Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
File: 0sHV_U4greXxG2avsQpUyP_ksEA.mft (raw, json)
Hash identifier: F58ggTTgk+4HgCxFfpgidbo2QaUnweHq2n3mnYS3pl8=
Subject key identifier: A8:09:9B:53:4D:1D:C5:B3:41:FA:F9:95:96:A8:85:1F:CB:DD:8D:0F
Authority key identifier: D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40
Certificate issuer: /CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040
Certificate serial: 019FA9E2DA31E4310276A55A5AF97C9C1529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
Manifest number: 1894
Signing time: Tue 28 Jul 2026 18:00:44 +0000
Manifest this update: Tue 28 Jul 2026 18:00:44 +0000
Manifest next update: Wed 29 Jul 2026 18:00:44 +0000
Files and hashes: 1: 0sHV_U4greXxG2avsQpUyP_ksEA.crl (hash: P92jhRgrDMzkftL/lcVQzOfJN5WLz3nV9/IzMpICdsk=)
2: HXdTxxWcJtGk43e4sYB_pqFMLTc.roa (hash: RsmEntoDX046XG0OnjFT3g2UwaVd62q2eGZGnABzJrY=)
3: aAz2084YN5AIEG28w26S7CIam4E.roa (hash: aLh2/I7u2RUBoHwMQV1fEF1N56viK2J9i2I4M3Pdo98=)
4: xjT1qO5EWxpQrrhnqAJVt7vBTz4.roa (hash: jjMJpW6iAOXQaad1T6wVanui4hCLnhsX9J2X5epM//8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:da:31:e4:31:02:76:a5:5a:5a:f9:7c:9c:15:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040
Validity
Not Before: Jul 28 18:00:44 2026 GMT
Not After : Jul 29 18:00:44 2026 GMT
Subject: CN=a8099b534d1dc5b341faf99596a8851fcbdd8d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cc:89:93:20:52:b3:cb:c5:fa:4d:48:2e:73:
38:74:79:04:08:dd:c2:a3:54:c9:0f:a2:0d:34:b8:
e0:be:4f:68:b2:90:de:9d:26:85:dc:bb:e9:44:7b:
2b:2d:44:c3:40:b9:0a:71:8e:c4:24:59:49:a8:13:
93:74:d3:f8:a0:25:08:41:57:fe:c8:c6:41:f4:14:
ab:2c:44:d4:b2:7d:73:91:5b:56:23:fa:61:63:c8:
90:55:67:ff:92:9f:02:68:f3:c0:41:42:42:00:a8:
1f:b6:df:3e:3f:f1:b8:e7:10:c8:48:29:68:96:a5:
1c:7a:56:7f:10:8b:1e:84:e9:19:8c:b9:9c:2f:66:
66:58:21:eb:f0:45:6b:74:f4:b1:08:9d:76:7c:06:
bc:38:5b:b5:91:8b:5a:ee:50:47:c5:58:6c:3c:7e:
60:3c:b6:61:72:f4:78:03:b5:e7:3e:fa:60:f6:81:
46:c4:13:79:d0:f1:e2:c3:a9:8a:ac:64:3a:e0:4d:
32:cd:48:fd:b6:1b:dd:5c:34:f7:13:26:32:a3:06:
fc:6b:02:9b:b8:30:24:03:60:00:dd:73:16:4a:96:
d9:2d:92:37:69:7c:0e:41:5a:9d:a6:d4:8b:ca:4a:
31:5e:27:1f:ad:92:1b:46:c2:71:55:9a:5c:18:ef:
e8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:09:9B:53:4D:1D:C5:B3:41:FA:F9:95:96:A8:85:1F:CB:DD:8D:0F
X509v3 Authority Key Identifier:
keyid:D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:56:ae:de:b7:fc:af:33:01:9a:93:25:ee:05:39:d9:66:84:
18:1f:89:d6:19:f1:d3:d3:e7:fa:87:e7:3e:6a:09:36:c4:77:
cc:17:44:05:2d:45:91:a9:13:8f:c3:ba:85:ea:2a:3f:c8:b8:
cf:9b:08:3c:35:a3:5a:24:53:4b:88:3f:57:82:0e:0a:1f:1b:
e6:6d:e2:33:61:5a:62:9b:93:96:51:12:b6:72:45:8b:3c:ed:
41:59:f0:49:d8:02:5d:38:f8:42:c4:4c:db:b6:15:47:70:2b:
34:26:10:64:8a:a0:8d:f9:4b:c0:46:54:30:28:87:30:b6:b1:
d2:4f:9d:89:4b:d6:15:f5:6b:82:41:c8:3e:dc:b1:67:0b:88:
dc:19:83:14:85:e5:0d:f1:48:68:61:d7:69:b8:58:0f:1f:2d:
27:92:0b:ab:c7:30:0d:d0:6b:cb:aa:67:a3:0f:ba:30:f8:6e:
66:0b:97:c0:b5:a1:36:95:22:a0:17:da:f5:75:d3:29:77:27:
14:46:53:83:1d:99:2a:7f:37:cf:f5:bd:20:d6:3a:e7:aa:64:
cc:a4:00:cf:b2:58:27:54:70:2f:4c:68:f6:b5:b0:be:41:de:
70:0f:2a:80:dd:a6:36:87:41:cc:4d:51:f2:71:7b:c4:58:fe:
a8:fe:09:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:41:26 2026 by rpki-client