Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
File: 0eAT7IpcVt8kGpslY9ER-OVDv5E.mft (raw, json)
Hash identifier: 5XO3QOsqXb/muZCMWM6KAAXnfiSc6vVjAGcCObKzmX4=
Subject key identifier: 62:8D:13:35:0E:56:E5:3D:10:94:AD:23:FE:2E:DA:63:E6:BC:18:F8
Authority key identifier: D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
Certificate issuer: /CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Certificate serial: 019F916D3F09DDFE47A9AF32C9CBC13CFF15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
Manifest number: 19E1
Signing time: Fri 24 Jul 2026 00:01:23 +0000
Manifest this update: Fri 24 Jul 2026 00:01:23 +0000
Manifest next update: Sat 25 Jul 2026 00:01:23 +0000
Files and hashes: 1: 0eAT7IpcVt8kGpslY9ER-OVDv5E.crl (hash: /wmieL4bx5kYO7m8Aa4va35i3Cw7XyncvWYKJk/Be3g=)
2: HJaqxqktn6jSURWfLmaFrTGw4k0.roa (hash: nCPkWfg8fjBLOL82SkTcjqLkB+FTPueLRpgWHpz5rHo=)
3: X8qnUQA1qg1cnkzl8QaDSyMhQm4.roa (hash: 0vr+LOr1h8ehAYfiW23NLACGpkor4jsJll80Z2l7cCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:3f:09:dd:fe:47:a9:af:32:c9:cb:c1:3c:ff:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Validity
Not Before: Jul 24 00:01:23 2026 GMT
Not After : Jul 25 00:01:23 2026 GMT
Subject: CN=628d13350e56e53d1094ad23fe2eda63e6bc18f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:54:b6:a3:39:14:89:d5:a6:36:54:0c:b7:3c:
10:a1:e6:51:83:fd:19:eb:6e:48:d0:3d:b2:92:a7:
ca:8f:e4:fe:57:d5:85:56:e7:c8:dc:b7:c2:15:2b:
2e:cb:c0:46:d6:7c:1e:81:0b:a4:b7:95:4d:66:01:
af:2e:ad:f4:7f:2d:0b:bc:65:73:98:5b:90:2e:84:
09:36:50:b4:be:33:95:93:a6:f7:fa:3e:dd:4c:b5:
eb:fb:6a:41:a4:86:46:51:f2:8e:87:2f:86:44:5d:
fd:80:8c:f9:e9:0c:ae:a6:71:3e:c9:80:c0:fb:ba:
2b:0e:cf:72:5c:f2:11:a3:e2:e5:e8:99:ad:72:15:
90:04:1d:cb:86:1f:57:e0:cc:3a:f8:f2:11:e5:1a:
fd:c9:5c:5c:89:b3:a1:7d:29:bb:42:9f:f9:a9:a3:
07:b8:d9:20:a7:30:11:47:70:2a:8b:ad:23:fa:42:
49:90:c9:8a:0a:e4:85:3a:97:a9:1f:f4:5e:19:a8:
51:c9:e8:5b:3b:ce:1d:99:c9:37:f4:de:b3:ad:87:
38:f6:2a:13:82:44:c8:d1:bc:da:9a:59:07:78:5d:
a4:d4:ce:21:ef:56:a0:2b:b9:13:ae:44:3b:4f:93:
7c:bd:cd:41:e8:cf:d9:21:64:fb:1c:5e:32:52:ec:
c2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:8D:13:35:0E:56:E5:3D:10:94:AD:23:FE:2E:DA:63:E6:BC:18:F8
X509v3 Authority Key Identifier:
keyid:D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f8:9b:e1:a5:06:6a:3d:ac:6a:f0:cf:c8:b4:1b:8e:b7:7a:
ba:d2:1c:77:d6:e5:53:22:46:08:0e:10:a1:9b:a1:a2:4d:7a:
ca:ee:ff:f0:62:db:a7:d0:65:f7:d5:01:74:21:43:9b:19:c7:
7b:e6:da:ee:67:aa:af:e3:4a:8d:a7:76:11:a5:6b:24:2b:9c:
24:c4:9b:26:9d:59:f0:06:03:ad:38:29:3b:8e:61:e4:41:cc:
02:7e:d0:c1:f3:19:f6:a2:65:20:67:a6:7d:92:4c:b2:dc:d1:
2b:a7:a4:5d:bb:9e:b6:07:37:e6:09:21:7b:4c:07:85:71:5b:
49:2f:d0:00:5a:9a:de:a3:d5:cf:24:f0:b0:20:b8:23:be:73:
70:e2:7a:b6:25:22:24:cf:06:6f:5d:09:83:73:c8:e9:25:e9:
f6:3d:79:59:d3:a7:9f:d3:ab:f0:5f:1e:2b:52:42:d6:b0:0a:
07:ef:00:a6:5a:20:5c:91:01:5a:66:86:54:c8:b9:dc:3b:53:
1c:fe:93:e3:4f:cc:68:f0:28:af:ad:38:86:06:6f:d1:30:c0:
99:81:67:5a:8f:bc:dd:4c:6b:65:3f:bf:46:47:57:a7:ee:05:
5e:b6:c0:07:ed:2a:26:da:d4:9f:ab:77:d0:0a:6c:fc:95:79:
6e:73:e1:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbT8J3f5Hqa8yycvBPP8VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZTAxM2VjOGE1YzU2ZGYyNDFhOWIyNTYzZDExMWY4ZTU0
M2JmOTEwHhcNMjYwNzI0MDAwMTIzWhcNMjYwNzI1MDAwMTIzWjAzMTEwLwYDVQQD
Eyg2MjhkMTMzNTBlNTZlNTNkMTA5NGFkMjNmZTJlZGE2M2U2YmMxOGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FS2ozkUidWmNlQMtzwQoeZRg/0Z
625I0D2ykqfKj+T+V9WFVufI3LfCFSsuy8BG1nwegQukt5VNZgGvLq30fy0LvGVz
mFuQLoQJNlC0vjOVk6b3+j7dTLXr+2pBpIZGUfKOhy+GRF39gIz56QyupnE+yYDA
+7orDs9yXPIRo+Ll6JmtchWQBB3Lhh9X4Mw6+PIR5Rr9yVxcibOhfSm7Qp/5qaMH
uNkgpzARR3Aqi60j+kJJkMmKCuSFOpepH/ReGahRyehbO84dmck39N6zrYc49ioT
gkTI0bzamlkHeF2k1M4h71agK7kTrkQ7T5N8vc1B6M/ZIWT7HF4yUuzCNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKNEzUOVuU9EJStI/4u2mPmvBj4MB8GA1UdIwQY
MBaAFNHgE+yKXFbfJBqbJWPREfjlQ7+RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGVBVDdJcGNWdDhrR3BzbFk5RVItT1ZEdjVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9lNDFlZjQtZGMxZS00NDY5LWJkMmQt
NDQwNTI4YzFlNDllLzEvMGVBVDdJcGNWdDhrR3BzbFk5RVItT1ZEdjVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9lNDFlZjQtZGMxZS00NDY5LWJkMmQtNDQwNTI4YzFlNDll
LzEvMGVBVDdJcGNWdDhrR3BzbFk5RVItT1ZEdjVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV/ib4aUG
aj2savDPyLQbjrd6utIcd9blUyJGCA4QoZuhok16yu7/8GLbp9Bl99UBdCFDmxnH
e+ba7meqr+NKjad2EaVrJCucJMSbJp1Z8AYDrTgpO45h5EHMAn7QwfMZ9qJlIGem
fZJMstzRK6ekXbuetgc35gkhe0wHhXFbSS/QAFqa3qPVzyTwsCC4I75zcOJ6tiUi
JM8Gb10Jg3PI6SXp9j15WdOnn9Or8F8eK1JC1rAKB+8AplogXJEBWmaGVMi53DtT
HP6T40/MaPAor604hgZv0TDAmYFnWo+83UxrZT+/RkdXp+4FXrbAB+0qJtrUn6t3
0Aps/JV5bnPhEw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:33:31 2026 by rpki-client