
yXeFGYHAWOsLq9Gq39W9YT4BIWzieVhAQScYOzonQPX0tS5DfyBI2JnI1fbhfwsO
ZrF5ttvIdA86kL2oU91sTcSXDExTPPGx4ByKXF6Z/7KiBpuIgZQGgh3jLzriEho/
I6B7/iDyYZLGAA2ZHB+SHBbaqRRLjy7pTDflSkIFgzG7KIBy4aMTeAV7HeCQ/16E
0aZuIdXmOTgrYgecNxGenFBVpPmWPB4COiOCknuJl7DvkgjA1ocv+LcOHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXZuwbcZIBUSs0RH6qZXI+68BzaMB8GA1UdIwQY
MBaAFNITTHKIoMF6M7i1/oxYBmtEQvGDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGhOTWNvaWd3WG96dUxYLWpGZ0dhMFJDOFlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kZGFmNDctNGU2ZC00OTk0LTg3N2It
MmE4OWRmMWFmMTZhLzEvMGhOTWNvaWd3WG96dUxYLWpGZ0dhMFJDOFlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9kZGFmNDctNGU2ZC00OTk0LTg3N2ItMmE4OWRmMWFmMTZh
LzEvMGhOTWNvaWd3WG96dUxYLWpGZ0dhMFJDOFlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApg0xlXbz
asHP9RFz4XvhYYPE9sqwfBww6gf7DEWDG1xYf96WUwVR7cWVi0/MurTYiLz6mBNp
yYQaRDJj3DdOsQ21eayVVx6LeUrFC7i6elTwzKR6JNjYvDfhGI5sy3oa9elNy5eR
0JodIvUkRp8kb7e0zyeARSxBsmTZCqyLEZtz8DD5IIgc6yrmKS1vmvXEfvrdv26a
j3NKaIEL9dGHWROOGt2AkR8aknVu+hglGfgbH0mWgZ5y1biY9dYrHRVUyA+8Vu2O
araO61R8b75hS6Pnq8FJoAYPAmtaD/Zca1PMDxOsGmUhwfRo9C911e6QhWrpoeO1
uM+Ia9GpJ1EzdA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:04:11 2026 by rpki-client