Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
File: 0mIv3sj638pY51dcKfEOc653VxU.mft (raw, json)
Hash identifier: ioT3nwR3al13YtItS4jfZyeHC86EtheWqtXvvJZmogQ=
Subject key identifier: EF:52:54:0F:9A:45:DF:75:10:9C:E8:E9:15:D2:1B:97:E5:66:4E:A6
Authority key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
Certificate issuer: /CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Certificate serial: 019F927F0FADFAB5222A7FB5BC52E7841370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
Manifest number: 19D2
Signing time: Fri 24 Jul 2026 05:00:28 +0000
Manifest this update: Fri 24 Jul 2026 05:00:28 +0000
Manifest next update: Sat 25 Jul 2026 05:00:28 +0000
Files and hashes: 1: 0mIv3sj638pY51dcKfEOc653VxU.crl (hash: L+BokOhQQM2SjXx6OFSQF78ArAkmoa5mAfVrJkUEz2E=)
2: 48XlQQk7zLyObitRBott5O0TEZc.roa (hash: 0iveZkv2QdOfuGHu5qZcDP2k1JFUITllYLIt0mS1hLw=)
3: JXkrwkvLZXqvLpWo6GIqE9djHow.roa (hash: pvxp7edBiYpg9R4WGN/sBmyvZQpHSdt5YdDqPGYyoLU=)
4: Jb48XUzprHRQSa7zDmEwkm8bHB8.roa (hash: UeQ11+qXjfNfzNk6IX1DTTmTHuYUChCRYnGGfuhQmW8=)
5: M4MI8IskioFX_GL9An1slOnzOXk.roa (hash: +6v5Ea5o3E61ySsVOGY9En91TXxPv4H1t9U0YnMleQI=)
6: cFUEIWQu7qe64nrzejsq3hzv3fw.roa (hash: Y5DG1bnBMtUo7Z76/zjvm84VdL7RwBfBAjPP2M8PD/c=)
7: hkFrsNhiq0TnoVB5lv6ukrym9kU.roa (hash: Lpo1dIydhWwC2a6odejRAjq7zYy9EyLkYPWh1THs0As=)
8: svxysR0fryYPn1ckppavIVkehYU.roa (hash: 8MNRRTqy3XlQo1M7+GUmMiXWjPTZpOon/19BgW0t8Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:0f:ad:fa:b5:22:2a:7f:b5:bc:52:e7:84:13:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Validity
Not Before: Jul 24 05:00:28 2026 GMT
Not After : Jul 25 05:00:28 2026 GMT
Subject: CN=ef52540f9a45df75109ce8e915d21b97e5664ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c1:46:3d:9a:c2:5a:a1:d9:14:68:29:27:18:
3e:77:76:2b:85:c9:3a:8e:a1:21:d0:38:86:91:76:
8d:51:c2:0e:fe:d3:95:a0:fd:d1:ae:44:ca:97:c9:
0c:f3:5c:f1:ab:75:f3:c7:62:8d:0e:fb:8d:4c:84:
fb:1f:69:ea:0a:6b:78:f8:9d:25:ac:e4:47:be:76:
eb:e9:18:e0:1a:54:cf:8f:a5:a0:66:08:3b:fc:47:
47:13:b2:51:87:ee:1a:e5:0f:18:8b:07:6a:7c:c6:
2c:f4:3e:af:4b:51:33:c3:a6:71:56:57:0c:90:72:
db:dd:88:17:16:3b:29:ff:f1:14:f7:5b:62:58:c8:
99:50:7f:dd:7e:a9:c1:79:28:f5:0e:8b:22:b3:2f:
ad:a1:8e:13:36:ee:74:9d:90:08:ae:b3:cd:b6:51:
17:60:9a:ac:52:24:f2:64:96:18:7a:43:59:4e:74:
1f:ac:09:41:7b:de:7e:b0:f9:cf:2b:90:90:fe:d0:
fd:ba:03:eb:c3:2a:a9:20:b9:f3:f2:c5:b8:77:46:
f0:c2:6b:83:ca:cc:64:3b:aa:64:0a:1e:bb:b6:43:
8e:0c:34:e0:a8:e3:78:1b:43:ab:d0:45:6f:57:1a:
55:34:39:7a:f2:4b:cf:06:c1:c7:36:97:d4:b5:63:
bc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:52:54:0F:9A:45:DF:75:10:9C:E8:E9:15:D2:1B:97:E5:66:4E:A6
X509v3 Authority Key Identifier:
keyid:D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:c6:72:b5:e3:ef:04:63:e6:30:8f:9b:72:d6:8c:32:36:3d:
86:c7:48:38:f2:f5:11:b3:2b:20:b6:86:e0:85:6d:4c:cb:56:
90:51:7e:ce:7f:88:36:a7:dc:b7:76:d3:04:86:d8:84:ca:73:
63:0d:2b:35:f1:97:7c:d8:e0:3e:51:d1:14:bb:0a:9c:eb:85:
55:c5:40:33:cf:74:42:b7:77:ef:56:30:b8:72:cd:96:3a:04:
b9:89:7e:e2:6b:f1:69:83:d6:2b:43:aa:cf:49:c2:9e:c4:03:
67:ea:c6:cd:b8:e3:3e:c6:0a:c4:2d:11:ed:f8:93:56:2e:53:
33:95:c0:ed:d4:0b:4d:de:37:2c:05:54:60:59:1c:f8:98:24:
91:e6:4c:6c:09:a8:40:d3:0e:da:db:93:8e:1d:2a:e5:7a:e7:
14:ca:64:8c:62:42:b3:9f:2f:54:e8:2e:aa:3f:2d:36:f4:ac:
0e:bf:cf:f3:ba:8e:14:75:71:54:24:41:6b:a1:c0:9a:c9:1c:
85:f9:c4:09:c6:87:a4:42:6b:93:51:08:58:75:ac:b5:bb:89:
ea:5e:c8:83:1b:d9:d6:5e:be:d6:7f:84:0d:0c:40:b0:9e:19:
49:05:e3:04:91:20:74:b1:72:26:5c:58:8e:ce:c7:fb:99:74:
69:4b:ba:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:01:04 2026 by rpki-client