Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
File: 0gVCphNVJBQhlMqnCOfbLMprTmM.mft (raw, json)
Hash identifier: uf0Ae3erYWYjlBqueCofEiIVUrS6BGhsAP5GGuJHqJs=
Subject key identifier: 1B:A3:96:38:66:2C:9D:A4:3D:BF:CB:86:D4:6F:73:D2:59:8D:6D:CF
Authority key identifier: D2:05:42:A6:13:55:24:14:21:94:CA:A7:08:E7:DB:2C:CA:6B:4E:63
Certificate issuer: /CN=d20542a6135524142194caa708e7db2cca6b4e63
Certificate serial: 019FA93DB5AD8D70E3E21A4BAB3C9C50A07F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
Manifest number: 12AB
Signing time: Tue 28 Jul 2026 15:00:21 +0000
Manifest this update: Tue 28 Jul 2026 15:00:21 +0000
Manifest next update: Wed 29 Jul 2026 15:00:21 +0000
Files and hashes: 1: 0gVCphNVJBQhlMqnCOfbLMprTmM.crl (hash: hz54VaEGOCbN6zI+EW4Inf5CgHilDfauw0wqX8ry9Nc=)
2: W-WGisgg-jdHv8TOeMHyK0ABKKM.roa (hash: AOrzg/e6GHv0wl5jj9rXhlmu6Xrpu+wHeWmnEnYMw/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 15:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:b5:ad:8d:70:e3:e2:1a:4b:ab:3c:9c:50:a0:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d20542a6135524142194caa708e7db2cca6b4e63
Validity
Not Before: Jul 28 15:00:21 2026 GMT
Not After : Jul 29 15:00:21 2026 GMT
Subject: CN=1ba39638662c9da43dbfcb86d46f73d2598d6dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7b:1a:f8:d7:85:99:d6:ae:9f:7d:4c:70:2f:
df:f0:59:26:c3:90:f0:be:dd:17:18:b2:e8:b9:68:
9f:34:3f:98:16:30:49:ae:25:85:55:1a:61:49:34:
31:24:42:f3:73:a2:27:24:80:d7:cc:a5:8f:60:2f:
5f:f6:4d:5f:62:bd:b3:07:e2:f2:1a:78:c5:9b:9d:
46:2b:8a:d6:fa:6b:8c:1f:a6:c6:c6:ba:3f:da:08:
90:86:73:e9:73:a9:26:4b:c9:49:60:b8:3a:a4:22:
75:8b:e8:94:1c:47:76:ad:db:a7:4f:13:c4:80:bf:
8e:ef:ba:e6:b7:5a:ac:57:d4:ea:66:55:61:bc:e3:
1c:41:4f:4c:d1:37:1f:45:90:b7:ba:39:8a:42:bc:
74:1a:5e:12:f2:54:78:27:f4:0e:45:32:8d:d2:fe:
a1:90:04:39:64:4e:c2:de:c1:6b:69:d4:09:51:87:
13:76:20:00:ea:6a:70:d5:d4:58:67:f7:27:b7:0a:
49:84:53:ae:e4:26:c3:fe:f7:40:fa:26:b7:5f:4e:
f3:38:bc:6e:53:a2:63:6b:b3:97:2e:0a:46:e5:88:
cb:91:50:bc:8b:46:35:55:fa:fb:e5:0b:fd:51:2a:
86:83:f4:ec:21:d4:8f:cf:b2:fb:ed:98:2b:10:b6:
ae:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A3:96:38:66:2C:9D:A4:3D:BF:CB:86:D4:6F:73:D2:59:8D:6D:CF
X509v3 Authority Key Identifier:
keyid:D2:05:42:A6:13:55:24:14:21:94:CA:A7:08:E7:DB:2C:CA:6B:4E:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:04:6c:54:27:78:2e:6d:1c:92:a2:c3:b6:6b:d0:89:03:e0:
b9:9a:f0:0c:0a:0f:2a:3f:37:c0:82:1f:8e:e8:18:76:1d:20:
5f:ef:db:70:93:3e:95:b6:27:29:ca:e5:e3:03:2e:48:e7:64:
67:4f:64:0e:02:1d:85:4d:64:d4:01:ca:fd:76:4f:1b:8d:6f:
e8:c0:f0:d9:6e:96:2a:1e:a2:7e:31:e0:24:1d:77:a9:6f:7e:
e9:b1:7d:42:db:bc:dc:ac:98:13:d2:c4:f7:91:df:1f:99:86:
a0:1a:83:7c:d0:40:e5:51:ac:99:ab:d3:c6:54:67:ec:21:1e:
80:a0:29:e8:49:09:b2:25:e7:00:d2:f5:a8:4f:c5:78:d9:ff:
ed:f6:e7:01:ca:b3:ff:d8:11:b9:59:7f:cb:61:a0:44:c8:34:
17:9d:eb:d3:8c:7d:33:93:62:f9:ad:51:d6:87:1c:50:7c:9f:
5a:19:85:4c:99:b9:0e:63:f5:43:3f:a7:76:58:b1:45:9b:d8:
23:50:61:1f:f4:b9:6c:0d:fe:d0:a5:97:c4:13:4e:58:38:9a:
01:f9:e0:2c:0a:27:37:40:11:03:4f:b7:3d:0c:a7:71:cd:23:
4d:48:94:e7:fa:2d:21:44:ef:c4:86:59:5c:8f:a6:f0:54:49:
85:62:8d:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pPbWtjXDj4hpLqzycUKB/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMDU0MmE2MTM1NTI0MTQyMTk0Y2FhNzA4ZTdkYjJjY2E2
YjRlNjMwHhcNMjYwNzI4MTUwMDIxWhcNMjYwNzI5MTUwMDIxWjAzMTEwLwYDVQQD
EygxYmEzOTYzODY2MmM5ZGE0M2RiZmNiODZkNDZmNzNkMjU5OGQ2ZGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHsa+NeFmdaun31McC/f8Fkmw5Dw
vt0XGLLouWifND+YFjBJriWFVRphSTQxJELzc6InJIDXzKWPYC9f9k1fYr2zB+Ly
GnjFm51GK4rW+muMH6bGxro/2giQhnPpc6kmS8lJYLg6pCJ1i+iUHEd2rdunTxPE
gL+O77rmt1qsV9TqZlVhvOMcQU9M0TcfRZC3ujmKQrx0Gl4S8lR4J/QORTKN0v6h
kAQ5ZE7C3sFradQJUYcTdiAA6mpw1dRYZ/cntwpJhFOu5CbD/vdA+ia3X07zOLxu
U6Jja7OXLgpG5YjLkVC8i0Y1Vfr75Qv9USqGg/TsIdSPz7L77ZgrELau+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBujljhmLJ2kPb/LhtRvc9JZjW3PMB8GA1UdIwQY
MBaAFNIFQqYTVSQUIZTKpwjn2yzKa05jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGdWQ3BoTlZKQlFobE1xbkNPZmJMTXByVG1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9jMzA5ZWMtMzI1NC00MjAwLTlhNWUt
YWI0MmI0YzkzZWQ5LzEvMGdWQ3BoTlZKQlFobE1xbkNPZmJMTXByVG1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9jMzA5ZWMtMzI1NC00MjAwLTlhNWUtYWI0MmI0YzkzZWQ5
LzEvMGdWQ3BoTlZKQlFobE1xbkNPZmJMTXByVG1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAQRsVCd4
Lm0ckqLDtmvQiQPguZrwDAoPKj83wIIfjugYdh0gX+/bcJM+lbYnKcrl4wMuSOdk
Z09kDgIdhU1k1AHK/XZPG41v6MDw2W6WKh6ifjHgJB13qW9+6bF9Qtu83KyYE9LE
95HfH5mGoBqDfNBA5VGsmavTxlRn7CEegKAp6EkJsiXnANL1qE/FeNn/7fbnAcqz
/9gRuVl/y2GgRMg0F53r04x9M5Ni+a1R1occUHyfWhmFTJm5DmP1Qz+ndlixRZvY
I1BhH/S5bA3+0KWXxBNOWDiaAfngLAonN0ARA0+3PQyncc0jTUiU5/otIUTvxIZZ
XI+m8FRJhWKN+w==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:59:55 2026 by rpki-client