Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
File: 0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft (raw, json)
Hash identifier: NsmsVlpKqc6CNVUCVn7pH3yEjiJh+BmFTZtVQP3EKLU=
Subject key identifier: F7:F7:87:B4:E2:62:35:94:BD:59:89:C5:FB:7E:5A:00:B3:DD:F4:BC
Authority key identifier: D0:48:50:F8:06:9D:F6:2D:C5:15:5C:02:ED:1E:62:BF:51:CE:DB:C8
Certificate issuer: /CN=d04850f8069df62dc5155c02ed1e62bf51cedbc8
Certificate serial: 019F905A9FBD5D0FB3AE0BEF6ABD47307346
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
Manifest number: 064B
Signing time: Thu 23 Jul 2026 19:01:25 +0000
Manifest this update: Thu 23 Jul 2026 19:01:25 +0000
Manifest next update: Fri 24 Jul 2026 19:01:25 +0000
Files and hashes: 1: 0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl (hash: LeGm0w2C7KjXqVy7woIDOKoESJjXDE2J1FhsUYE+LyU=)
2: v795sY2U8jhvRzL8MVmYlvFz9_s.roa (hash: Hn47sYXDYoB/4A+t0th2lMVq06CbmCPSmHDsJlsUcW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:9f:bd:5d:0f:b3:ae:0b:ef:6a:bd:47:30:73:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04850f8069df62dc5155c02ed1e62bf51cedbc8
Validity
Not Before: Jul 23 19:01:25 2026 GMT
Not After : Jul 24 19:01:25 2026 GMT
Subject: CN=f7f787b4e2623594bd5989c5fb7e5a00b3ddf4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:28:10:3f:0c:95:06:97:7d:de:34:6a:16:1e:
b4:26:6c:bc:bb:8e:5f:ce:eb:ae:0c:d7:5e:97:b2:
b5:84:f0:81:2c:a6:83:7f:59:ac:50:c9:2d:e5:a8:
8a:f7:24:e5:1b:7a:5f:73:a8:be:f2:82:47:fd:d0:
6c:d2:de:17:b6:86:00:50:04:a1:3d:a6:5f:1b:48:
c0:3f:27:49:92:e6:15:4c:48:ac:0b:76:f4:95:0c:
d1:04:63:2d:d2:09:22:ec:5b:f6:56:a0:ab:40:de:
fd:38:e4:3a:5a:b1:03:6e:cc:d6:17:64:ac:cd:88:
4e:75:14:a6:48:37:c6:80:8b:7a:1e:e7:ee:0c:97:
c1:15:3b:1c:34:7a:e2:f9:f8:f2:61:64:aa:fa:2d:
70:30:21:b4:e6:1b:f6:d6:0d:c2:79:7f:9b:ec:f6:
d2:b9:1b:b9:af:6a:b5:cd:22:33:2e:24:96:5d:8b:
11:50:fe:84:47:22:4c:9d:8c:d9:13:e6:ed:7f:ac:
37:2b:d3:66:88:fb:18:d4:c8:9f:a9:b8:2a:ec:b2:
bf:58:43:5d:10:fd:67:26:5c:6c:58:8b:98:e5:69:
28:80:63:5f:50:f4:1a:1b:43:aa:c1:05:7a:16:07:
28:8e:d3:c4:20:b9:8a:37:3f:f5:29:0c:ab:36:df:
d8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F7:87:B4:E2:62:35:94:BD:59:89:C5:FB:7E:5A:00:B3:DD:F4:BC
X509v3 Authority Key Identifier:
keyid:D0:48:50:F8:06:9D:F6:2D:C5:15:5C:02:ED:1E:62:BF:51:CE:DB:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:9c:4a:8b:d7:fd:16:e5:e8:47:9e:a0:59:38:a1:04:8c:3b:
26:ef:b3:e6:ff:4a:0b:1c:f1:07:18:a8:6a:8e:54:03:0d:70:
80:44:94:f8:d4:7b:7b:36:af:77:49:bf:68:47:46:30:4f:0f:
ca:32:db:d1:73:76:fe:cc:ce:98:b1:d8:45:9b:a2:15:69:19:
b8:4a:1a:e6:bf:20:f0:68:8e:76:7b:1e:91:f6:2e:e7:a1:cc:
b9:5d:36:08:48:65:6e:52:6f:b5:fc:00:6d:29:5b:68:23:0a:
0a:4e:97:f4:a6:80:14:4d:47:b6:e6:75:86:ba:fe:9b:c1:4c:
9f:da:57:a0:a4:9c:67:e1:a5:61:91:cd:1c:a1:a0:ad:13:18:
20:52:ce:ca:cd:25:2e:e9:7c:35:9b:10:c8:c5:28:91:9f:00:
de:a0:a4:74:47:df:a3:e2:4d:40:f5:85:88:d7:2d:ab:51:85:
46:53:51:e4:cb:c4:8a:01:29:fb:e2:be:84:e2:de:78:f8:94:
e5:15:fb:02:d9:de:9e:ce:0d:42:d8:fd:ac:09:ea:d5:ce:64:
33:4b:19:35:75:e7:8f:40:46:bd:5e:9e:c9:11:c8:12:1c:c4:
f6:53:60:a1:cf:ea:a3:8f:3b:76:5e:b9:bd:31:d3:3a:cb:cb:
6e:ea:6d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:39:22 2026 by rpki-client