Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/49f528-e72f-4da7-902e-6975cadb2262/1/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.mft
File: 0nAqOyfOm9BN3KKMIdnQ9f8yqQk.mft (raw, json)
Hash identifier: 8v5tnPN59vLA2jEAuaJUoltxBTUX4AFXBs4RL+MXTUQ=
Subject key identifier: 7A:DE:B8:33:9B:95:41:08:8E:40:B1:BE:8A:EA:37:A3:CA:76:CF:32
Authority key identifier: D2:70:2A:3B:27:CE:9B:D0:4D:DC:A2:8C:21:D9:D0:F5:FF:32:A9:09
Certificate issuer: /CN=d2702a3b27ce9bd04ddca28c21d9d0f5ff32a909
Certificate serial: 019F940006103FC3042664BBF21077A4E6B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/49f528-e72f-4da7-902e-6975cadb2262/1/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.mft
Manifest number: 19C6
Signing time: Fri 24 Jul 2026 12:00:57 +0000
Manifest this update: Fri 24 Jul 2026 12:00:57 +0000
Manifest next update: Sat 25 Jul 2026 12:00:57 +0000
Files and hashes: 1: 0nAqOyfOm9BN3KKMIdnQ9f8yqQk.crl (hash: 3V+dqvNdiqaSOf+KnWU+KcmVdBPnIe0euyB6EU/0Xmo=)
2: qB-yYmmoZAETKywXU4O90SMz9p4.roa (hash: zSfrh0GvpLorIoRjiLIdctGLnu0vrYxfcdrku/RI+Pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/49f528-e72f-4da7-902e-6975cadb2262/1/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/49f528-e72f-4da7-902e-6975cadb2262/1/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:00:06:10:3f:c3:04:26:64:bb:f2:10:77:a4:e6:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2702a3b27ce9bd04ddca28c21d9d0f5ff32a909
Validity
Not Before: Jul 24 12:00:57 2026 GMT
Not After : Jul 25 12:00:57 2026 GMT
Subject: CN=7adeb8339b9541088e40b1be8aea37a3ca76cf32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:03:50:f5:97:cb:06:11:c3:ca:6c:fc:d0:42:
88:1c:5f:56:2c:4e:69:24:b2:e4:4c:bc:9e:71:15:
27:ce:ff:9a:18:51:73:5e:99:f3:cf:68:b0:60:09:
67:3f:71:07:38:5e:54:4a:f7:d6:3d:15:90:76:6e:
d7:36:18:45:1e:f1:4a:a0:ee:56:db:ee:80:73:c6:
77:2b:9b:b4:4f:60:b0:d9:b6:cf:87:98:38:a4:60:
58:13:ae:91:55:55:60:10:5d:bb:aa:9e:ac:90:59:
32:da:ca:e7:55:73:dc:42:90:ae:3a:42:38:3e:49:
b6:8e:88:1e:ef:4b:a4:de:64:57:db:51:d6:9e:c7:
d0:44:46:5b:11:18:f4:17:18:49:9f:f0:08:d3:36:
dc:a9:d4:71:4f:fc:25:37:d4:21:1a:64:7c:8d:49:
6f:eb:15:6e:d1:6a:1b:d3:9b:b2:13:ea:09:34:9f:
cb:17:81:f8:a7:7b:72:58:e4:4b:e7:4b:35:8d:d9:
d6:de:98:4a:35:be:fd:31:bd:b5:7a:59:21:7f:1a:
40:b4:fa:56:e0:05:4a:47:75:fe:8f:e4:56:b2:d3:
de:bf:ed:32:4f:90:ed:7e:56:fb:f4:7b:a2:71:e1:
e6:d2:9f:d1:eb:1e:db:91:85:aa:05:11:f7:7f:0f:
a8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DE:B8:33:9B:95:41:08:8E:40:B1:BE:8A:EA:37:A3:CA:76:CF:32
X509v3 Authority Key Identifier:
keyid:D2:70:2A:3B:27:CE:9B:D0:4D:DC:A2:8C:21:D9:D0:F5:FF:32:A9:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/49f528-e72f-4da7-902e-6975cadb2262/1/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/49f528-e72f-4da7-902e-6975cadb2262/1/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3c:4a:e6:c1:64:4c:cb:72:3c:fa:0b:be:6e:e9:0b:1a:61:
02:23:2d:d9:bc:2d:50:0f:fb:2d:1d:46:73:02:3a:6e:5d:41:
b0:cd:65:dd:f5:02:ff:ac:4a:dd:90:65:ec:7c:b5:1b:36:d4:
fb:b0:b8:26:38:a4:8b:c6:14:dd:f7:b6:a0:2a:e6:0d:ea:e0:
a1:42:22:eb:76:64:e3:1e:b1:0a:44:d1:02:d3:e4:72:bd:b3:
ac:13:42:1b:a3:a6:45:00:58:b0:1a:15:38:ca:66:a1:fd:39:
f9:57:02:0f:e6:9d:a1:0c:24:08:15:13:ae:c3:ba:34:52:3c:
a5:ec:ed:cc:7f:2d:0f:83:1a:86:42:f8:66:43:01:73:af:bf:
0a:33:4b:a5:87:cb:c7:94:19:aa:a6:9c:80:51:c0:85:7e:a9:
9b:50:94:90:d7:3a:0c:77:95:20:e8:f3:a5:53:cb:96:a0:22:
e7:84:48:1e:d9:31:1b:8f:1e:9d:9d:db:9a:c5:e1:82:7c:a1:
d0:c7:d8:56:e6:c4:53:fa:79:da:26:38:94:0f:88:87:e9:79:
2a:57:5a:fb:29:8a:2b:d5:e0:a3:29:52:57:d4:27:3e:dd:4a:
90:b8:70:0e:1d:4e:70:24:33:64:ce:b9:3f:49:a0:f9:ed:d3:
9c:5f:b8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:29:02 2026 by rpki-client