
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft
File: 0AQf95gDebeYBJJWho3_OYGcJgQ.mft (raw, json)
Hash identifier: A7BZ8gVHK1/aOOA658tN1TzayrWwzIX9GT1/aWP0B2A=
Subject key identifier: 6D:43:2B:DE:97:3D:58:AD:A3:78:43:74:33:A0:C2:8D:6F:EA:FD:D2
Authority key identifier: D0:04:1F:F7:98:03:79:B7:98:04:92:56:86:8D:FF:39:81:9C:26:04
Certificate issuer: /CN=d0041ff7980379b798049256868dff39819c2604
Certificate serial: 019F90FEB711F70A665675538144337760AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AQf95gDebeYBJJWho3_OYGcJgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft
Manifest number: 15CB
Signing time: Thu 23 Jul 2026 22:00:39 +0000
Manifest this update: Thu 23 Jul 2026 22:00:39 +0000
Manifest next update: Fri 24 Jul 2026 22:00:39 +0000
Files and hashes: 1: 0AQf95gDebeYBJJWho3_OYGcJgQ.crl (hash: TuQLKnAkuCtXVpjMnz/N7afpd/5QKi1XW/mVLEGiioY=)
2: _CbAIha09b2vkLLLEt-SwHJvLtA.roa (hash: rgmnLA63aETJnEB0DGJbTZ0etZiRckyQobaM7PylTRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AQf95gDebeYBJJWho3_OYGcJgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:b7:11:f7:0a:66:56:75:53:81:44:33:77:60:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0041ff7980379b798049256868dff39819c2604
Validity
Not Before: Jul 23 22:00:39 2026 GMT
Not After : Jul 24 22:00:39 2026 GMT
Subject: CN=6d432bde973d58ada378437433a0c28d6feafdd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e6:fe:36:b0:33:48:a0:b5:ca:ed:da:da:66:
4f:08:56:73:97:73:0b:76:93:88:7e:50:0c:13:d4:
ee:59:c8:6b:ab:d4:1d:89:e3:20:19:ea:a8:d9:34:
ec:81:2a:1f:60:6e:64:a2:d2:ea:ec:c4:19:be:2e:
46:18:af:03:c7:8b:31:59:47:7a:b4:d2:91:6c:7d:
a6:69:a0:ad:1d:4a:eb:a6:63:b0:8f:a3:29:db:48:
24:59:1d:00:d5:29:cd:4b:51:2d:36:86:f4:08:a4:
d8:6e:d0:f4:3b:4e:ac:bc:94:f2:d6:d5:32:07:a9:
45:41:98:98:c6:39:85:5a:4a:be:86:86:c3:63:58:
df:24:f7:cb:fd:69:8c:af:e1:ad:6e:34:20:d2:33:
89:d6:3e:42:7b:72:f3:ff:d3:b2:7e:f7:5c:7a:e0:
dc:27:9f:82:7f:4d:bd:d6:0b:17:dd:20:9a:43:34:
ec:be:2f:2b:42:e6:5f:56:06:1d:8f:f5:d2:89:de:
af:0d:2b:64:1d:16:c6:e0:d7:74:38:d3:1f:35:06:
3a:35:0e:64:26:06:8d:aa:ca:92:5e:35:a4:2c:0d:
43:6b:6c:84:1b:38:89:eb:d4:b8:88:31:f6:1e:8f:
ab:23:e4:00:f9:75:67:28:99:6d:01:8e:4c:ea:21:
b2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:43:2B:DE:97:3D:58:AD:A3:78:43:74:33:A0:C2:8D:6F:EA:FD:D2
X509v3 Authority Key Identifier:
keyid:D0:04:1F:F7:98:03:79:B7:98:04:92:56:86:8D:FF:39:81:9C:26:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AQf95gDebeYBJJWho3_OYGcJgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:39:ec:06:dc:61:c0:3a:cf:b6:cc:ae:39:4b:d4:ae:f0:1a:
6e:df:27:d6:f2:62:c3:61:ea:9e:6d:2f:82:f0:d6:ac:f7:70:
d1:82:a1:c8:4b:7a:d4:f5:aa:35:2e:cc:01:12:06:60:d2:3e:
32:00:83:07:73:be:e8:76:35:77:83:8e:9e:1a:d0:54:10:40:
42:b1:e1:aa:a4:46:a0:01:24:56:56:67:45:c6:0b:c8:c6:fb:
fd:70:9f:bf:21:73:99:27:e7:d8:c1:0b:ba:95:8f:3d:27:10:
00:e8:b0:d6:81:20:45:1f:09:be:bd:c4:a7:b0:f1:d8:d7:b3:
56:fe:fd:3d:46:5c:10:91:25:7d:d0:37:78:79:0a:5d:2b:43:
86:b4:58:58:72:61:b5:d1:b1:3d:ba:79:52:4f:20:b7:fd:cb:
fa:20:18:45:ea:cf:b1:5a:52:b9:45:15:8c:43:06:87:c1:16:
08:3d:51:11:f9:ef:df:7c:73:c2:c9:69:cd:da:9b:0c:c3:77:
60:07:c2:9f:4d:72:35:1c:fb:d8:3c:be:4d:1f:91:c4:6a:5c:
4b:1e:2e:a2:7b:fd:7d:b1:84:fe:09:aa:3d:e8:60:de:f0:85:
12:0d:ec:5e:b9:c4:bc:7d:75:cf:9f:57:5f:32:45:c9:38:86:
34:c1:33:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Q/rcR9wpmVnVTgUQzd2CsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMDQxZmY3OTgwMzc5Yjc5ODA0OTI1Njg2OGRmZjM5ODE5
YzI2MDQwHhcNMjYwNzIzMjIwMDM5WhcNMjYwNzI0MjIwMDM5WjAzMTEwLwYDVQQD
Eyg2ZDQzMmJkZTk3M2Q1OGFkYTM3ODQzNzQzM2EwYzI4ZDZmZWFmZGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOb+NrAzSKC1yu3a2mZPCFZzl3ML
dpOIflAME9TuWchrq9QdieMgGeqo2TTsgSofYG5kotLq7MQZvi5GGK8Dx4sxWUd6
tNKRbH2maaCtHUrrpmOwj6Mp20gkWR0A1SnNS1EtNob0CKTYbtD0O06svJTy1tUy
B6lFQZiYxjmFWkq+hobDY1jfJPfL/WmMr+GtbjQg0jOJ1j5Ce3Lz/9OyfvdceuDc
J5+Cf0291gsX3SCaQzTsvi8rQuZfVgYdj/XSid6vDStkHRbG4Nd0ONMfNQY6NQ5k
JgaNqsqSXjWkLA1Da2yEGziJ69S4iDH2Ho+rI+QA+XVnKJltAY5M6iGyawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1DK96XPVito3hDdDOgwo1v6v3SMB8GA1UdIwQY
MBaAFNAEH/eYA3m3mASSVoaN/zmBnCYEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEFRZjk1Z0RlYmVZQkpKV2hvM19PWUdjSmdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9lOGY0NTItYmU3MC00MTc2LTlkYTAt
ZTY4OWJmNTdkZDI3LzEvMEFRZjk1Z0RlYmVZQkpKV2hvM19PWUdjSmdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9lOGY0NTItYmU3MC00MTc2LTlkYTAtZTY4OWJmNTdkZDI3
LzEvMEFRZjk1Z0RlYmVZQkpKV2hvM19PWUdjSmdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOjnsBtxh
wDrPtsyuOUvUrvAabt8n1vJiw2Hqnm0vgvDWrPdw0YKhyEt61PWqNS7MARIGYNI+
MgCDB3O+6HY1d4OOnhrQVBBAQrHhqqRGoAEkVlZnRcYLyMb7/XCfvyFzmSfn2MEL
upWPPScQAOiw1oEgRR8Jvr3Ep7Dx2NezVv79PUZcEJElfdA3eHkKXStDhrRYWHJh
tdGxPbp5Uk8gt/3L+iAYRerPsVpSuUUVjEMGh8EWCD1REfnv33xzwslpzdqbDMN3
YAfCn01yNRz72Dy+TR+RxGpcSx4uonv9fbGE/gmqPehg3vCFEg3sXrnEvH11z59X
XzJFyTiGNMEzXQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:37:34 2026 by rpki-client