Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3e0ead-eec2-4d21-abe9-16bd8db85893/1/0QBKhuh9Pmm-MhDXDMwAvvigmWg.mft
File: 0QBKhuh9Pmm-MhDXDMwAvvigmWg.mft (raw, json)
Hash identifier: 7h8eqc6ptDWRq0UtzX+HP5tG+LnlFz/oCueHwXpLH8w=
Subject key identifier: 4B:CC:FF:28:51:6B:20:DF:27:F0:87:3E:01:CD:0D:01:2B:14:47:9B
Authority key identifier: D1:00:4A:86:E8:7D:3E:69:BE:32:10:D7:0C:CC:00:BE:F8:A0:99:68
Certificate issuer: /CN=d1004a86e87d3e69be3210d70ccc00bef8a09968
Certificate serial: 019F91DA40EDE7FDC2DFABE12F5F9C60BEF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QBKhuh9Pmm-MhDXDMwAvvigmWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3e0ead-eec2-4d21-abe9-16bd8db85893/1/0QBKhuh9Pmm-MhDXDMwAvvigmWg.mft
Manifest number: 1B
Signing time: Fri 24 Jul 2026 02:00:27 +0000
Manifest this update: Fri 24 Jul 2026 02:00:27 +0000
Manifest next update: Sat 25 Jul 2026 02:00:27 +0000
Files and hashes: 1: 0QBKhuh9Pmm-MhDXDMwAvvigmWg.crl (hash: GbGGU/8AAgPUTeTmRmWqQqoWMg7RWMl35fyLFpSaIp0=)
2: 4eTqXPsY2k0nfIKnegQTKL9VsZc.roa (hash: J2j96Igp+h3cc2jy3MZ29Vf0gTNVfHTR+h+cL3q6LnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3e0ead-eec2-4d21-abe9-16bd8db85893/1/0QBKhuh9Pmm-MhDXDMwAvvigmWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3e0ead-eec2-4d21-abe9-16bd8db85893/1/0QBKhuh9Pmm-MhDXDMwAvvigmWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QBKhuh9Pmm-MhDXDMwAvvigmWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:40:ed:e7:fd:c2:df:ab:e1:2f:5f:9c:60:be:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1004a86e87d3e69be3210d70ccc00bef8a09968
Validity
Not Before: Jul 24 02:00:27 2026 GMT
Not After : Jul 25 02:00:27 2026 GMT
Subject: CN=4bccff28516b20df27f0873e01cd0d012b14479b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a6:1b:3e:43:7b:d8:f7:9e:da:49:71:b4:55:
e6:9b:cf:d8:3b:0d:50:4b:16:d6:01:a2:5f:84:ff:
07:5a:c5:bc:af:11:f6:0a:ae:59:96:55:f4:da:41:
14:48:b8:71:cd:89:b4:db:9d:40:c0:c3:97:d2:a7:
86:5c:bf:a4:73:4e:80:93:a0:16:77:df:52:8c:cd:
a9:cf:be:af:e1:a9:1e:d4:f3:c3:d2:80:60:99:2e:
df:cb:6a:bd:eb:30:b7:31:1e:17:30:80:11:89:78:
dd:73:06:f8:a4:c1:8d:49:af:b0:0b:37:7e:18:58:
53:19:c7:3d:d8:44:4b:c9:62:f0:61:ef:fa:3a:5d:
e9:77:7e:0e:50:bc:16:ea:ca:07:08:e8:9b:27:7c:
c0:87:9f:80:ab:f1:3e:c1:c2:26:39:6c:eb:ef:92:
29:70:b8:ff:d8:b4:f4:fc:b6:1e:91:5b:59:66:87:
5c:8e:40:c9:db:ad:cf:0f:51:d9:e7:dd:7a:06:0b:
ab:23:39:75:8b:c3:c5:a1:b2:07:86:7d:cb:71:0c:
0e:06:c7:41:1a:0b:3e:be:dd:9d:76:2b:e2:ce:65:
ed:25:e2:ae:00:55:21:09:e0:3b:8d:7b:05:99:5b:
13:01:11:6a:5b:23:db:8c:e9:2d:52:fe:dc:99:b6:
87:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CC:FF:28:51:6B:20:DF:27:F0:87:3E:01:CD:0D:01:2B:14:47:9B
X509v3 Authority Key Identifier:
keyid:D1:00:4A:86:E8:7D:3E:69:BE:32:10:D7:0C:CC:00:BE:F8:A0:99:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QBKhuh9Pmm-MhDXDMwAvvigmWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e0ead-eec2-4d21-abe9-16bd8db85893/1/0QBKhuh9Pmm-MhDXDMwAvvigmWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e0ead-eec2-4d21-abe9-16bd8db85893/1/0QBKhuh9Pmm-MhDXDMwAvvigmWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f9:53:a2:e6:ea:bc:06:d6:0c:1f:1b:cb:df:6a:57:9b:33:
a1:17:9b:fd:54:70:b8:21:a0:b3:93:a0:a2:07:de:6e:d8:aa:
9c:f6:c9:e9:71:2d:9f:f3:a4:53:c9:6e:d4:44:76:41:e9:5c:
c0:1c:f6:eb:94:f0:77:41:0b:95:3b:4b:e7:59:d6:98:7a:b9:
19:42:ea:6f:92:46:25:48:82:f1:6e:b2:57:b7:34:39:7d:f0:
fb:1a:ca:cc:ef:02:d7:50:54:87:89:f4:4f:6f:34:d2:3a:75:
6e:04:0f:4f:5c:3c:3e:a7:f4:f3:f8:f8:a4:0f:fe:cc:16:a6:
0b:5f:b8:94:82:17:df:ae:b7:07:b2:cf:86:92:43:e3:d7:1e:
bc:8e:84:ac:ed:e5:c9:05:33:68:7b:87:3c:2e:2f:f8:c7:ce:
a0:52:8c:fa:f0:dc:b8:6a:69:9c:12:84:4f:50:ea:1b:16:99:
15:a1:f8:a5:a1:53:8b:60:cf:d3:37:59:27:04:82:86:0a:c9:
99:11:2f:c2:0f:e6:ea:ea:9e:f7:f7:9a:b4:66:df:8b:3d:13:
19:ab:c8:e6:9e:e1:df:98:6c:5c:ca:f5:79:62:67:4a:70:37:
28:12:2e:c6:c4:83:9a:0e:3a:d0:a6:a0:9a:02:70:21:a7:32:
60:90:d0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:10:48 2026 by rpki-client