Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
File: 0KFr9-DjuTMLVEg-GfYTsCtie-8.mft (raw, json)
Hash identifier: 4R3Q1aMVwEEw3VuupeOZOZHODWbva+WIp+/5/fgBd4c=
Subject key identifier: D9:5E:62:95:F9:71:3C:1D:DD:D9:31:A1:34:08:49:27:02:79:D9:44
Authority key identifier: D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF
Certificate issuer: /CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef
Certificate serial: 019FAA50C93A2CD45E9E5C83EE1F6E46B41F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
Manifest number: 140E
Signing time: Tue 28 Jul 2026 20:00:48 +0000
Manifest this update: Tue 28 Jul 2026 20:00:48 +0000
Manifest next update: Wed 29 Jul 2026 20:00:48 +0000
Files and hashes: 1: 0KFr9-DjuTMLVEg-GfYTsCtie-8.crl (hash: BeRIQ+FPuD/O92KakfWwhTCBNKV9SMSAshR7shn88lk=)
2: wf4Dioz38ILB4v1B0ECWLEz6X7c.roa (hash: EBxrOoYlpbtk2ShhC7WmcBl12gxV4Wa50Z9TM1JzCUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:c9:3a:2c:d4:5e:9e:5c:83:ee:1f:6e:46:b4:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef
Validity
Not Before: Jul 28 20:00:48 2026 GMT
Not After : Jul 29 20:00:48 2026 GMT
Subject: CN=d95e6295f9713c1dddd931a1340849270279d944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:55:ff:ba:aa:ab:bc:47:68:d4:7d:01:f4:b7:
6b:8f:f6:58:7e:f2:e7:59:bc:4a:e0:3c:30:1c:86:
a5:cc:b1:dd:59:6f:98:54:a0:a3:1b:e6:d0:2f:83:
e7:c4:c6:e5:ee:82:ae:bc:a9:ee:ee:58:01:00:c1:
58:ef:ce:4f:67:54:6f:09:53:89:22:b1:54:cf:a6:
25:d9:6f:da:ec:4a:98:9b:3b:3b:ad:62:1b:a5:65:
83:9d:db:4e:df:06:78:e6:1f:98:50:c0:18:22:bb:
1f:2b:f4:2f:08:bd:16:15:fa:51:f0:03:7c:23:cc:
15:c3:57:c3:ad:85:0b:b8:80:fb:4c:0c:a0:c0:a0:
3d:57:cd:35:32:ea:05:5b:8a:fc:75:49:46:dd:32:
41:6c:5d:2d:6a:8b:2c:98:c6:79:5a:3f:9b:cb:ec:
67:fa:d3:71:08:27:34:60:d9:51:a5:e5:1d:a3:7e:
0a:5e:06:31:3d:59:a0:86:4d:04:c0:af:cb:37:d3:
30:45:36:a1:eb:df:c1:c9:64:18:3d:dc:4a:c2:a7:
58:ea:33:c6:a4:ed:bf:60:7a:38:4d:f6:e1:ce:40:
4d:1f:d4:49:dc:8e:fc:54:35:2f:18:54:40:0a:34:
42:f0:a4:75:e7:35:38:b2:75:67:cf:d4:13:27:bc:
ce:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:5E:62:95:F9:71:3C:1D:DD:D9:31:A1:34:08:49:27:02:79:D9:44
X509v3 Authority Key Identifier:
keyid:D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ce:26:94:cc:f0:d2:dd:dd:17:10:d6:d4:c2:fc:b6:06:8e:
7d:2d:73:75:a0:b9:f6:81:51:b7:4b:66:4f:0d:24:52:5d:ee:
26:b5:08:26:ce:1e:ce:1a:bc:e6:91:b1:e1:f2:5a:24:a7:34:
22:19:d5:91:66:6c:b4:e3:32:93:d8:bf:1d:61:87:a0:24:b5:
b8:a2:69:7c:3a:cf:3c:e4:77:12:b1:4b:56:db:ec:df:bd:ee:
dc:6b:ba:8d:6c:6c:13:c3:e9:a3:24:48:11:17:71:00:8e:15:
8e:31:6d:39:c4:fe:43:ba:51:65:bf:7e:19:1e:56:95:22:6e:
37:e7:33:7e:51:5a:46:d6:3f:2e:b0:90:bf:8f:db:b7:db:b1:
ad:bb:2d:fd:01:38:4c:10:69:fd:21:64:ae:fa:f4:ba:86:02:
2c:3f:ea:70:78:79:66:ab:f4:4d:e3:48:3d:af:11:cc:7e:e7:
42:bf:72:2f:f7:cd:e0:48:cd:85:04:6d:86:49:b4:7b:b0:87:
39:26:eb:e6:07:fe:ff:31:fb:76:85:5c:ea:f8:63:cf:d3:a1:
df:cc:ca:97:76:76:e6:e2:09:29:2c:8f:c4:05:a9:26:29:a9:
d3:f2:05:98:af:52:3e:f1:8e:df:28:6d:d3:e8:9b:e4:fa:1c:
0e:46:9a:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qUMk6LNRenlyD7h9uRrQfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYTE2YmY3ZTBlM2I5MzMwYjU0NDgzZTE5ZjYxM2IwMmI2
MjdiZWYwHhcNMjYwNzI4MjAwMDQ4WhcNMjYwNzI5MjAwMDQ4WjAzMTEwLwYDVQQD
EyhkOTVlNjI5NWY5NzEzYzFkZGRkOTMxYTEzNDA4NDkyNzAyNzlkOTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVX/uqqrvEdo1H0B9Ldrj/ZYfvLn
WbxK4DwwHIalzLHdWW+YVKCjG+bQL4PnxMbl7oKuvKnu7lgBAMFY785PZ1RvCVOJ
IrFUz6Yl2W/a7EqYmzs7rWIbpWWDndtO3wZ45h+YUMAYIrsfK/QvCL0WFfpR8AN8
I8wVw1fDrYULuID7TAygwKA9V801MuoFW4r8dUlG3TJBbF0taossmMZ5Wj+by+xn
+tNxCCc0YNlRpeUdo34KXgYxPVmghk0EwK/LN9MwRTah69/ByWQYPdxKwqdY6jPG
pO2/YHo4TfbhzkBNH9RJ3I78VDUvGFRACjRC8KR15zU4snVnz9QTJ7zO+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNleYpX5cTwd3dkxoTQISScCedlEMB8GA1UdIwQY
MBaAFNCha/fg47kzC1RIPhn2E7ArYnvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEtGcjktRGp1VE1MVkVnLUdmWVRzQ3RpZS04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jZWFmZmItYWMyNS00OTFkLWIzY2Mt
NGVmMDNjMTA4MWY4LzEvMEtGcjktRGp1VE1MVkVnLUdmWVRzQ3RpZS04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9jZWFmZmItYWMyNS00OTFkLWIzY2MtNGVmMDNjMTA4MWY4
LzEvMEtGcjktRGp1VE1MVkVnLUdmWVRzQ3RpZS04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANc4mlMzw
0t3dFxDW1ML8tgaOfS1zdaC59oFRt0tmTw0kUl3uJrUIJs4ezhq85pGx4fJaJKc0
IhnVkWZstOMyk9i/HWGHoCS1uKJpfDrPPOR3ErFLVtvs373u3Gu6jWxsE8PpoyRI
ERdxAI4VjjFtOcT+Q7pRZb9+GR5WlSJuN+czflFaRtY/LrCQv4/bt9uxrbst/QE4
TBBp/SFkrvr0uoYCLD/qcHh5Zqv0TeNIPa8RzH7nQr9yL/fN4EjNhQRthkm0e7CH
OSbr5gf+/zH7doVc6vhjz9Oh38zKl3Z25uIJKSyPxAWpJimp0/IFmK9SPvGO3yht
0+ib5PocDkaaoQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:51:58 2026 by rpki-client