Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
File: 0H3DXrzYjdDiqNs6WghlS8O-AmI.mft (raw, json)
Hash identifier: zIM29VUq96mYHrXCRCEKaKVgJ2FuiSKVQiRtlAV4sFo=
Subject key identifier: 9A:75:9D:02:8F:44:7C:20:DC:D8:7B:19:2A:B8:B9:95:ED:D4:16:CE
Authority key identifier: D0:7D:C3:5E:BC:D8:8D:D0:E2:A8:DB:3A:5A:08:65:4B:C3:BE:02:62
Certificate issuer: /CN=d07dc35ebcd88dd0e2a8db3a5a08654bc3be0262
Certificate serial: 019FA93DEB4A9F5742B6EC48A76F65525A88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 15:00:35 +0000
Manifest this update: Tue 28 Jul 2026 15:00:35 +0000
Manifest next update: Wed 29 Jul 2026 15:00:35 +0000
Files and hashes: 1: 0H3DXrzYjdDiqNs6WghlS8O-AmI.crl (hash: MOi9vLv/Tes4BGJ5NGoHzMnCWxzemDHQ3cWgI1fsePY=)
2: 5S9zgsI7YdgCuLrcxrJgJGgaXio.roa (hash: 0SOHInOOcBkpkEBjrdDgxxRvZ1Vm8a53UcIVrdFkYco=)
3: 6rWLYcpP7TzQKUSgMq9oQds6Kqo.roa (hash: m4nWZTQSZpBwm2N4gNE+CRW9B3H0JjT5K3DxWrPCn/E=)
4: 7gj3qwzFulpZ74m7sX-j6kpzvWg.roa (hash: CZUn6B9GSjHpISyR7znrv7W2c0uiMaQCOD7zBfEJXUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:eb:4a:9f:57:42:b6:ec:48:a7:6f:65:52:5a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07dc35ebcd88dd0e2a8db3a5a08654bc3be0262
Validity
Not Before: Jul 28 15:00:35 2026 GMT
Not After : Jul 29 15:00:35 2026 GMT
Subject: CN=9a759d028f447c20dcd87b192ab8b995edd416ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f9:46:a2:0a:07:12:f3:98:96:91:e0:78:f0:
59:15:1a:8f:df:57:e5:39:da:f7:78:ca:ee:f1:94:
9e:56:e6:f1:4a:a7:70:10:c7:9d:2c:c4:88:15:5f:
08:83:a9:7b:e1:c7:96:e0:04:ec:64:04:e3:d4:11:
c2:af:f0:70:cb:ea:12:48:95:f7:86:81:4c:a0:ee:
8e:44:75:10:6f:db:84:02:ee:c8:de:e4:42:49:2f:
ec:56:2f:1c:b4:44:2e:10:1f:01:c7:e3:b0:db:19:
b2:32:1b:8a:05:de:14:10:d2:e2:42:8f:7b:8a:de:
d2:28:ae:e8:a5:21:a8:64:ec:74:a4:55:62:c4:ec:
26:25:1a:74:a6:bf:9b:b3:57:45:75:05:a3:b3:72:
b0:3a:9e:d0:6b:cb:76:eb:61:17:fb:6b:ed:d2:3e:
02:9c:e8:e9:ac:e3:4d:01:13:4c:c3:9f:a1:db:1b:
21:a4:87:45:d1:75:db:4d:64:ea:37:d1:2e:a1:da:
8f:2d:f0:0d:17:5f:3b:06:27:19:d1:e1:34:5b:64:
cb:3e:4f:8d:17:46:a0:77:b3:18:23:86:d3:86:0d:
ac:a6:90:98:88:cf:32:84:4d:7a:09:58:5a:93:2e:
12:f9:de:13:c0:95:5e:e7:f0:b9:86:70:4a:d4:e2:
d0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:75:9D:02:8F:44:7C:20:DC:D8:7B:19:2A:B8:B9:95:ED:D4:16:CE
X509v3 Authority Key Identifier:
keyid:D0:7D:C3:5E:BC:D8:8D:D0:E2:A8:DB:3A:5A:08:65:4B:C3:BE:02:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:77:7c:e9:9b:30:af:ea:08:fc:46:8a:84:0d:0c:dc:e8:03:
30:8d:0f:2d:4d:7a:4a:aa:9e:5d:10:1e:13:1d:a2:10:69:95:
e6:52:1f:e4:74:fc:02:ee:ea:4f:3c:4f:c3:dc:93:52:16:c5:
d2:c4:e5:db:b2:61:72:2c:a9:27:7d:4f:61:19:84:87:b9:46:
3c:d3:55:82:45:c5:2d:a0:43:4a:47:de:c5:86:36:ce:c9:04:
d5:dc:3e:0e:cc:c3:46:8a:e9:54:a8:62:7b:fa:e7:8c:68:a3:
23:c7:31:15:0b:2a:10:ac:ac:00:58:ba:14:f8:2e:66:a2:42:
51:77:ac:e2:6e:4e:10:f4:1c:23:38:c4:70:56:2a:e4:e7:8b:
8f:a9:ff:c1:96:b7:80:ee:bb:8a:62:e0:2f:3a:54:3a:b1:e7:
c0:66:e9:b7:10:a7:69:cf:3e:2e:9e:47:12:64:18:dd:53:12:
49:4f:1c:fe:82:a8:35:03:6d:b4:08:2d:48:ae:82:8f:95:08:
cf:67:4a:22:3d:e0:6a:7c:6d:e3:9e:2b:4a:5b:f9:ab:84:43:
e7:10:ca:50:4c:6f:7b:d7:76:7d:c3:0f:c6:fe:08:4e:08:ac:
0d:9f:5d:46:66:62:66:d2:5d:fb:13:34:1e:e9:a9:d1:4f:dc:
2e:02:52:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:37:28 2026 by rpki-client