Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
File: 0luQuJgbWR11p-k14TBKdAdWAv0.mft (raw, json)
Hash identifier: /JjsUdlO2XDFqQJTzaA1A4abolgIOeLYTcVdcnBQM6E=
Subject key identifier: 7F:F9:49:55:4F:6B:3C:B4:A3:7C:9A:E1:DB:00:2B:5F:D1:32:34:0D
Authority key identifier: D2:5B:90:B8:98:1B:59:1D:75:A7:E9:35:E1:30:4A:74:07:56:02:FD
Certificate issuer: /CN=d25b90b8981b591d75a7e935e1304a74075602fd
Certificate serial: 019FA975293DFD702649AB6EBD139D400A7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
Manifest number: 18AD
Signing time: Tue 28 Jul 2026 16:00:55 +0000
Manifest this update: Tue 28 Jul 2026 16:00:55 +0000
Manifest next update: Wed 29 Jul 2026 16:00:55 +0000
Files and hashes: 1: 0luQuJgbWR11p-k14TBKdAdWAv0.crl (hash: +m/AmXCem5p+5AGgAVEdNpTeER16pqt65jMTqU7QKp4=)
2: PzBJvCvuKoLcfTByzdz7KrKT9g0.roa (hash: 3oZ6E/qyPFCkNxJX9IOFDQ5m/aqdqH2CkJ/hq3ptHGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:29:3d:fd:70:26:49:ab:6e:bd:13:9d:40:0a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25b90b8981b591d75a7e935e1304a74075602fd
Validity
Not Before: Jul 28 16:00:55 2026 GMT
Not After : Jul 29 16:00:55 2026 GMT
Subject: CN=7ff949554f6b3cb4a37c9ae1db002b5fd132340d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:05:a0:5d:9f:97:b1:5d:b6:93:8a:7c:3b:44:
ce:fc:49:ad:79:03:0f:de:6f:7c:e5:8d:e9:b2:74:
36:1d:1e:88:73:f3:7d:68:66:6d:a0:9c:12:00:d4:
05:aa:03:90:70:5c:32:92:79:48:d4:3f:43:3c:50:
66:ef:75:4c:f5:c3:8f:c6:74:a0:3b:3c:70:49:a6:
f3:a0:b5:28:b8:31:15:96:45:05:06:7b:8d:db:50:
7c:e8:41:91:22:93:26:60:85:17:1d:cd:ed:d7:10:
62:24:9d:5e:1a:3f:8b:fb:a0:a4:48:a6:a9:d7:ac:
c4:10:b7:31:97:6c:14:de:83:1d:d3:b9:16:50:16:
5b:b4:c7:86:35:3c:74:c0:2b:89:75:3a:8c:42:e6:
12:cd:3c:d3:50:e9:8a:d2:8d:5d:4b:81:ef:8c:b4:
ae:ed:71:e7:f1:cc:68:56:80:2d:0d:25:69:ea:a9:
9a:0d:ce:c3:d9:0f:86:f1:87:07:eb:66:45:ab:15:
1a:a7:b4:d9:7c:58:e9:95:8c:8f:a6:97:a6:ea:37:
84:f7:f0:c4:e6:f1:3b:82:e5:bd:95:0e:d3:15:78:
3c:33:16:72:10:e3:41:64:1e:31:30:97:f8:cc:9c:
f3:43:1e:fb:a9:4f:53:94:a8:4a:5a:b2:d6:bf:49:
ea:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F9:49:55:4F:6B:3C:B4:A3:7C:9A:E1:DB:00:2B:5F:D1:32:34:0D
X509v3 Authority Key Identifier:
keyid:D2:5B:90:B8:98:1B:59:1D:75:A7:E9:35:E1:30:4A:74:07:56:02:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:89:72:d9:62:e6:76:bf:d2:d7:62:fa:45:81:7b:70:d2:e9:
21:90:e6:0e:33:da:c7:ae:f9:b7:dd:ef:b5:d0:62:9b:6d:8d:
51:bc:4f:cd:12:83:ef:86:4e:95:69:98:b9:7d:58:84:b6:50:
2d:ef:11:1f:f0:70:d1:cb:a0:98:67:5a:51:d4:f1:b7:3f:0d:
3b:3a:94:d9:e2:84:23:02:0b:b6:1c:1d:ba:e6:4e:cd:ae:bc:
0d:9c:6a:ca:fc:33:1c:e4:0e:b4:a0:e6:21:18:35:28:71:e6:
ed:f3:e5:b4:49:e7:34:26:37:bf:5d:87:8a:38:b8:24:81:c7:
77:df:a4:19:45:a2:75:03:bf:a0:04:06:5e:7a:ab:b6:84:ed:
8c:7e:e8:23:c8:91:32:ae:1a:db:7d:fb:ef:95:7a:56:86:4c:
5d:5c:a2:b1:e1:61:aa:90:57:7d:6d:3c:e5:2e:81:29:11:cc:
94:9b:13:b1:09:79:a8:04:6d:4c:e1:4e:53:a5:8e:91:6b:ee:
5e:39:9b:97:79:74:3f:ab:f4:c7:1d:eb:e3:d5:75:4b:9d:63:
75:be:bc:4a:56:97:3e:ff:fc:c7:bb:62:23:da:f5:b5:07:91:
4d:74:a0:fd:56:97:24:ce:4d:80:e8:9c:db:8f:a9:cd:50:82:
66:fc:79:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdSk9/XAmSatuvROdQAp6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNWI5MGI4OTgxYjU5MWQ3NWE3ZTkzNWUxMzA0YTc0MDc1
NjAyZmQwHhcNMjYwNzI4MTYwMDU1WhcNMjYwNzI5MTYwMDU1WjAzMTEwLwYDVQQD
Eyg3ZmY5NDk1NTRmNmIzY2I0YTM3YzlhZTFkYjAwMmI1ZmQxMzIzNDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAWgXZ+XsV22k4p8O0TO/EmteQMP
3m985Y3psnQ2HR6Ic/N9aGZtoJwSANQFqgOQcFwyknlI1D9DPFBm73VM9cOPxnSg
OzxwSabzoLUouDEVlkUFBnuN21B86EGRIpMmYIUXHc3t1xBiJJ1eGj+L+6CkSKap
16zEELcxl2wU3oMd07kWUBZbtMeGNTx0wCuJdTqMQuYSzTzTUOmK0o1dS4HvjLSu
7XHn8cxoVoAtDSVp6qmaDc7D2Q+G8YcH62ZFqxUap7TZfFjplYyPppem6jeE9/DE
5vE7guW9lQ7TFXg8MxZyEONBZB4xMJf4zJzzQx77qU9TlKhKWrLWv0nqgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/5SVVPazy0o3ya4dsAK1/RMjQNMB8GA1UdIwQY
MBaAFNJbkLiYG1kddafpNeEwSnQHVgL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGx1UXVKZ2JXUjExcC1rMTRUQktkQWRXQXYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8yY2U1MjAtZWMwNy00NWVmLWI1ODct
YTJhYmRhZGY1ZjkwLzEvMGx1UXVKZ2JXUjExcC1rMTRUQktkQWRXQXYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8yY2U1MjAtZWMwNy00NWVmLWI1ODctYTJhYmRhZGY1Zjkw
LzEvMGx1UXVKZ2JXUjExcC1rMTRUQktkQWRXQXYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjIly2WLm
dr/S12L6RYF7cNLpIZDmDjPax675t93vtdBim22NUbxPzRKD74ZOlWmYuX1YhLZQ
Le8RH/Bw0cugmGdaUdTxtz8NOzqU2eKEIwILthwduuZOza68DZxqyvwzHOQOtKDm
IRg1KHHm7fPltEnnNCY3v12Hiji4JIHHd9+kGUWidQO/oAQGXnqrtoTtjH7oI8iR
Mq4a233775V6VoZMXVyiseFhqpBXfW085S6BKRHMlJsTsQl5qARtTOFOU6WOkWvu
Xjmbl3l0P6v0xx3r49V1S51jdb68SlaXPv/8x7tiI9r1tQeRTXSg/VaXJM5NgOic
24+pzVCCZvx53w==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:13:18 2026 by rpki-client