Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
File: 0KHbRmz4CCBik9B-ZfISH-tJoz4.mft (raw, json)
Hash identifier: D22d8Y15Ve3ruLij4vzd0cxE2vpFU2PC3yDnT7nEzPE=
Subject key identifier: 23:AD:39:F3:F2:5D:94:78:05:C4:AC:08:35:4F:C4:8E:ED:D2:48:AF
Authority key identifier: D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E
Certificate issuer: /CN=d0a1db466cf808206293d07e65f2121feb49a33e
Certificate serial: 019F8EA215BF9C6CF1C88B7C92A39BF04308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
Manifest number: 17B4
Signing time: Thu 23 Jul 2026 11:00:14 +0000
Manifest this update: Thu 23 Jul 2026 11:00:14 +0000
Manifest next update: Fri 24 Jul 2026 11:00:14 +0000
Files and hashes: 1: 0KHbRmz4CCBik9B-ZfISH-tJoz4.crl (hash: 2seXQ81Y0ZrVj7UOC4ndURSKyUMq5SGPRzqkAQh0q1E=)
2: DhRuJkYL3BPnAOF_5KLHFOS7fEU.asa (hash: sQIfeWLpZ4jVR+U6OfuhrXRMEOMO8X/NhFz0LDGhKGs=)
3: yq5Siwl4i3jmM8YcRC0pxHMIUlk.roa (hash: nGkz7j5CjWTfBWr6c+S9Cs2//HPjWw5q8jEucRFb/jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:15:bf:9c:6c:f1:c8:8b:7c:92:a3:9b:f0:43:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a1db466cf808206293d07e65f2121feb49a33e
Validity
Not Before: Jul 23 11:00:14 2026 GMT
Not After : Jul 24 11:00:14 2026 GMT
Subject: CN=23ad39f3f25d947805c4ac08354fc48eedd248af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:28:20:de:ea:5b:27:4a:bf:e7:e4:09:8a:5b:
38:a7:bb:ca:ff:26:11:da:21:94:60:ca:d5:0a:3a:
92:fd:3c:d0:55:ae:94:43:0f:6c:1c:cc:a4:d3:2c:
dc:c8:b0:1b:e0:25:5b:15:d0:cc:8e:fc:8b:c6:95:
ee:2a:0b:3f:e6:6e:b6:88:39:95:1a:60:ff:b5:8b:
22:90:ed:c9:91:d0:cb:dc:97:08:d3:5e:ec:4a:45:
14:d0:30:22:98:3e:01:08:8f:c9:8e:89:b7:bc:c9:
f2:14:c5:83:38:dc:3e:bd:42:6f:95:de:86:f9:61:
14:71:57:17:b7:ce:28:f2:bd:75:90:00:14:1f:9a:
e7:b6:a1:14:ff:32:28:20:db:04:20:5c:21:28:44:
b8:10:e1:9a:d5:22:63:ca:6b:35:04:43:58:43:bf:
ca:5e:a7:71:78:1c:21:a5:6d:3e:ea:54:3d:81:b3:
38:0e:a9:16:c9:ac:71:7b:44:b2:32:80:70:18:19:
b9:02:4e:6d:95:de:81:c8:9e:14:ae:2e:58:e8:a1:
0e:1d:8d:d8:1c:52:1b:a2:8b:08:c1:f4:8e:35:63:
5a:52:a6:7b:47:8c:a2:5d:10:15:91:82:8b:ef:66:
09:de:d6:47:ef:4e:ff:25:9e:3b:fe:0f:c6:fb:c9:
4c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AD:39:F3:F2:5D:94:78:05:C4:AC:08:35:4F:C4:8E:ED:D2:48:AF
X509v3 Authority Key Identifier:
keyid:D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:01:3f:7f:78:43:a9:2a:18:9e:13:6e:ec:e1:c6:b9:c0:df:
ff:73:09:53:76:cc:b2:05:00:f1:cc:cf:f1:1b:6f:a7:46:5b:
54:26:f6:d0:96:08:36:b4:d6:f0:20:70:47:66:be:6b:92:0e:
4d:ef:71:90:5d:13:8f:e7:75:f7:98:c3:c7:de:0a:1d:63:e0:
07:c3:ca:57:00:9b:a9:ff:95:14:e2:60:cb:9e:93:9e:ec:34:
65:29:e6:43:42:a9:9b:5c:5c:01:d2:47:fe:0b:d0:26:14:c2:
82:48:1e:65:6d:17:31:f4:58:27:1e:a2:fe:40:db:72:50:56:
81:05:1b:74:27:b0:c6:c4:3d:da:bd:d5:4f:91:15:33:b8:86:
a1:62:89:29:fa:c8:a8:72:1c:27:b3:e3:0c:62:9c:5e:fe:99:
dc:e0:23:f8:cb:2b:98:04:b1:58:e1:39:f6:ed:31:d6:78:cc:
fe:9e:2a:b6:67:80:82:68:73:bb:f2:27:7b:de:cb:1b:12:4f:
49:a4:de:b9:26:10:65:a9:32:19:e8:61:87:21:c9:4c:62:5c:
07:cd:5d:dd:4a:b5:77:d8:c0:e8:12:51:36:8d:fc:9c:a7:e8:
66:54:2f:5f:c3:69:b7:e6:80:31:74:6f:3e:bc:52:eb:93:6c:
26:12:f5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:10:16 2026 by rpki-client