Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft
File: 0SIIZtpI4MfP--jHOjUcKkexpNs.mft (raw, json)
Hash identifier: SA9qtYGNB8QKGQ9KZHzw1DnQc87VgrSYZZPc6bO11N4=
Subject key identifier: 3A:80:64:42:EE:58:D7:4A:6B:11:38:B4:96:CC:9F:0B:54:4B:18:8C
Authority key identifier: D1:22:08:66:DA:48:E0:C7:CF:FB:E8:C7:3A:35:1C:2A:47:B1:A4:DB
Certificate issuer: /CN=d1220866da48e0c7cffbe8c73a351c2a47b1a4db
Certificate serial: 019F913587C3822D8F7DD554D117E9B286D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SIIZtpI4MfP--jHOjUcKkexpNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft
Manifest number: 074F
Signing time: Thu 23 Jul 2026 23:00:32 +0000
Manifest this update: Thu 23 Jul 2026 23:00:32 +0000
Manifest next update: Fri 24 Jul 2026 23:00:32 +0000
Files and hashes: 1: 0SIIZtpI4MfP--jHOjUcKkexpNs.crl (hash: MEgctOJwOjvFdtIgydTKFyyIkxaLrybRHVedW9akQV8=)
2: 4TxKwKRDQKF0yF_LCgtDfcD3WbA.roa (hash: Jse6W+LikeQvtYUhUSyUuHEBzEMpr4LWc8qS1sps7Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0SIIZtpI4MfP--jHOjUcKkexpNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:87:c3:82:2d:8f:7d:d5:54:d1:17:e9:b2:86:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1220866da48e0c7cffbe8c73a351c2a47b1a4db
Validity
Not Before: Jul 23 23:00:32 2026 GMT
Not After : Jul 24 23:00:32 2026 GMT
Subject: CN=3a806442ee58d74a6b1138b496cc9f0b544b188c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:dd:c9:de:16:88:e5:84:87:48:e0:8e:06:79:
c5:7a:e2:c4:69:51:cd:ff:c7:94:f1:d2:21:1f:da:
81:82:1f:fc:8e:e0:d1:bc:1f:c8:74:aa:f5:11:53:
41:ad:54:d4:43:ee:d3:51:16:33:dd:97:63:8a:0d:
f4:74:da:b6:cd:3e:1d:e7:bf:c5:74:f0:ff:02:cf:
f1:fe:8b:ce:49:fa:18:3e:eb:02:c5:09:74:75:99:
6a:72:75:f7:8b:cc:0e:70:b1:e0:94:76:01:aa:11:
51:77:6e:2a:f4:a5:ff:31:12:b8:29:74:68:4b:c1:
4f:c6:1e:90:64:3e:48:26:c4:9b:52:d7:8f:f6:eb:
0a:50:ae:8e:15:d8:93:d9:38:77:68:99:05:f6:08:
8c:2c:53:f8:ff:28:1c:81:b6:88:81:92:f9:be:1d:
30:ce:86:99:ed:d2:4b:d9:8f:2a:2c:aa:82:5b:b2:
87:5d:7f:d1:2e:35:f1:1b:59:ab:76:a1:83:aa:75:
0f:25:cb:69:8d:9f:ef:1b:e7:c2:88:82:c3:78:b7:
3b:cb:c4:93:78:ac:44:82:0e:e3:1e:91:d1:3b:ce:
5a:eb:0d:27:f6:47:73:db:75:45:8d:a0:52:d6:fd:
99:f7:25:3e:c1:36:cb:48:80:50:e6:55:8b:93:d3:
95:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:80:64:42:EE:58:D7:4A:6B:11:38:B4:96:CC:9F:0B:54:4B:18:8C
X509v3 Authority Key Identifier:
keyid:D1:22:08:66:DA:48:E0:C7:CF:FB:E8:C7:3A:35:1C:2A:47:B1:A4:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SIIZtpI4MfP--jHOjUcKkexpNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:52:13:1c:ab:1d:2f:53:0e:85:7d:8e:79:40:f6:7a:83:51:
ea:9d:d4:7d:da:3d:2e:97:0e:e0:36:ff:37:32:57:31:58:0e:
82:f2:43:ac:fc:84:85:9a:e0:f3:84:bb:0d:08:5a:1d:d8:f2:
2c:df:24:cb:0a:d6:9e:fa:e0:c0:4f:40:99:f9:43:b7:05:b8:
2e:45:01:d6:ec:2b:5c:68:c0:03:a8:4f:55:dd:cc:70:76:08:
9c:97:37:4d:27:9c:00:b5:19:15:74:ca:dd:c4:77:8e:48:1d:
6b:ad:b1:89:79:24:99:e7:08:5f:a1:eb:71:b1:6a:26:23:91:
e7:1e:d2:d0:5b:42:ad:b2:b7:3f:aa:59:81:3b:83:50:66:c9:
30:37:14:b4:69:97:12:81:ad:b2:12:dd:55:0d:6f:c2:26:aa:
39:6a:ad:6b:03:44:48:c0:73:b6:88:b1:df:04:46:50:04:81:
42:b4:36:42:95:57:c1:7a:2d:e8:d6:32:e7:53:eb:52:44:0a:
75:a7:7a:7c:7e:62:53:d6:0d:77:8d:f0:bc:1e:53:7a:19:55:
b2:23:8d:dc:39:ec:c7:9d:27:32:fb:98:ab:38:63:ac:1e:cf:
f4:21:df:25:83:6e:38:e1:5c:4a:26:78:41:f2:92:6d:6f:2f:
7a:a4:43:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RNYfDgi2PfdVU0RfpsobUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMjIwODY2ZGE0OGUwYzdjZmZiZThjNzNhMzUxYzJhNDdi
MWE0ZGIwHhcNMjYwNzIzMjMwMDMyWhcNMjYwNzI0MjMwMDMyWjAzMTEwLwYDVQQD
EygzYTgwNjQ0MmVlNThkNzRhNmIxMTM4YjQ5NmNjOWYwYjU0NGIxODhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6t3J3haI5YSHSOCOBnnFeuLEaVHN
/8eU8dIhH9qBgh/8juDRvB/IdKr1EVNBrVTUQ+7TURYz3Zdjig30dNq2zT4d57/F
dPD/As/x/ovOSfoYPusCxQl0dZlqcnX3i8wOcLHglHYBqhFRd24q9KX/MRK4KXRo
S8FPxh6QZD5IJsSbUteP9usKUK6OFdiT2Th3aJkF9giMLFP4/ygcgbaIgZL5vh0w
zoaZ7dJL2Y8qLKqCW7KHXX/RLjXxG1mrdqGDqnUPJctpjZ/vG+fCiILDeLc7y8ST
eKxEgg7jHpHRO85a6w0n9kdz23VFjaBS1v2Z9yU+wTbLSIBQ5lWLk9OVNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqAZELuWNdKaxE4tJbMnwtUSxiMMB8GA1UdIwQY
MBaAFNEiCGbaSODHz/voxzo1HCpHsaTbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFNJSVp0cEk0TWZQLS1qSE9qVWNLa2V4cE5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS82MDk1MWUtN2FiNS00NWQ4LTkwMTUt
OTVlY2Q2NzE4ODg3LzEvMFNJSVp0cEk0TWZQLS1qSE9qVWNLa2V4cE5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS82MDk1MWUtN2FiNS00NWQ4LTkwMTUtOTVlY2Q2NzE4ODg3
LzEvMFNJSVp0cEk0TWZQLS1qSE9qVWNLa2V4cE5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARFITHKsd
L1MOhX2OeUD2eoNR6p3Ufdo9LpcO4Db/NzJXMVgOgvJDrPyEhZrg84S7DQhaHdjy
LN8kywrWnvrgwE9AmflDtwW4LkUB1uwrXGjAA6hPVd3McHYInJc3TSecALUZFXTK
3cR3jkgda62xiXkkmecIX6HrcbFqJiOR5x7S0FtCrbK3P6pZgTuDUGbJMDcUtGmX
EoGtshLdVQ1vwiaqOWqtawNESMBztoix3wRGUASBQrQ2QpVXwXot6NYy51PrUkQK
dad6fH5iU9YNd43wvB5TehlVsiON3Dnsx50nMvuYqzhjrB7P9CHfJYNuOOFcSiZ4
QfKSbW8veqRDnA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:47:48 2026 by rpki-client