Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
File: 0vHIhC58-JGyNNOh4OLg73PoQqo.mft (raw, json)
Hash identifier: meaXrOz65Wf2yXcuf8V6ZOxK/9zTpTCHsx/8j+B7+Ik=
Subject key identifier: CD:6F:63:FE:3C:29:EE:0C:F6:B9:02:AE:AA:2C:11:E0:AD:A9:D3:BE
Authority key identifier: D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
Certificate issuer: /CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Certificate serial: 019F8FB5360B2A9F2BC7E5655E4877B283AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 16:00:45 +0000
Manifest this update: Thu 23 Jul 2026 16:00:45 +0000
Manifest next update: Fri 24 Jul 2026 16:00:45 +0000
Files and hashes: 1: 0vHIhC58-JGyNNOh4OLg73PoQqo.crl (hash: gFSGYEz0UsCE2XjaGybrttMnlNbHrRMuJ6Z495Nw+U8=)
2: l9fT_tPQilc8kDDpXdmC63EbBTU.roa (hash: e0hhcAS9+zmOEL/7aF5yJ1rOw5m87GlUo2fUEzHI/tc=)
3: zZqdbpX91TjBbrVKBU--OsfsNgs.roa (hash: 5bqwY0fuE7qADoXdmI9CeMVMqqLQteAK+rBOtRg2eMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:36:0b:2a:9f:2b:c7:e5:65:5e:48:77:b2:83:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Validity
Not Before: Jul 23 16:00:45 2026 GMT
Not After : Jul 24 16:00:45 2026 GMT
Subject: CN=cd6f63fe3c29ee0cf6b902aeaa2c11e0ada9d3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f6:b2:9e:5e:08:67:d0:af:c1:f9:c4:e0:72:
2c:dc:d4:9d:65:44:e7:d8:80:99:53:c6:b8:09:66:
af:37:76:b3:98:79:39:fe:b4:e1:bc:94:68:e8:94:
52:4d:80:c2:6a:a9:dc:78:8d:9f:9c:ca:9d:c1:0e:
2e:7f:e2:fe:47:02:08:0a:f7:b9:21:48:16:6e:25:
3b:c9:1f:fd:c9:66:31:f0:ff:c7:e0:f3:e6:a9:93:
1b:cf:3f:52:cc:1c:c6:9b:fd:b6:3f:df:57:ce:09:
3d:3e:26:f8:e4:07:7f:ec:94:ac:b2:93:e1:24:c2:
1b:2f:62:93:a6:d2:bf:45:08:f7:f5:cc:e4:07:48:
38:ae:23:06:d7:7f:63:aa:10:0d:ee:17:d0:be:04:
77:3c:1c:0d:fa:8a:63:4f:f9:e9:fa:9e:11:90:fe:
7c:e4:0b:3c:ce:d6:50:2e:e1:bb:f6:82:65:0b:75:
40:44:6d:4f:1d:13:89:92:94:ce:89:55:30:6e:ed:
22:c1:c2:10:3e:74:f1:1b:a4:c1:d1:a5:41:5a:fe:
c5:f4:39:b3:6b:7d:4c:94:dc:b7:1e:e1:b6:59:c5:
83:10:e2:db:f4:1c:df:b3:af:16:6b:14:f8:a0:45:
76:d2:e3:51:75:fe:6c:10:86:c1:c5:c4:7f:3a:a9:
82:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6F:63:FE:3C:29:EE:0C:F6:B9:02:AE:AA:2C:11:E0:AD:A9:D3:BE
X509v3 Authority Key Identifier:
keyid:D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:93:69:ad:af:fc:f2:6d:11:99:60:4a:8c:11:f2:2d:89:12:
6c:2a:ff:7e:de:9a:f0:52:ca:e4:8c:7d:23:12:e1:2c:57:bf:
2a:d3:c2:b0:6d:25:36:da:55:b6:62:19:b7:94:c4:b7:4b:5f:
d1:9e:e9:fa:55:ed:3f:e9:b7:48:f1:d7:77:35:a5:ad:61:fb:
e7:5d:90:ab:88:6b:d6:b8:c0:97:2b:00:52:44:7d:f6:5b:f0:
75:d8:6c:1f:be:2a:d9:e0:3d:5d:24:9e:b2:4e:8f:e6:c7:97:
c1:af:b3:c3:51:a2:48:84:7f:ec:d5:55:8d:40:61:cb:2f:82:
3b:65:8c:81:6c:6f:5b:ea:c3:ae:c5:17:21:fc:b3:51:73:a2:
ce:09:71:2b:00:5a:b2:1a:83:a9:15:26:40:1c:ff:78:c5:5d:
2a:23:90:ea:56:e4:8c:2d:4c:ae:c3:60:c2:92:32:b7:7a:b3:
2d:85:fd:3b:3c:90:e7:fb:ae:6f:10:05:87:72:2b:b4:34:ad:
9a:d1:e1:da:90:41:5a:c5:2d:9d:fb:36:59:7e:ad:f5:01:09:
21:b9:6f:71:04:59:e3:54:29:96:b9:5a:70:59:e6:5d:1a:24:
46:39:e3:a7:c4:bd:a0:4b:10:ac:ac:18:7c:8b:30:d4:b2:11:
02:42:8a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:57:22 2026 by rpki-client