
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
File: 0mpECeqR9QbWM4ccbDVUDUYDN9E.mft (raw, json)
Hash identifier: 3zhEO6ynPNV92DgMlo9qLTPz8REmOMtRSpS02acg0Lo=
Subject key identifier: 68:8F:41:B9:2A:A9:EE:6E:58:81:4C:DC:DB:DC:33:A6:5D:48:20:85
Authority key identifier: D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1
Certificate issuer: /CN=d26a4409ea91f506d633871c6c35540d460337d1
Certificate serial: 019F8FEBD41628E269029AB9FD6B5EA3CDC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
Manifest number: 11A7
Signing time: Thu 23 Jul 2026 17:00:24 +0000
Manifest this update: Thu 23 Jul 2026 17:00:24 +0000
Manifest next update: Fri 24 Jul 2026 17:00:24 +0000
Files and hashes: 1: 0mpECeqR9QbWM4ccbDVUDUYDN9E.crl (hash: mTfv7kyC+FRuI42jzkPkrjpS5erzE0gDP7BQWMDBx5k=)
2: AcTeoEML1ryHQtehrMdoz9pSMNk.roa (hash: 58HREcExgCm4jYk7OfR+la9NkSYLp6wFVz1Zv1g3G6w=)
3: wzoQWaU78B1JYcVEw1aU_m666Qg.roa (hash: YXxlzjY6ITzVnS2guD8G2HgvMXrNu1UDUO++sIfSdhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:d4:16:28:e2:69:02:9a:b9:fd:6b:5e:a3:cd:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d26a4409ea91f506d633871c6c35540d460337d1
Validity
Not Before: Jul 23 17:00:24 2026 GMT
Not After : Jul 24 17:00:24 2026 GMT
Subject: CN=688f41b92aa9ee6e58814cdcdbdc33a65d482085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:61:77:fa:65:b2:24:06:b1:ec:94:f9:b0:07:
98:fd:a0:ab:47:2a:71:6b:af:b0:e5:16:68:32:17:
5f:c2:8d:a3:8a:e7:2f:13:9a:d0:b7:9b:28:49:cb:
26:63:80:d6:f8:2b:9e:43:84:f4:96:67:1f:d8:9e:
f1:c6:65:21:75:97:a5:35:b1:ca:5c:24:58:24:7e:
49:59:5a:7c:e0:1f:f3:6c:1d:e9:ff:9c:d0:7e:22:
6e:93:76:5b:af:0b:08:10:71:7d:05:1d:a3:27:57:
95:0c:46:4e:6a:e2:54:8b:b1:21:a3:0f:4b:b0:cd:
0b:60:7b:dd:6c:f2:30:e1:e0:44:41:74:6e:0c:25:
22:5e:fe:8c:44:cf:7e:ec:80:1b:04:5e:77:18:d2:
39:ad:ab:56:91:8d:14:13:70:48:55:34:0c:03:89:
8b:14:f7:d3:7f:fd:32:56:dd:58:f3:f5:e7:4c:ac:
47:a3:08:ae:7a:84:e5:c0:48:68:06:e3:9a:2f:7b:
c9:e9:7c:c9:dd:45:2a:a9:4d:95:0c:cb:95:ee:a2:
0c:b4:28:22:69:e4:ee:f1:14:07:5f:e0:b8:92:c8:
3a:45:9f:76:24:99:22:b5:bb:96:14:6d:41:9e:dd:
56:77:f1:5e:92:40:11:82:09:b8:c9:29:f3:54:e4:
ab:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8F:41:B9:2A:A9:EE:6E:58:81:4C:DC:DB:DC:33:A6:5D:48:20:85
X509v3 Authority Key Identifier:
keyid:D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:20:df:ee:86:ff:14:97:0a:08:79:76:d8:e8:57:f2:8a:0f:
2a:24:1d:8a:7a:ff:36:66:07:ec:e0:a6:c8:9e:93:48:7a:3e:
5b:0a:13:b6:35:d5:6a:28:3d:92:a1:7a:52:15:9e:b0:8b:bf:
82:c2:37:56:8c:3f:fd:3e:31:fb:be:76:f9:e0:43:2e:96:3a:
de:d4:b3:ed:a8:d9:77:27:25:ca:ac:77:2a:22:cc:30:f9:57:
5d:b3:f3:16:b2:d0:ae:db:db:6d:6d:1c:3e:27:69:c9:25:22:
49:8a:58:c3:cd:33:a1:6b:e7:50:d6:91:52:62:ea:85:e1:18:
36:4a:c9:ee:84:77:b4:fe:65:7c:e8:79:6a:c4:e3:5e:f7:52:
2d:0e:7d:e8:2f:88:11:24:a8:8e:4e:14:42:a3:ff:f2:f6:9c:
6f:a7:4c:e9:24:3a:17:53:b6:1f:df:4e:47:9a:a6:2c:b4:b3:
71:b1:80:2c:a6:85:97:e4:14:de:04:5e:d4:9e:27:3a:42:67:
e6:dd:69:9c:c5:5a:db:52:79:7a:fd:87:94:47:7a:68:d0:54:
33:48:fa:dc:4b:9c:bc:29:91:bd:31:f1:76:23:d8:c2:fa:c6:
fa:d0:2a:ac:4d:50:38:68:e6:a7:89:ca:fa:a1:c3:80:4d:42:
05:a8:ae:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:18:41 2026 by rpki-client