Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.mft
File: 0f00NtehmnND-oANh6Aa8YPaMYs.mft (raw, json)
Hash identifier: NimuWXnnvE8//INYkFmSWpChD1Xq4WaMcNToOXFjhkI=
Subject key identifier: DE:89:B2:75:5F:86:B3:22:82:29:21:17:D2:C6:35:0A:55:18:11:57
Authority key identifier: D1:FD:34:36:D7:A1:9A:73:43:FA:80:0D:87:A0:1A:F1:83:DA:31:8B
Certificate issuer: /CN=d1fd3436d7a19a7343fa800d87a01af183da318b
Certificate serial: 019F8FB504AB5513BADAA07DCF36EC6E1198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0f00NtehmnND-oANh6Aa8YPaMYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.mft
Manifest number: 0FD2
Signing time: Thu 23 Jul 2026 16:00:32 +0000
Manifest this update: Thu 23 Jul 2026 16:00:32 +0000
Manifest next update: Fri 24 Jul 2026 16:00:32 +0000
Files and hashes: 1: 0f00NtehmnND-oANh6Aa8YPaMYs.crl (hash: xydtG91zyK1QTrWWpieTgEmi4hJvAyynt4MzcIqF7j0=)
2: IASwi9of8Nm06s2NEyZeclBiyks.roa (hash: wJHjHPTUMp7nASIGnsvw0Yq6r11NWYMurdnBadU/uWs=)
3: cJm02hXD31NI7pVQ-Zg6zC-hgq4.roa (hash: HsDfNZqhgWgKKit0y0ockf+XjyRYYtlEbZ6HrEVkmGs=)
4: d2D28pbUUy75o_ayovdj8OnlSSk.roa (hash: VCEc/3eMD6beAJR+mVre94XxkAsuGJ0/hx5+lBhoAGg=)
5: jwsbk3UxQHXyjEExXwNUXcrvx38.roa (hash: Glu31tXKVdAhpJSQOXApQod2ByFLYzTP23c7sIux+Ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0f00NtehmnND-oANh6Aa8YPaMYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:04:ab:55:13:ba:da:a0:7d:cf:36:ec:6e:11:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1fd3436d7a19a7343fa800d87a01af183da318b
Validity
Not Before: Jul 23 16:00:32 2026 GMT
Not After : Jul 24 16:00:32 2026 GMT
Subject: CN=de89b2755f86b32282292117d2c6350a55181157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d6:5b:c2:db:34:69:34:a0:46:c6:30:2c:b2:
ae:bd:da:39:a6:32:78:b0:16:85:ce:92:c1:78:15:
53:96:dd:29:15:f5:9b:05:39:3c:59:de:20:49:ae:
9b:23:71:e9:07:b4:34:f6:67:c7:95:b1:27:42:d0:
a0:17:7d:d2:e8:26:93:ac:b5:8a:ae:ec:d6:98:b2:
37:0d:fb:d4:3e:9a:07:fe:9f:a6:1b:22:69:de:8e:
e2:c0:94:ba:c3:bc:25:3b:b1:c7:0c:02:97:e9:58:
cb:da:56:b1:3b:47:77:39:68:57:b4:47:37:5b:3b:
67:70:77:15:92:4a:b2:15:a5:62:5f:ca:93:5c:b3:
9d:70:9e:13:b7:bd:4f:6a:5c:f2:eb:f7:5e:a5:1f:
06:c1:59:79:fe:77:45:86:6a:78:1d:7c:b2:ac:04:
a6:c9:9d:19:fe:52:80:a6:5d:cd:20:0f:92:be:b6:
4a:e9:51:14:1f:57:78:b8:bd:e9:7e:cb:ee:f9:b7:
f1:b7:b7:11:91:2a:8b:d3:d2:d7:5e:7e:12:5d:cf:
e7:f9:de:22:5b:59:bb:ba:a4:23:ae:55:99:57:b8:
bf:6c:df:f0:1c:ce:c6:5a:03:73:c0:f0:bb:b0:b7:
33:4d:14:b6:20:8b:5e:78:d2:57:14:96:cd:18:b6:
50:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:89:B2:75:5F:86:B3:22:82:29:21:17:D2:C6:35:0A:55:18:11:57
X509v3 Authority Key Identifier:
keyid:D1:FD:34:36:D7:A1:9A:73:43:FA:80:0D:87:A0:1A:F1:83:DA:31:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f00NtehmnND-oANh6Aa8YPaMYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b8:fc:9f:67:63:05:56:fe:65:44:4d:18:4a:69:da:81:52:
22:1a:0b:91:64:5b:cb:ef:e6:30:ec:6f:5c:1d:a7:c8:bf:4e:
71:b9:b3:d5:3f:60:5d:6a:5c:19:4c:af:66:6f:60:62:4a:55:
8e:f9:d1:a3:3b:9b:df:e5:b0:c5:02:cd:91:d2:9b:02:d2:a2:
9d:a8:5c:cd:8e:1f:15:e2:38:17:c8:06:5d:4c:6d:2f:8a:7d:
64:57:05:ee:08:52:03:2e:13:a5:18:aa:99:e9:29:54:7f:45:
2a:9c:83:bc:61:62:5f:40:78:93:ee:5e:76:a8:3c:6d:93:81:
29:e6:e0:f7:0e:04:19:1b:6b:f1:93:1c:3f:7a:f5:f8:1b:cd:
62:6e:a3:a2:c3:44:50:e4:87:e8:85:04:7f:3f:0a:d1:8f:d8:
f2:03:e1:53:0d:eb:58:cf:03:0d:e6:00:61:ea:8d:cb:d2:5f:
fc:b9:7e:29:71:ea:91:e3:18:e0:69:42:7b:7d:c1:42:31:e1:
77:74:58:31:37:d6:d4:2b:2f:14:d0:06:3a:02:57:77:f8:a2:
03:cb:7b:df:f9:8a:fa:48:e5:a4:72:5f:e2:3f:02:42:68:e4:
6c:64:93:13:6b:b3:36:bf:9e:fb:05:48:98:51:24:b5:e2:4e:
71:e3:ef:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:39 2026 by rpki-client