Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
File: 00vPISevCy4KJGrkV0MEx653Fek.mft (raw, json)
Hash identifier: DPHglv9e7/8N9N3+kRfY4ypVCrqd07u0tHXXoERYQek=
Subject key identifier: 04:F4:24:6C:C0:44:1A:0A:EC:F5:89:A9:BF:BF:CB:56:A0:B5:E2:D2
Authority key identifier: D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9
Certificate issuer: /CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9
Certificate serial: 019F9059D13D17E14C32108CF3AC51FA86B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 19:00:33 +0000
Manifest this update: Thu 23 Jul 2026 19:00:33 +0000
Manifest next update: Fri 24 Jul 2026 19:00:33 +0000
Files and hashes: 1: 00vPISevCy4KJGrkV0MEx653Fek.crl (hash: CsT1L2HoRU7Epsgh7MUg0c2LMyh/bUtPYMiXZF2bXVM=)
2: LNdrd32mL4o15Pj5JcWmBKR2Q2I.roa (hash: hLgQdqBGoRGoVp14crN6xd2B0BaQtU78dsrL7Dz6tOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:d1:3d:17:e1:4c:32:10:8c:f3:ac:51:fa:86:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9
Validity
Not Before: Jul 23 19:00:33 2026 GMT
Not After : Jul 24 19:00:33 2026 GMT
Subject: CN=04f4246cc0441a0aecf589a9bfbfcb56a0b5e2d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:65:4d:db:8c:56:92:de:e7:5b:ee:53:d1:0f:
28:0f:fd:d5:19:33:4b:8c:17:96:76:dc:b5:4f:75:
fa:e2:5e:63:94:e8:84:8b:ca:a3:b0:ca:ef:87:03:
f6:8e:fc:e2:67:4e:fc:3d:90:92:0c:da:c6:a4:8e:
25:9d:32:7f:9c:ae:04:c5:54:c5:2e:76:21:75:46:
3a:6d:49:6c:22:c4:94:63:29:68:9a:bf:a3:75:b8:
fe:67:00:1c:54:8a:de:e6:08:34:b6:51:01:d5:5b:
ac:06:75:21:10:7b:14:37:e5:2e:25:78:23:f9:15:
50:18:af:42:cf:f3:47:aa:e7:d6:16:9f:11:6d:1e:
d6:02:da:ab:f0:0c:b3:fd:bf:00:66:31:f5:24:cd:
25:36:01:81:f5:ed:90:65:e5:88:2e:79:3c:c0:41:
a8:2a:79:74:ad:c2:11:fd:ca:e3:e5:91:a3:f2:d8:
da:fd:8e:32:6a:aa:97:2c:1d:a1:a6:80:6d:18:89:
e2:ea:bc:4a:7a:4b:0d:55:3c:5b:33:81:50:6f:c5:
4e:0d:7b:bc:81:54:c1:1d:98:39:e7:ef:f5:06:cb:
e9:4f:a0:c7:8a:d4:40:38:88:3e:08:45:90:e9:e7:
01:17:c7:87:10:f6:a9:94:e8:04:fd:85:21:2f:42:
ce:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F4:24:6C:C0:44:1A:0A:EC:F5:89:A9:BF:BF:CB:56:A0:B5:E2:D2
X509v3 Authority Key Identifier:
keyid:D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e1:c7:53:84:db:cf:31:6d:2c:93:0a:60:79:1c:25:ed:5b:
f3:45:eb:2e:59:ee:6c:3b:21:aa:24:6f:39:4d:1d:e5:10:50:
fc:31:81:24:ea:e6:e7:de:54:28:25:c1:7b:ca:24:ce:81:60:
5a:fc:d8:22:0a:21:dc:be:0e:63:7c:fc:eb:88:b2:9d:32:00:
15:45:f8:fe:22:c8:13:67:84:e3:c2:07:fb:ba:fb:e6:86:29:
12:93:9c:0f:4f:fb:fe:5e:2f:11:45:21:d4:a2:07:cf:04:8b:
b4:08:0b:b5:24:bc:98:95:f5:52:bd:76:11:9a:86:22:d0:10:
07:c5:af:31:d1:9c:b0:a9:ab:b8:79:90:4f:54:c7:c9:72:27:
a8:37:44:5f:39:9b:ed:ad:e6:93:ea:05:4b:fb:25:cc:c5:ab:
aa:85:9a:87:19:62:70:bd:dc:91:07:ec:0a:d9:b8:73:30:30:
f8:37:1b:0e:16:a8:bc:13:77:d8:b0:01:00:13:fb:fa:74:b9:
ad:4b:c4:eb:af:1b:af:f9:67:01:c9:0c:4e:81:27:e1:94:2a:
56:d8:a9:0b:c7:ef:b5:67:35:78:29:52:57:e1:c7:ec:b6:72:
22:e4:ee:30:c9:1b:1d:23:90:1d:ad:66:0d:46:ea:49:59:eb:
ab:f2:c2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:40:24 2026 by rpki-client