Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
File: 0PbNMLTPoZPiJrupKC42aiKjEQ8.mft (raw, json)
Hash identifier: RKmv8HjCXTA1oCo8YcrqueM8av1CoM4ve5DuxiYgUd4=
Subject key identifier: D1:9E:E6:7A:C1:63:24:CC:7E:59:14:3F:10:44:3F:8F:DD:2C:14:0C
Authority key identifier: D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
Certificate issuer: /CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Certificate serial: 019FA975593B479D1A4C6F599102386B402F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 16:01:07 +0000
Manifest this update: Tue 28 Jul 2026 16:01:07 +0000
Manifest next update: Wed 29 Jul 2026 16:01:07 +0000
Files and hashes: 1: 0PbNMLTPoZPiJrupKC42aiKjEQ8.crl (hash: nKxtLBC9eesyduutr5kvmcL0NmG2UrNOE1dLqYS6PLw=)
2: 0g907WBXD4qZBS5Lv--lVG4AGmY.roa (hash: ADx0uWHqRsIMIEM4zrRsIaFkNMUykkO7aZ3mKfDHgOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:59:3b:47:9d:1a:4c:6f:59:91:02:38:6b:40:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Validity
Not Before: Jul 28 16:01:07 2026 GMT
Not After : Jul 29 16:01:07 2026 GMT
Subject: CN=d19ee67ac16324cc7e59143f10443f8fdd2c140c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:06:04:c2:60:cb:80:62:7e:a0:ca:b6:73:25:
b9:29:68:07:bc:b3:73:1f:20:38:1a:8e:0f:8a:af:
1a:c9:6a:29:e8:95:b0:ad:2c:c8:07:53:fb:1a:68:
43:8a:a6:bf:c3:ee:78:bf:a2:da:c1:eb:f7:e3:5e:
ed:4f:c3:9f:5c:81:a1:a8:f0:f0:ff:41:6c:5a:44:
eb:08:93:ea:a6:02:dc:1d:9d:61:7f:8f:c4:63:0d:
0a:ff:34:8b:5d:a7:3f:c2:e5:a1:e9:e4:2b:b8:72:
11:c5:aa:57:dd:02:fb:c7:ff:1d:a7:f6:ad:f7:25:
38:8e:4d:d5:35:e5:d5:b4:dd:23:4a:35:bf:93:3f:
3b:32:d9:0c:2f:05:05:5c:93:bb:04:8e:cc:5f:c3:
26:03:8d:20:da:a1:ea:f4:7e:bd:b1:62:0a:8b:14:
fe:0c:af:e8:42:36:34:0d:1f:7c:f2:77:f1:49:80:
a1:f2:78:f4:86:c8:07:04:9b:d6:14:7d:22:1a:b4:
d8:ed:15:ee:aa:b5:44:49:a4:b5:c5:61:d0:e3:c3:
a8:75:a5:ba:a5:fe:c8:fe:5d:e8:14:e9:2f:4f:9c:
97:f6:cf:d3:62:9a:ed:04:b6:8d:48:d3:b0:7c:fe:
be:4e:ce:5a:cf:89:4b:42:a5:ab:cf:d9:7b:e0:e8:
55:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:9E:E6:7A:C1:63:24:CC:7E:59:14:3F:10:44:3F:8F:DD:2C:14:0C
X509v3 Authority Key Identifier:
keyid:D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:3b:e1:17:c2:2e:ca:ca:15:b0:db:9a:fd:03:11:65:9f:1b:
5b:d1:14:b0:c1:74:25:73:62:fd:7e:7b:e1:8d:80:57:4c:08:
6e:5e:14:ed:83:69:77:a0:6c:ec:12:3e:4c:14:33:19:a9:5a:
26:5c:17:ad:bf:d6:59:5a:18:ef:9d:3b:7a:86:f9:73:f8:f3:
66:a6:fd:75:47:3e:50:2c:e6:e4:0c:ec:70:ac:0e:ef:17:04:
36:46:a9:5f:68:a5:3f:de:14:6a:f4:b1:37:b4:22:e0:a9:7a:
62:e1:cc:06:fc:ea:32:2c:e6:9f:3d:25:cc:b0:fc:67:27:58:
96:1e:95:90:81:64:cd:2a:c0:fd:b5:63:94:44:26:24:58:33:
e8:b2:35:10:c1:0a:c3:09:44:ca:e9:1d:38:e7:fd:9f:70:d5:
3e:16:11:50:cd:03:c3:bf:e1:f3:f2:c6:f0:3b:d8:8e:2c:5b:
e7:35:2d:de:cd:61:d8:85:96:a2:e0:2f:1b:35:a7:62:35:a1:
46:dc:92:83:fd:59:29:c9:22:91:90:0c:e0:32:f9:88:b3:77:
28:b4:98:03:cc:2d:aa:8a:a6:47:51:f9:02:08:16:cf:f9:2e:
5f:5b:22:44:e5:02:5e:34:80:7a:91:98:ea:d0:01:dd:e8:d4:
0e:1b:ea:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdVk7R50aTG9ZkQI4a0AvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZjZjZDMwYjRjZmExOTNlMjI2YmJhOTI4MmUzNjZhMjJh
MzExMGYwHhcNMjYwNzI4MTYwMTA3WhcNMjYwNzI5MTYwMTA3WjAzMTEwLwYDVQQD
EyhkMTllZTY3YWMxNjMyNGNjN2U1OTE0M2YxMDQ0M2Y4ZmRkMmMxNDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswYEwmDLgGJ+oMq2cyW5KWgHvLNz
HyA4Go4Piq8ayWop6JWwrSzIB1P7GmhDiqa/w+54v6Lawev3417tT8OfXIGhqPDw
/0FsWkTrCJPqpgLcHZ1hf4/EYw0K/zSLXac/wuWh6eQruHIRxapX3QL7x/8dp/at
9yU4jk3VNeXVtN0jSjW/kz87MtkMLwUFXJO7BI7MX8MmA40g2qHq9H69sWIKixT+
DK/oQjY0DR988nfxSYCh8nj0hsgHBJvWFH0iGrTY7RXuqrVESaS1xWHQ48OodaW6
pf7I/l3oFOkvT5yX9s/TYprtBLaNSNOwfP6+Ts5az4lLQqWrz9l74OhVfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNGe5nrBYyTMflkUPxBEP4/dLBQMMB8GA1UdIwQY
MBaAFND2zTC0z6GT4ia7qSguNmoioxEPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFBiTk1MVFBvWlBpSnJ1cEtDNDJhaUtqRVE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yZjY5ZGYtNmYyMy00YWE3LTg4ZjQt
ZTI5OWU5MTAwMzllLzEvMFBiTk1MVFBvWlBpSnJ1cEtDNDJhaUtqRVE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8yZjY5ZGYtNmYyMy00YWE3LTg4ZjQtZTI5OWU5MTAwMzll
LzEvMFBiTk1MVFBvWlBpSnJ1cEtDNDJhaUtqRVE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQzvhF8Iu
ysoVsNua/QMRZZ8bW9EUsMF0JXNi/X574Y2AV0wIbl4U7YNpd6Bs7BI+TBQzGala
JlwXrb/WWVoY7507eob5c/jzZqb9dUc+UCzm5AzscKwO7xcENkapX2ilP94UavSx
N7Qi4Kl6YuHMBvzqMizmnz0lzLD8ZydYlh6VkIFkzSrA/bVjlEQmJFgz6LI1EMEK
wwlEyukdOOf9n3DVPhYRUM0Dw7/h8/LG8DvYjixb5zUt3s1h2IWWouAvGzWnYjWh
RtySg/1ZKckikZAM4DL5iLN3KLSYA8wtqoqmR1H5AggWz/kuX1siROUCXjSAepGY
6tAB3ejUDhvqxQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:20:03 2026 by rpki-client