Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/395be9-d525-4e65-a018-e02f22eb48f2/1/0oFXratWiKzjVi4u_eWb61rhCKs.mft
File: 0oFXratWiKzjVi4u_eWb61rhCKs.mft (raw, json)
Hash identifier: ZwNEkBrKgxj8rHqdtQw1FaAGJuwTFiVnWKSUek4eyG4=
Subject key identifier: E5:EE:26:45:39:4A:D4:E0:1D:22:85:70:74:FD:5D:1C:1E:75:63:9C
Authority key identifier: D2:81:57:AD:AB:56:88:AC:E3:56:2E:2E:FD:E5:9B:EB:5A:E1:08:AB
Certificate issuer: /CN=d28157adab5688ace3562e2efde59beb5ae108ab
Certificate serial: 019F8F7EE91C055574AD6557CD636F0D51BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0oFXratWiKzjVi4u_eWb61rhCKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/395be9-d525-4e65-a018-e02f22eb48f2/1/0oFXratWiKzjVi4u_eWb61rhCKs.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:26 +0000
Manifest this update: Thu 23 Jul 2026 15:01:26 +0000
Manifest next update: Fri 24 Jul 2026 15:01:26 +0000
Files and hashes: 1: 0oFXratWiKzjVi4u_eWb61rhCKs.crl (hash: zA4K0rJr+0wjPGLBW8wLZ6nkgXySR6WifTyoCEkJyIQ=)
2: Nt0mcB8A0d__UowWBxdSbWsaTd4.roa (hash: QVTiG0+ASuYbCz7n6L1CCp82a69UF3h6/hvCYlBXr9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/395be9-d525-4e65-a018-e02f22eb48f2/1/0oFXratWiKzjVi4u_eWb61rhCKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/395be9-d525-4e65-a018-e02f22eb48f2/1/0oFXratWiKzjVi4u_eWb61rhCKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0oFXratWiKzjVi4u_eWb61rhCKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:e9:1c:05:55:74:ad:65:57:cd:63:6f:0d:51:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d28157adab5688ace3562e2efde59beb5ae108ab
Validity
Not Before: Jul 23 15:01:26 2026 GMT
Not After : Jul 24 15:01:26 2026 GMT
Subject: CN=e5ee2645394ad4e01d22857074fd5d1c1e75639c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b7:e9:61:a4:02:88:2e:1b:ef:a0:77:18:4e:
1e:74:7f:aa:e8:02:bd:e0:67:37:07:06:1e:64:a3:
fe:30:de:33:da:00:4f:00:3d:19:89:04:d0:bc:b3:
29:e5:1b:e6:4a:4f:99:1e:3c:51:45:19:b8:b2:1c:
a2:00:8e:90:23:e7:af:56:4d:97:e8:09:48:e4:c6:
5e:c4:ec:39:f6:9a:55:55:04:3c:92:5d:dc:f1:cf:
9b:f4:10:86:1d:c4:dd:b4:11:ab:65:1a:f7:e0:fe:
d5:e4:a4:f4:13:37:28:81:36:41:28:03:f3:52:94:
08:8d:9d:dd:ef:59:1f:6f:be:9b:f5:13:54:ce:a9:
66:4d:4a:b9:ce:44:c4:2f:37:25:a1:df:5e:82:3d:
d5:f0:36:46:83:6d:d8:ea:88:d4:37:24:d5:98:f8:
e0:41:f5:23:1e:b3:9f:81:4a:69:d7:1f:ea:ec:51:
7d:e7:79:a0:50:c2:bb:be:ee:cf:f4:97:24:e8:34:
71:fc:ed:42:30:00:90:59:3c:f3:f2:b6:e2:77:0d:
73:6c:50:fb:d1:3f:3d:32:36:98:47:0d:6a:96:84:
29:1b:e9:4b:f0:5f:bf:b8:fc:37:4b:49:7d:64:21:
17:52:8b:97:ff:db:7b:aa:fb:64:68:b6:7f:4a:21:
0c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:EE:26:45:39:4A:D4:E0:1D:22:85:70:74:FD:5D:1C:1E:75:63:9C
X509v3 Authority Key Identifier:
keyid:D2:81:57:AD:AB:56:88:AC:E3:56:2E:2E:FD:E5:9B:EB:5A:E1:08:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0oFXratWiKzjVi4u_eWb61rhCKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/395be9-d525-4e65-a018-e02f22eb48f2/1/0oFXratWiKzjVi4u_eWb61rhCKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/395be9-d525-4e65-a018-e02f22eb48f2/1/0oFXratWiKzjVi4u_eWb61rhCKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:dc:f8:54:8e:de:c2:02:a8:db:cc:24:65:0d:8a:1b:39:c4:
a6:b9:18:66:54:47:92:f6:56:04:da:98:34:8a:ff:81:ce:cf:
36:26:f6:02:41:e4:c4:bb:ed:f7:de:e6:1f:6e:19:4a:ec:6e:
66:1b:18:ce:7f:e9:20:ae:34:ee:61:5b:1b:87:60:5e:fa:f9:
39:ac:0d:1f:a1:68:8f:a2:55:0e:47:33:3a:e5:36:5f:54:8a:
50:ab:51:bb:1d:7f:71:27:ea:da:e9:09:80:39:d9:e5:11:38:
73:99:c2:85:7d:de:5a:3a:ba:f4:31:aa:18:99:9d:af:f3:3c:
b1:3e:38:e4:e4:8f:4c:1d:27:2b:e6:aa:79:90:b0:09:06:6a:
5a:e9:49:86:55:fe:db:da:8d:72:79:cd:0b:b1:92:06:ea:20:
be:79:a6:2b:2f:b9:65:3c:48:6c:dc:f3:0c:c8:f0:07:c6:1e:
17:b2:fb:9b:1c:21:0e:fb:a6:42:ff:85:39:d2:4a:29:0e:64:
b1:71:04:f8:8c:37:fc:30:9a:e9:7f:ad:bf:35:93:8e:2d:a6:
0f:e5:94:f9:78:84:89:c9:34:65:31:0f:c1:0d:3b:3b:2e:5a:
67:24:ba:85:8d:78:db:fd:11:80:3a:14:a0:9d:bd:e8:79:a7:
1b:c7:ed:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PfukcBVV0rWVXzWNvDVG/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyODE1N2FkYWI1Njg4YWNlMzU2MmUyZWZkZTU5YmViNWFl
MTA4YWIwHhcNMjYwNzIzMTUwMTI2WhcNMjYwNzI0MTUwMTI2WjAzMTEwLwYDVQQD
EyhlNWVlMjY0NTM5NGFkNGUwMWQyMjg1NzA3NGZkNWQxYzFlNzU2MzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bfpYaQCiC4b76B3GE4edH+q6AK9
4Gc3BwYeZKP+MN4z2gBPAD0ZiQTQvLMp5RvmSk+ZHjxRRRm4shyiAI6QI+evVk2X
6AlI5MZexOw59ppVVQQ8kl3c8c+b9BCGHcTdtBGrZRr34P7V5KT0EzcogTZBKAPz
UpQIjZ3d71kfb76b9RNUzqlmTUq5zkTELzclod9egj3V8DZGg23Y6ojUNyTVmPjg
QfUjHrOfgUpp1x/q7FF953mgUMK7vu7P9Jck6DRx/O1CMACQWTzz8rbidw1zbFD7
0T89MjaYRw1qloQpG+lL8F+/uPw3S0l9ZCEXUouX/9t7qvtkaLZ/SiEMRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOXuJkU5StTgHSKFcHT9XRwedWOcMB8GA1UdIwQY
MBaAFNKBV62rVois41YuLv3lm+ta4QirMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG9GWHJhdFdpS3pqVmk0dV9lV2I2MXJoQ0tzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8zOTViZTktZDUyNS00ZTY1LWEwMTgt
ZTAyZjIyZWI0OGYyLzEvMG9GWHJhdFdpS3pqVmk0dV9lV2I2MXJoQ0tzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8zOTViZTktZDUyNS00ZTY1LWEwMTgtZTAyZjIyZWI0OGYy
LzEvMG9GWHJhdFdpS3pqVmk0dV9lV2I2MXJoQ0tzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZtz4VI7e
wgKo28wkZQ2KGznEprkYZlRHkvZWBNqYNIr/gc7PNib2AkHkxLvt997mH24ZSuxu
ZhsYzn/pIK407mFbG4dgXvr5OawNH6Foj6JVDkczOuU2X1SKUKtRux1/cSfq2ukJ
gDnZ5RE4c5nChX3eWjq69DGqGJmdr/M8sT445OSPTB0nK+aqeZCwCQZqWulJhlX+
29qNcnnNC7GSBuogvnmmKy+5ZTxIbNzzDMjwB8YeF7L7mxwhDvumQv+FOdJKKQ5k
sXEE+Iw3/DCa6X+tvzWTji2mD+WU+XiEick0ZTEPwQ07Oy5aZyS6hY142/0RgDoU
oJ296HmnG8ftTA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:31:54 2026 by rpki-client