Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
File: 0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft (raw, json)
Hash identifier: Dbazg+1ZeXtngyvwJReaJzej6FKQ2/l4U2Ge1rxl7Xg=
Subject key identifier: D8:21:E4:7C:94:A6:36:5E:AD:E3:AD:2E:D6:EA:F8:9B:46:0F:C4:4B
Authority key identifier: D0:48:50:F8:06:9D:F6:2D:C5:15:5C:02:ED:1E:62:BF:51:CE:DB:C8
Certificate issuer: /CN=d04850f8069df62dc5155c02ed1e62bf51cedbc8
Certificate serial: 019FA975325E645679D9AA5ECC71C58C893C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
Manifest number: 0658
Signing time: Tue 28 Jul 2026 16:00:57 +0000
Manifest this update: Tue 28 Jul 2026 16:00:57 +0000
Manifest next update: Wed 29 Jul 2026 16:00:57 +0000
Files and hashes: 1: 0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl (hash: xeRnPnGNd0hZqfNfKUrMpWJTJJwRe5YN6qnbfCMtUfk=)
2: v795sY2U8jhvRzL8MVmYlvFz9_s.roa (hash: Hn47sYXDYoB/4A+t0th2lMVq06CbmCPSmHDsJlsUcW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:32:5e:64:56:79:d9:aa:5e:cc:71:c5:8c:89:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04850f8069df62dc5155c02ed1e62bf51cedbc8
Validity
Not Before: Jul 28 16:00:57 2026 GMT
Not After : Jul 29 16:00:57 2026 GMT
Subject: CN=d821e47c94a6365eade3ad2ed6eaf89b460fc44b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:31:2b:14:0a:f2:c3:32:61:65:54:1d:17:62:
03:2b:9f:d8:57:fd:99:8b:65:e3:6d:02:d2:b0:93:
19:f4:1d:84:62:34:5d:e4:d0:f9:da:e2:66:87:7c:
f3:35:c9:d7:a5:c6:29:33:66:98:ad:9c:3b:c4:9c:
28:aa:fa:b6:49:dc:bf:dc:88:d1:b2:43:81:ed:15:
45:82:86:20:86:95:80:ec:70:89:5d:de:ec:bb:3f:
5a:5a:c7:81:25:f0:c2:fe:2e:bf:1b:81:1e:a1:4b:
3b:79:ba:71:86:2a:99:cc:00:08:b8:49:ea:67:09:
df:51:3b:9a:3b:36:ad:6a:63:9c:5b:ca:19:df:7a:
4c:02:35:67:0d:06:51:56:6d:18:cc:49:b7:0f:30:
6c:f9:8d:20:86:2c:5b:a7:6f:29:92:75:e5:bd:b3:
ff:b9:4b:72:83:93:c5:a8:83:58:72:dc:ac:6d:02:
5b:1c:2b:d7:c1:47:8a:e3:e5:9c:f1:81:ee:b8:fb:
c6:33:a5:01:69:62:f5:d5:ac:b3:f4:44:30:40:be:
03:f3:4d:60:d0:bc:fb:d5:73:e5:2c:b6:a1:0d:d0:
1f:e1:88:ae:d6:06:26:d1:86:10:0e:11:25:d4:4e:
47:45:9e:e1:d7:e1:fc:17:e6:10:a5:16:63:37:c2:
6d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:21:E4:7C:94:A6:36:5E:AD:E3:AD:2E:D6:EA:F8:9B:46:0F:C4:4B
X509v3 Authority Key Identifier:
keyid:D0:48:50:F8:06:9D:F6:2D:C5:15:5C:02:ED:1E:62:BF:51:CE:DB:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:46:93:cf:41:8b:24:c7:2d:1c:b8:04:cb:09:98:01:7c:5a:
da:5a:b7:ff:35:ec:ab:2e:4b:36:e7:80:c0:e6:42:62:b2:89:
88:eb:9b:2e:56:88:6c:54:c4:87:b1:45:34:da:c1:77:49:d1:
53:6d:9c:07:fd:b0:1e:b4:8b:3c:16:6d:a4:4f:7c:b3:05:7e:
d5:5b:ec:9d:3c:b3:9e:13:ae:83:51:c5:ec:df:0d:8d:3a:5d:
9c:61:b3:ba:08:0f:4e:a2:dd:8c:c8:b1:09:e3:84:b3:cd:42:
53:45:cc:cc:32:bb:25:a6:13:20:09:ff:56:2a:06:9a:03:6f:
60:3e:32:17:76:e4:7f:f0:9c:40:06:81:1c:28:ad:be:20:65:
0f:60:a9:ea:2a:b6:85:04:a8:0a:02:2d:1b:2b:be:3b:51:36:
d1:07:91:e3:57:6d:54:4e:4f:3b:36:58:ee:5b:87:2d:bf:94:
a9:bc:a5:42:8b:fb:e3:51:34:5f:6c:93:b9:b3:31:5f:a7:ad:
34:97:e3:b6:c3:e3:61:76:75:4e:63:3c:e0:a6:25:79:3a:95:
cd:53:1e:74:8f:a0:6f:ef:11:f9:0a:44:e3:4a:11:13:ef:59:
5d:15:cd:3f:4d:98:3d:d6:f7:65:ae:73:64:1c:89:22:92:16:
b8:e0:80:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:33 2026 by rpki-client