Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
File: 0mHPvAfsMGN33LFql6EWDHptgsw.mft (raw, json)
Hash identifier: vgQnA+SpBPjPn/bq2AEo1SZJJb+vCyUik9NBDp7At5Y=
Subject key identifier: 77:43:54:AA:A8:B4:B8:64:A8:48:79:E5:57:21:C9:73:2B:1E:69:C0
Authority key identifier: D2:61:CF:BC:07:EC:30:63:77:DC:B1:6A:97:A1:16:0C:7A:6D:82:CC
Certificate issuer: /CN=d261cfbc07ec306377dcb16a97a1160c7a6d82cc
Certificate serial: 019F8FEC2BD418DCA238AA10AEAAFB2DF6E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
Manifest number: 0607
Signing time: Thu 23 Jul 2026 17:00:47 +0000
Manifest this update: Thu 23 Jul 2026 17:00:47 +0000
Manifest next update: Fri 24 Jul 2026 17:00:47 +0000
Files and hashes: 1: 0mHPvAfsMGN33LFql6EWDHptgsw.crl (hash: tEbJANtfo3ABlRA9LFSu9Rj51NQK9LCBpweU0ommWa0=)
2: p0fL_-s25OijH9UglPLyGf3hQ3k.roa (hash: sp4Y+8h1IocJtG1a3SfrXHCpPOK9+n80lPdEb2+Nl4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:2b:d4:18:dc:a2:38:aa:10:ae:aa:fb:2d:f6:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d261cfbc07ec306377dcb16a97a1160c7a6d82cc
Validity
Not Before: Jul 23 17:00:47 2026 GMT
Not After : Jul 24 17:00:47 2026 GMT
Subject: CN=774354aaa8b4b864a84879e55721c9732b1e69c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c1:1e:fc:b9:81:f3:b2:99:74:60:d6:fd:ff:
6a:d2:ff:4b:f1:35:f6:e0:7c:1b:32:a8:51:86:c1:
a6:49:35:d1:c7:8d:2d:ca:74:87:04:42:e1:ba:4c:
22:95:5a:dc:b6:9d:f7:1f:d9:1b:fa:c5:55:8e:9e:
50:7e:2f:7c:39:a1:60:48:f3:ad:85:0a:9b:77:6c:
19:8d:a2:14:36:33:22:68:1c:d8:4e:3f:64:89:ac:
36:33:88:1a:05:59:78:57:c6:96:ae:aa:85:39:8a:
0d:82:fa:53:65:0a:bb:b5:83:5a:e1:70:1a:d3:15:
46:3e:d1:d3:2a:1e:3a:aa:9b:a7:0b:19:3e:e1:04:
e6:41:90:87:e9:15:4c:e7:24:7f:4f:f1:f8:01:b4:
76:f8:cd:47:59:90:13:d5:8e:c6:f4:e9:a5:9e:c1:
28:fb:de:4b:ee:6d:3f:71:05:0c:af:41:c7:99:bb:
32:00:4c:35:26:7e:33:2a:01:96:ea:ff:20:ff:97:
31:05:1c:39:2b:74:29:63:92:27:de:1c:3a:f9:41:
f9:0a:7c:8e:49:e1:32:a7:ab:de:a5:fd:f1:9b:f3:
b1:98:45:7c:a4:c8:b4:f2:8a:c8:30:3e:5a:36:b7:
cf:4b:dd:06:2d:fc:f8:3f:42:63:ed:88:fa:d0:d9:
a8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:43:54:AA:A8:B4:B8:64:A8:48:79:E5:57:21:C9:73:2B:1E:69:C0
X509v3 Authority Key Identifier:
keyid:D2:61:CF:BC:07:EC:30:63:77:DC:B1:6A:97:A1:16:0C:7A:6D:82:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ca:a4:93:61:1b:45:f2:c4:5f:24:b5:2c:c7:a9:80:e0:4c:
21:8c:b1:06:52:0b:4f:7f:18:d9:f7:3e:f6:96:77:8c:49:e0:
de:55:67:d2:c9:a3:33:d4:7d:e3:4d:7b:66:36:f1:46:0d:c8:
aa:59:3d:09:ea:ad:de:5b:63:b4:cc:09:52:dd:19:44:24:3a:
2d:fc:28:4e:1d:ea:6a:f6:f1:53:9a:da:a7:a0:7a:62:4b:fa:
fa:d1:ea:64:ba:85:e5:7f:ce:ae:a9:23:da:3d:df:4c:f3:f7:
21:85:f7:e0:36:36:b5:5f:2e:a6:8d:2a:cd:4d:1c:f2:5f:5d:
99:e2:38:37:a8:3d:cb:42:42:1b:a7:a9:48:3c:d7:63:89:f8:
be:00:50:f1:61:ae:78:e1:16:c3:a8:2d:54:ec:33:b8:5e:b0:
b5:7a:f9:bb:09:e3:37:95:4a:6a:a2:61:2d:cf:40:97:5c:dc:
08:2c:74:52:85:71:4e:fa:b1:54:4b:62:2f:ca:bb:5c:11:d0:
9f:82:53:2a:7e:5b:68:1d:fd:d8:8e:fb:64:0a:08:be:7b:77:
9b:23:0a:eb:35:fc:ff:57:93:51:61:0e:0d:2a:33:40:fa:a8:
3e:17:b0:b8:be:08:97:da:01:f5:a1:24:4d:e6:da:10:ec:d7:
51:ab:2b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:36:13 2026 by rpki-client