Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
File: 0mHPvAfsMGN33LFql6EWDHptgsw.mft (raw, json)
Hash identifier: kMSsw44nE9w6an//oXPzfNat9ef7Qi5yCWfzXft15yM=
Subject key identifier: 1C:64:5D:E7:8E:08:05:43:E8:79:85:93:54:45:AB:0A:EC:58:0B:2E
Authority key identifier: D2:61:CF:BC:07:EC:30:63:77:DC:B1:6A:97:A1:16:0C:7A:6D:82:CC
Certificate issuer: /CN=d261cfbc07ec306377dcb16a97a1160c7a6d82cc
Certificate serial: 019FA9074BD5DCD97112F35D76713F4FB186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
Manifest number: 0614
Signing time: Tue 28 Jul 2026 14:00:55 +0000
Manifest this update: Tue 28 Jul 2026 14:00:55 +0000
Manifest next update: Wed 29 Jul 2026 14:00:55 +0000
Files and hashes: 1: 0mHPvAfsMGN33LFql6EWDHptgsw.crl (hash: v6C43RHCbvT8Hn/riYS8IggZOf01HNZpT7XAu+bPOao=)
2: p0fL_-s25OijH9UglPLyGf3hQ3k.roa (hash: sp4Y+8h1IocJtG1a3SfrXHCpPOK9+n80lPdEb2+Nl4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:4b:d5:dc:d9:71:12:f3:5d:76:71:3f:4f:b1:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d261cfbc07ec306377dcb16a97a1160c7a6d82cc
Validity
Not Before: Jul 28 14:00:55 2026 GMT
Not After : Jul 29 14:00:55 2026 GMT
Subject: CN=1c645de78e080543e87985935445ab0aec580b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e7:f2:ac:2c:07:a7:23:6a:dc:47:75:e0:7f:
de:21:7c:b2:c6:ac:36:95:6c:21:4f:63:b4:35:9f:
76:c8:b8:00:22:68:09:ea:4a:af:4c:03:29:80:51:
af:0c:0d:fa:be:5b:03:5e:58:5a:6a:f3:f7:b1:a5:
df:51:b7:ab:d4:60:0c:75:3a:fb:1e:31:06:ab:b1:
b1:98:3f:1c:72:3f:c5:ca:ec:af:e1:32:b9:02:89:
11:06:48:b1:e5:1a:86:20:f0:20:d8:29:19:c2:a8:
34:ea:11:cd:78:4e:16:f3:3b:a5:a3:d0:8c:e2:d4:
c4:49:f8:2b:0b:d4:64:8f:cc:ca:9d:97:b1:7e:73:
e3:72:1e:3e:56:39:c7:e5:79:4c:ef:d7:d1:76:c0:
1d:83:4a:38:0c:9f:e9:34:3f:5e:70:73:5f:2e:eb:
27:bf:8f:a3:59:99:4b:88:5c:aa:bb:32:b1:29:01:
c3:46:51:a2:6c:94:3c:50:fb:3d:6b:14:59:da:1f:
03:93:77:91:aa:4c:5c:c9:a2:86:c8:f8:1a:4a:ef:
50:22:69:9e:ae:42:e6:30:8e:b9:95:cd:73:d2:0c:
4e:93:b5:1d:a6:ba:15:9c:8b:38:8a:1f:cb:ae:e6:
8b:fd:99:39:24:da:98:d8:1b:57:01:6d:96:9a:7e:
b2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:64:5D:E7:8E:08:05:43:E8:79:85:93:54:45:AB:0A:EC:58:0B:2E
X509v3 Authority Key Identifier:
keyid:D2:61:CF:BC:07:EC:30:63:77:DC:B1:6A:97:A1:16:0C:7A:6D:82:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:7c:0e:dc:7b:0a:74:55:57:6c:25:f8:ad:4f:10:ac:1c:43:
10:3b:60:84:d1:77:2f:09:2a:8b:4d:21:ca:c0:7f:17:73:1f:
46:06:b5:73:90:18:e9:79:e8:8e:c2:84:5c:73:dd:83:f6:93:
57:e2:00:38:88:4b:76:89:f8:31:d1:dc:ca:b3:57:af:1b:ce:
99:64:52:af:57:e2:f0:49:dd:84:35:cf:b6:6e:85:f9:d7:fb:
c3:5d:3a:c4:17:c1:d2:2a:ea:01:ce:48:b4:f8:e2:5e:24:6d:
29:a6:e3:40:60:30:f1:9a:c1:8c:09:3e:4e:3d:db:48:ca:0b:
a3:cb:24:81:bf:88:75:87:81:d2:c0:5f:c0:b8:0f:27:81:df:
cd:d8:43:fb:07:de:0a:1e:ce:d9:e3:f7:e9:51:4a:33:50:bb:
1f:9b:d5:02:97:d6:4c:98:54:ea:e5:21:75:69:08:4e:02:38:
61:cc:b1:41:76:04:a7:29:48:fb:ad:d0:f8:f1:28:72:91:05:
5a:dd:e0:c3:93:1d:83:cd:03:75:1b:69:1e:b8:9a:24:4c:f9:
b1:52:f7:0d:64:03:40:9f:6c:9d:2c:98:36:ce:bf:a9:31:50:
b3:67:66:5e:ff:3d:1d:9f:91:75:75:bf:ad:26:d1:8c:18:41:
7f:30:6f:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pB0vV3NlxEvNddnE/T7GGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNjFjZmJjMDdlYzMwNjM3N2RjYjE2YTk3YTExNjBjN2E2
ZDgyY2MwHhcNMjYwNzI4MTQwMDU1WhcNMjYwNzI5MTQwMDU1WjAzMTEwLwYDVQQD
EygxYzY0NWRlNzhlMDgwNTQzZTg3OTg1OTM1NDQ1YWIwYWVjNTgwYjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlufyrCwHpyNq3Ed14H/eIXyyxqw2
lWwhT2O0NZ92yLgAImgJ6kqvTAMpgFGvDA36vlsDXlhaavP3saXfUber1GAMdTr7
HjEGq7GxmD8ccj/Fyuyv4TK5AokRBkix5RqGIPAg2CkZwqg06hHNeE4W8zulo9CM
4tTESfgrC9Rkj8zKnZexfnPjch4+VjnH5XlM79fRdsAdg0o4DJ/pND9ecHNfLusn
v4+jWZlLiFyquzKxKQHDRlGibJQ8UPs9axRZ2h8Dk3eRqkxcyaKGyPgaSu9QImme
rkLmMI65lc1z0gxOk7UdproVnIs4ih/LruaL/Zk5JNqY2BtXAW2Wmn6y1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxkXeeOCAVD6HmFk1RFqwrsWAsuMB8GA1UdIwQY
MBaAFNJhz7wH7DBjd9yxapehFgx6bYLMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG1IUHZBZnNNR04zM0xGcWw2RVdESHB0Z3N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80ZWFmYzktNTQ3My00NjAyLWExNDkt
OTIyYTE2ZDExN2RkLzEvMG1IUHZBZnNNR04zM0xGcWw2RVdESHB0Z3N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS80ZWFmYzktNTQ3My00NjAyLWExNDktOTIyYTE2ZDExN2Rk
LzEvMG1IUHZBZnNNR04zM0xGcWw2RVdESHB0Z3N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjnwO3HsK
dFVXbCX4rU8QrBxDEDtghNF3Lwkqi00hysB/F3MfRga1c5AY6XnojsKEXHPdg/aT
V+IAOIhLdon4MdHcyrNXrxvOmWRSr1fi8EndhDXPtm6F+df7w106xBfB0irqAc5I
tPjiXiRtKabjQGAw8ZrBjAk+Tj3bSMoLo8skgb+IdYeB0sBfwLgPJ4HfzdhD+wfe
Ch7O2eP36VFKM1C7H5vVApfWTJhU6uUhdWkITgI4YcyxQXYEpylI+63Q+PEocpEF
Wt3gw5Mdg80DdRtpHriaJEz5sVL3DWQDQJ9snSyYNs6/qTFQs2dmXv89HZ+RdXW/
rSbRjBhBfzBvJA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:09:32 2026 by rpki-client