Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/0gLAZzE-9zWn5FcXfZhL7oJH7tg.mft
File: 0gLAZzE-9zWn5FcXfZhL7oJH7tg.mft (raw, json)
Hash identifier: QVIO8ZIWbDspkTPMrMRrOxeFT2fAEJfVjvTMTFb1K14=
Subject key identifier: A4:22:DE:B9:18:E4:37:F9:2A:E8:CE:92:6B:E8:88:47:82:BD:BC:D4
Authority key identifier: D2:02:C0:67:31:3E:F7:35:A7:E4:57:17:7D:98:4B:EE:82:47:EE:D8
Certificate issuer: /CN=d202c067313ef735a7e457177d984bee8247eed8
Certificate serial: 019FA899DDF05A948C46F861FFF6DC9C4955
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gLAZzE-9zWn5FcXfZhL7oJH7tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/0gLAZzE-9zWn5FcXfZhL7oJH7tg.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:23 +0000
Manifest this update: Tue 28 Jul 2026 12:01:23 +0000
Manifest next update: Wed 29 Jul 2026 12:01:23 +0000
Files and hashes: 1: 0gLAZzE-9zWn5FcXfZhL7oJH7tg.crl (hash: c+r/TT+6XzxBJF4HCV5M0z5HQR76dmnquG/9BvlPVnI=)
2: FbXzWOIy96A0WmVm-cW1EkuAflo.roa (hash: OqoaYWzNQxvbw5i0dyRdE2zoerUvnCGdGeTeqMBNdQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/0gLAZzE-9zWn5FcXfZhL7oJH7tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/0gLAZzE-9zWn5FcXfZhL7oJH7tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0gLAZzE-9zWn5FcXfZhL7oJH7tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:dd:f0:5a:94:8c:46:f8:61:ff:f6:dc:9c:49:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d202c067313ef735a7e457177d984bee8247eed8
Validity
Not Before: Jul 28 12:01:23 2026 GMT
Not After : Jul 29 12:01:23 2026 GMT
Subject: CN=a422deb918e437f92ae8ce926be8884782bdbcd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:01:7a:63:8d:65:c9:be:f3:bf:62:b3:a7:a1:
80:58:59:10:af:63:28:6a:1c:6f:61:db:48:57:5b:
0c:9a:c7:fd:ae:1f:77:4f:2b:50:64:d6:35:da:6a:
2a:02:57:4f:e4:af:b9:44:c0:05:27:04:d4:8c:88:
e6:58:f8:5b:8d:7c:d1:de:28:72:fe:d9:d3:39:91:
98:5a:8d:40:b8:ec:2d:cf:82:65:31:8a:0c:dd:9f:
41:af:77:f2:3f:5a:33:7e:19:88:5a:83:ee:29:be:
63:3d:fa:ca:d3:2d:44:3f:7c:dc:f9:62:8b:81:41:
e1:42:ee:dc:7f:33:89:4a:4b:81:72:74:8e:4a:c3:
db:7e:b0:c9:8d:79:4b:01:d3:09:61:a9:77:36:25:
82:01:58:e3:9c:c0:5a:f5:0a:cc:b1:ff:2e:5b:5a:
7b:61:18:19:4e:cf:16:40:b4:9a:78:69:63:99:5a:
5f:bc:e6:7d:2f:aa:d7:67:49:20:6e:81:c6:58:e7:
bd:a8:f3:28:a2:95:ce:25:99:ff:94:66:47:da:a1:
ce:26:20:b2:d0:b2:b1:bd:77:a8:b8:00:3d:c8:68:
00:f9:53:04:13:cc:3c:d1:e5:de:d3:ce:00:49:81:
ee:65:e3:25:0d:d0:82:e1:ef:b9:69:30:32:79:77:
dd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:22:DE:B9:18:E4:37:F9:2A:E8:CE:92:6B:E8:88:47:82:BD:BC:D4
X509v3 Authority Key Identifier:
keyid:D2:02:C0:67:31:3E:F7:35:A7:E4:57:17:7D:98:4B:EE:82:47:EE:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gLAZzE-9zWn5FcXfZhL7oJH7tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/0gLAZzE-9zWn5FcXfZhL7oJH7tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/0gLAZzE-9zWn5FcXfZhL7oJH7tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ca:04:40:4e:7b:54:39:14:99:55:a2:5b:da:21:18:01:0c:
b7:3c:50:64:a6:97:59:16:c7:64:15:40:a5:c5:89:97:a7:92:
c0:9a:7a:c2:e4:b9:be:0a:cc:ed:d7:c0:31:bd:fc:9c:16:88:
ab:8e:fe:71:33:19:d7:e0:a5:d9:cd:84:f0:38:41:74:6f:53:
a2:30:d2:fd:d9:e2:0e:f9:49:bd:2c:65:19:61:19:ad:a1:9c:
cd:ff:42:66:b4:1b:36:8b:60:d9:90:60:3f:31:6c:98:71:bc:
a8:46:b1:6c:dc:64:3d:23:0f:23:02:ef:1e:8b:ea:a9:01:66:
58:e2:3b:47:16:bb:3f:42:3a:f8:4f:45:c8:b1:09:e6:d8:01:
a7:46:88:0b:78:57:02:8d:83:87:1f:d6:fb:28:6d:4d:9d:35:
34:3b:3a:a7:6f:d6:f5:02:f7:6a:bc:c9:84:c3:67:e6:80:5a:
76:ba:5c:19:5d:8b:c1:45:aa:57:a8:91:44:58:af:aa:07:70:
01:28:4c:0f:61:cd:93:c4:77:dd:2c:8a:33:76:7e:bc:bb:66:
6c:73:f7:9e:3e:02:06:4a:6d:70:c2:6f:c2:9e:4c:42:c8:f7:
38:ca:a3:70:73:40:b2:10:ad:f5:8d:eb:26:f8:fd:91:54:df:
7e:53:a3:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omd3wWpSMRvhh//bcnElVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMDJjMDY3MzEzZWY3MzVhN2U0NTcxNzdkOTg0YmVlODI0
N2VlZDgwHhcNMjYwNzI4MTIwMTIzWhcNMjYwNzI5MTIwMTIzWjAzMTEwLwYDVQQD
EyhhNDIyZGViOTE4ZTQzN2Y5MmFlOGNlOTI2YmU4ODg0NzgyYmRiY2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gF6Y41lyb7zv2Kzp6GAWFkQr2Mo
ahxvYdtIV1sMmsf9rh93TytQZNY12moqAldP5K+5RMAFJwTUjIjmWPhbjXzR3ihy
/tnTOZGYWo1AuOwtz4JlMYoM3Z9Br3fyP1ozfhmIWoPuKb5jPfrK0y1EP3zc+WKL
gUHhQu7cfzOJSkuBcnSOSsPbfrDJjXlLAdMJYal3NiWCAVjjnMBa9QrMsf8uW1p7
YRgZTs8WQLSaeGljmVpfvOZ9L6rXZ0kgboHGWOe9qPMoopXOJZn/lGZH2qHOJiCy
0LKxvXeouAA9yGgA+VMEE8w80eXe084ASYHuZeMlDdCC4e+5aTAyeXfdNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQi3rkY5Df5KujOkmvoiEeCvbzUMB8GA1UdIwQY
MBaAFNICwGcxPvc1p+RXF32YS+6CR+7YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGdMQVp6RS05elduNUZjWGZaaEw3b0pIN3RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8wZDg0MGMtOTUyZC00NzAyLWFiYTMt
YjZlNThmOWM4MmUxLzEvMGdMQVp6RS05elduNUZjWGZaaEw3b0pIN3RnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8wZDg0MGMtOTUyZC00NzAyLWFiYTMtYjZlNThmOWM4MmUx
LzEvMGdMQVp6RS05elduNUZjWGZaaEw3b0pIN3RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALMoEQE57
VDkUmVWiW9ohGAEMtzxQZKaXWRbHZBVApcWJl6eSwJp6wuS5vgrM7dfAMb38nBaI
q47+cTMZ1+Cl2c2E8DhBdG9TojDS/dniDvlJvSxlGWEZraGczf9CZrQbNotg2ZBg
PzFsmHG8qEaxbNxkPSMPIwLvHovqqQFmWOI7Rxa7P0I6+E9FyLEJ5tgBp0aIC3hX
Ao2Dhx/W+yhtTZ01NDs6p2/W9QL3arzJhMNn5oBadrpcGV2LwUWqV6iRRFivqgdw
AShMD2HNk8R33SyKM3Z+vLtmbHP3nj4CBkptcMJvwp5MQsj3OMqjcHNAshCt9Y3r
Jvj9kVTfflOjNQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:06:58 2026 by rpki-client