Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
File: 0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft (raw, json)
Hash identifier: L4SpQr7FA29DSwpZk+1ze93q67emOylwKOpLcRGq4FI=
Subject key identifier: 08:7C:03:2E:94:5E:36:CF:D2:E0:3C:C7:A4:3D:1E:52:30:E0:F7:9D
Authority key identifier: D0:EE:03:89:68:7D:BD:44:5D:E6:F9:23:9C:1D:02:C3:77:0C:F5:74
Certificate issuer: /CN=d0ee0389687dbd445de6f9239c1d02c3770cf574
Certificate serial: 019F905A61F7524EE0F155860DFCBDCAF1CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 19:01:10 +0000
Manifest this update: Thu 23 Jul 2026 19:01:10 +0000
Manifest next update: Fri 24 Jul 2026 19:01:10 +0000
Files and hashes: 1: 0O4DiWh9vURd5vkjnB0Cw3cM9XQ.crl (hash: QnK7tvrCJ8724bKOaNJ6W0gMBqOkq7nOT7cinKEpgJY=)
2: ufg8Cy-npLiG4EP7oeE-jAY168k.roa (hash: mWJPH552eZGzUsrCNb54v4U4ffZaIGFDBWjHB1EftzA=)
3: ut5dpGeCvxjJRpLmR_ipxil5ZUA.roa (hash: PaeXiU3oIApbKxkYqCqS8/5Z6kGo2lJVdWVbX8L9K5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:61:f7:52:4e:e0:f1:55:86:0d:fc:bd:ca:f1:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ee0389687dbd445de6f9239c1d02c3770cf574
Validity
Not Before: Jul 23 19:01:10 2026 GMT
Not After : Jul 24 19:01:10 2026 GMT
Subject: CN=087c032e945e36cfd2e03cc7a43d1e5230e0f79d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a6:41:88:e1:bb:82:9f:e6:9b:d6:a5:d7:71:
b1:8d:2b:20:03:43:82:86:ea:37:7a:62:75:81:57:
bf:29:4c:ea:02:b8:3a:7c:5c:dd:80:18:7b:94:e6:
2e:41:7b:a7:5b:15:40:dd:21:ef:28:20:1d:52:2b:
a0:83:1b:be:53:90:12:e8:e0:b8:da:56:b0:0c:ad:
64:83:37:99:f9:3f:21:d8:a3:49:73:69:41:b1:55:
f2:db:f7:05:83:74:81:21:c2:04:51:b9:7d:e7:dd:
20:c7:79:a1:af:93:af:55:c0:4c:9b:fb:57:d0:63:
f4:0e:0d:f1:86:d7:92:ab:91:60:6c:c4:ae:3e:85:
b5:27:32:cf:c0:ed:b5:32:c0:b2:53:99:e0:c5:00:
93:43:36:f8:cc:9e:c9:dd:a0:68:10:7a:c7:ac:b6:
28:a1:5b:4b:f3:46:9c:67:b6:16:ee:d6:88:f2:f6:
81:01:7e:84:aa:a6:47:65:10:8b:1e:43:84:27:86:
00:0d:ce:eb:da:90:2b:8a:e1:fd:82:9f:59:4f:0d:
83:31:90:48:1f:85:9a:4b:40:d3:cf:1d:bd:95:75:
c9:5f:cc:37:7e:e8:b1:10:19:5c:18:ec:53:5f:5e:
1c:c9:81:ee:cf:49:c6:8b:10:1f:48:5e:38:20:10:
ea:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:7C:03:2E:94:5E:36:CF:D2:E0:3C:C7:A4:3D:1E:52:30:E0:F7:9D
X509v3 Authority Key Identifier:
keyid:D0:EE:03:89:68:7D:BD:44:5D:E6:F9:23:9C:1D:02:C3:77:0C:F5:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a5:de:2c:67:33:e2:a8:69:9e:30:37:08:ac:1a:59:ad:30:
0c:a0:ec:a5:fd:f4:07:9e:32:87:57:d0:94:5a:7f:b6:78:b7:
73:48:fe:94:25:b2:ec:01:9d:30:f9:70:91:44:9e:21:d4:8e:
a7:c5:32:49:6a:79:fc:7a:b8:78:c7:72:31:5e:09:ba:c4:12:
e3:c7:cd:9b:3f:07:64:ed:04:80:19:48:98:1b:7c:3f:23:91:
e7:a5:95:d9:40:a7:db:d9:bd:aa:80:27:2d:91:e7:36:10:fb:
85:8e:dd:60:8e:23:f0:83:ca:f1:ec:69:81:0b:f8:81:5d:f3:
3d:02:0d:52:ad:5b:0c:e8:82:be:c4:ac:f5:d2:92:12:33:25:
dc:4e:aa:e9:b4:11:59:f7:37:85:0c:57:2b:70:d2:3a:91:40:
7f:1c:33:d7:8e:0a:42:e5:e7:02:6b:e3:99:82:63:e3:6d:ef:
dd:3c:90:04:c7:b4:7f:88:82:9f:00:94:64:7a:86:d5:32:d5:
32:bc:b2:bc:40:7f:b1:b3:dc:6b:f6:bc:20:0e:28:5d:97:e1:
dc:6e:66:10:d6:89:d9:66:ca:58:28:cc:e5:68:b5:15:e0:f9:
d5:0f:46:ff:db:32:b4:00:47:13:1d:5e:55:73:a1:95:f6:25:
af:a2:19:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWmH3Uk7g8VWGDfy9yvHLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZWUwMzg5Njg3ZGJkNDQ1ZGU2ZjkyMzljMWQwMmMzNzcw
Y2Y1NzQwHhcNMjYwNzIzMTkwMTEwWhcNMjYwNzI0MTkwMTEwWjAzMTEwLwYDVQQD
EygwODdjMDMyZTk0NWUzNmNmZDJlMDNjYzdhNDNkMWU1MjMwZTBmNzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5aZBiOG7gp/mm9al13GxjSsgA0OC
huo3emJ1gVe/KUzqArg6fFzdgBh7lOYuQXunWxVA3SHvKCAdUiuggxu+U5AS6OC4
2lawDK1kgzeZ+T8h2KNJc2lBsVXy2/cFg3SBIcIEUbl9590gx3mhr5OvVcBMm/tX
0GP0Dg3xhteSq5FgbMSuPoW1JzLPwO21MsCyU5ngxQCTQzb4zJ7J3aBoEHrHrLYo
oVtL80acZ7YW7taI8vaBAX6EqqZHZRCLHkOEJ4YADc7r2pAriuH9gp9ZTw2DMZBI
H4WaS0DTzx29lXXJX8w3fuixEBlcGOxTX14cyYHuz0nGixAfSF44IBDqAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAh8Ay6UXjbP0uA8x6Q9HlIw4PedMB8GA1UdIwQY
MBaAFNDuA4lofb1EXeb5I5wdAsN3DPV0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME80RGlXaDl2VVJkNXZram5CMEN3M2NNOVhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9hMTE0MTctNmFiYy00YzBkLThhZmEt
MWEyOWE0NDhkMzA5LzEvME80RGlXaDl2VVJkNXZram5CMEN3M2NNOVhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9hMTE0MTctNmFiYy00YzBkLThhZmEtMWEyOWE0NDhkMzA5
LzEvME80RGlXaDl2VVJkNXZram5CMEN3M2NNOVhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW6XeLGcz
4qhpnjA3CKwaWa0wDKDspf30B54yh1fQlFp/tni3c0j+lCWy7AGdMPlwkUSeIdSO
p8UySWp5/Hq4eMdyMV4JusQS48fNmz8HZO0EgBlImBt8PyOR56WV2UCn29m9qoAn
LZHnNhD7hY7dYI4j8IPK8expgQv4gV3zPQINUq1bDOiCvsSs9dKSEjMl3E6q6bQR
Wfc3hQxXK3DSOpFAfxwz144KQuXnAmvjmYJj423v3TyQBMe0f4iCnwCUZHqG1TLV
MryyvEB/sbPca/a8IA4oXZfh3G5mENaJ2WbKWCjM5Wi1FeD51Q9G/9sytABHEx1e
VXOhlfYlr6IZzw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:19:34 2026 by rpki-client