Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3e0ead-eec2-4d21-abe9-16bd8db85893/1/0QBKhuh9Pmm-MhDXDMwAvvigmWg.mft
File: 0QBKhuh9Pmm-MhDXDMwAvvigmWg.mft (raw, json)
Hash identifier: Iq1kvb4wFOmqivjNdE8yEWSimL9EtRt6WNx9zaAtyIs=
Subject key identifier: 9B:B1:F8:45:84:F5:19:56:56:B9:46:75:F8:39:42:C0:CE:78:7A:8C
Authority key identifier: D1:00:4A:86:E8:7D:3E:69:BE:32:10:D7:0C:CC:00:BE:F8:A0:99:68
Certificate issuer: /CN=d1004a86e87d3e69be3210d70ccc00bef8a09968
Certificate serial: 019FACE424AAA2CCE4CEBE58320ADBDA1417
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QBKhuh9Pmm-MhDXDMwAvvigmWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3e0ead-eec2-4d21-abe9-16bd8db85893/1/0QBKhuh9Pmm-MhDXDMwAvvigmWg.mft
Manifest number: 29
Signing time: Wed 29 Jul 2026 08:01:00 +0000
Manifest this update: Wed 29 Jul 2026 08:01:00 +0000
Manifest next update: Thu 30 Jul 2026 08:01:00 +0000
Files and hashes: 1: 0QBKhuh9Pmm-MhDXDMwAvvigmWg.crl (hash: hYg2mpGR1uhiqhOE8jtLCGQbRWFy3bvfLKwYtL7dUiI=)
2: 4eTqXPsY2k0nfIKnegQTKL9VsZc.roa (hash: J2j96Igp+h3cc2jy3MZ29Vf0gTNVfHTR+h+cL3q6LnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3e0ead-eec2-4d21-abe9-16bd8db85893/1/0QBKhuh9Pmm-MhDXDMwAvvigmWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3e0ead-eec2-4d21-abe9-16bd8db85893/1/0QBKhuh9Pmm-MhDXDMwAvvigmWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QBKhuh9Pmm-MhDXDMwAvvigmWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e4:24:aa:a2:cc:e4:ce:be:58:32:0a:db:da:14:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1004a86e87d3e69be3210d70ccc00bef8a09968
Validity
Not Before: Jul 29 08:01:00 2026 GMT
Not After : Jul 30 08:01:00 2026 GMT
Subject: CN=9bb1f84584f5195656b94675f83942c0ce787a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:af:ab:e9:95:c6:9a:c3:90:3d:db:8e:6a:60:
39:b9:0f:6c:54:32:f6:53:1b:0a:50:0f:5b:24:a1:
7d:c1:70:f5:96:c4:19:28:1d:53:c8:15:90:04:5e:
4b:c5:66:01:f7:04:c8:fc:c7:30:7f:44:c1:92:5a:
71:aa:7b:f0:b4:2f:2c:d7:fb:78:57:60:ae:79:58:
32:ae:54:7d:86:89:32:99:49:27:65:d3:f7:65:ab:
47:24:25:f8:62:d6:8c:cb:f2:4c:53:ab:a1:d7:50:
23:59:49:d5:1f:79:be:5a:d9:04:73:1b:e0:39:4c:
0b:fc:8b:01:89:4b:cc:84:91:71:c8:1f:5f:7c:8f:
98:7d:d3:e6:2b:21:61:23:9a:75:6c:0f:f8:69:f9:
46:50:ef:e4:57:3d:29:5a:23:c0:eb:a9:75:3c:28:
58:ff:9b:d6:ba:47:6f:79:3e:15:43:bb:23:e6:c6:
ee:0c:d0:1f:98:d6:88:0c:b4:c6:fb:f6:fd:1b:a5:
ea:46:62:0f:0a:bf:b1:91:36:2b:77:cd:bc:ee:2b:
8e:51:94:eb:ac:53:15:b1:2c:35:82:74:12:72:9d:
4e:e0:06:d1:47:4b:be:6d:93:8a:a2:09:17:be:1b:
b0:4b:15:4f:32:13:36:aa:5a:12:c2:d7:44:20:d7:
81:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B1:F8:45:84:F5:19:56:56:B9:46:75:F8:39:42:C0:CE:78:7A:8C
X509v3 Authority Key Identifier:
keyid:D1:00:4A:86:E8:7D:3E:69:BE:32:10:D7:0C:CC:00:BE:F8:A0:99:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QBKhuh9Pmm-MhDXDMwAvvigmWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e0ead-eec2-4d21-abe9-16bd8db85893/1/0QBKhuh9Pmm-MhDXDMwAvvigmWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e0ead-eec2-4d21-abe9-16bd8db85893/1/0QBKhuh9Pmm-MhDXDMwAvvigmWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:9f:dc:5c:8f:3d:a2:cd:7f:b7:5d:7a:b1:c5:63:b6:35:95:
7e:b6:ab:30:0a:13:2a:c3:5c:a4:f2:c8:97:16:3c:81:f8:9c:
4f:d2:09:a6:7e:2d:53:87:8c:f6:07:60:11:8e:e5:02:28:6d:
00:07:b8:9b:f4:8e:27:26:40:4e:68:b3:89:7c:1b:42:f9:be:
56:c6:f5:3f:2b:9c:ee:82:2f:ec:b0:cf:fa:7d:b9:8e:da:35:
cd:e1:41:5f:6c:e3:53:53:21:41:c3:30:05:0c:27:7e:0a:07:
44:31:d9:07:fc:2f:e0:ae:a8:a4:54:b3:67:2e:ce:d7:c1:ef:
43:d6:fa:51:77:03:83:6a:1f:8e:04:cc:19:a5:6b:e0:d7:70:
cf:da:b4:c8:38:c5:9b:b5:c6:8f:5d:71:08:f3:95:07:0e:fe:
0b:07:dc:51:6b:78:01:05:05:09:61:af:94:8b:9a:a1:70:aa:
bf:a6:6e:8f:eb:44:50:dd:73:69:2c:cb:79:3e:9d:9e:4a:dc:
e8:56:b2:7d:dc:89:eb:8f:98:53:8c:d8:bb:16:dc:7c:15:58:
08:d0:a0:34:26:9a:a1:57:b7:d0:b8:98:a9:ae:86:07:42:4e:
07:7e:2d:0c:ed:4d:24:a5:4b:f5:14:a1:f2:f6:11:59:53:9a:
17:4b:18:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:56:39 2026 by rpki-client