
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
File: 0vONSutNAojbuFTR6uC9itP4Qfo.mft (raw, json)
Hash identifier: HEBY1MSR2qdA7T3YOBFsNNjLQ+dhGgrzbmrRQuKbsbw=
Subject key identifier: A9:CB:4F:C1:7A:E3:08:DC:2D:77:4E:B7:77:D7:2B:F0:E4:B1:B8:2E
Authority key identifier: D2:F3:8D:4A:EB:4D:02:88:DB:B8:54:D1:EA:E0:BD:8A:D3:F8:41:FA
Certificate issuer: /CN=d2f38d4aeb4d0288dbb854d1eae0bd8ad3f841fa
Certificate serial: 019F921111AE6CDEE268A75CF6A8A8E5BE3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 03:00:19 +0000
Manifest this update: Fri 24 Jul 2026 03:00:19 +0000
Manifest next update: Sat 25 Jul 2026 03:00:19 +0000
Files and hashes: 1: 0vONSutNAojbuFTR6uC9itP4Qfo.crl (hash: BfAacFZMjrbXR7Ct9kVKLL6fykLdtFGGownywHtXR2M=)
2: tquIiBHdfRgZoSkv66J5g5_rmsI.roa (hash: ewRKCXj1KUDIVFZwB0RpxCjNpMk+Zl5DzmkGO5LloCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:11:ae:6c:de:e2:68:a7:5c:f6:a8:a8:e5:be:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f38d4aeb4d0288dbb854d1eae0bd8ad3f841fa
Validity
Not Before: Jul 24 03:00:19 2026 GMT
Not After : Jul 25 03:00:19 2026 GMT
Subject: CN=a9cb4fc17ae308dc2d774eb777d72bf0e4b1b82e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:94:06:ce:be:79:ee:9d:92:61:e9:1a:10:59:
0e:1e:ea:a3:97:8b:26:a0:00:5e:90:64:07:f3:6d:
32:ef:46:37:d3:d2:c1:27:10:64:e7:af:0a:e6:7c:
30:e7:ef:b1:8a:33:2c:da:b7:91:64:aa:f4:bc:43:
fb:b3:84:1b:6f:6d:bf:0c:3e:cf:0b:75:60:ef:46:
39:3c:e2:0a:46:a8:9e:da:47:f4:21:ff:01:71:9d:
44:08:04:0f:28:76:70:e0:df:49:e2:8c:f1:4c:38:
57:61:98:5c:ae:69:4f:15:30:ab:c8:1f:8b:59:f8:
7d:3b:b6:74:37:74:50:e9:e5:b7:13:22:4a:15:7e:
5c:a6:0d:42:75:b2:8d:fa:06:51:ce:41:01:89:9d:
9a:bd:80:5e:bb:bb:81:de:7e:92:7e:d3:3f:d2:36:
bd:0f:dd:8a:24:ab:7e:8d:26:65:4b:b0:6c:7e:24:
e6:d9:2c:53:3a:82:97:9d:83:51:d8:d8:31:30:0e:
3e:ec:ea:28:86:2a:50:5c:1b:1f:5c:28:92:6d:19:
07:5a:61:0a:bc:5c:f4:8f:36:6f:3d:b6:dd:28:cd:
55:94:fb:d8:a9:c3:b7:48:b1:12:01:3f:b8:d6:86:
1a:8d:c1:99:8a:33:5e:f2:6d:b9:12:d4:c8:78:6e:
f5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CB:4F:C1:7A:E3:08:DC:2D:77:4E:B7:77:D7:2B:F0:E4:B1:B8:2E
X509v3 Authority Key Identifier:
keyid:D2:F3:8D:4A:EB:4D:02:88:DB:B8:54:D1:EA:E0:BD:8A:D3:F8:41:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:93:2d:2d:19:fc:54:85:8a:d5:46:26:ef:7b:02:e8:40:c9:
6f:15:02:f3:a9:e1:d9:cf:87:d2:ad:86:be:ab:37:e5:3c:d4:
24:91:d3:90:5a:e1:03:f0:70:1a:49:d6:0b:b8:39:21:37:25:
35:0c:8d:29:66:be:b0:55:e9:98:51:df:aa:8b:9d:3d:3a:3e:
2f:84:ca:fe:90:7e:d3:bc:27:88:c0:c3:54:9f:78:cb:cd:dc:
e5:23:28:72:c7:b0:02:6d:7c:e9:4e:75:ae:88:8a:41:e7:6d:
eb:c1:0e:11:cf:c5:6c:39:17:c7:42:9d:0d:af:5d:20:c0:28:
1a:67:03:a1:07:e2:18:f2:cf:20:c0:85:09:e2:63:0c:58:69:
07:fa:61:24:d5:f1:d0:d9:7e:ce:4d:81:e4:41:75:39:a0:35:
62:55:ca:fd:16:ac:aa:b9:91:f2:80:76:d8:73:53:e2:28:1d:
50:ec:2a:09:38:89:41:b0:b6:7c:a2:d2:c9:04:43:1b:44:a7:
10:0a:67:0d:97:b3:0b:16:51:0d:62:19:d4:11:c7:ed:5c:04:
dd:e1:0a:c9:34:61:76:9f:9a:07:1a:b3:92:18:66:05:33:0e:
a5:8d:74:ab:cd:98:b3:bf:e4:35:18:ec:6d:e3:23:4a:57:b9:
ad:10:ff:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:49:51 2026 by rpki-client