Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
File: 0nuHf4mTQSab7GfG46CoiLp66Y0.mft (raw, json)
Hash identifier: 7FXcfD1bOx3kc405qKphp9f99IdMBBCB08WdTAT9/sU=
Subject key identifier: 8E:9D:01:41:D6:AE:F8:15:D1:C5:05:BB:13:9F:0D:62:1E:6A:58:3B
Authority key identifier: D2:7B:87:7F:89:93:41:26:9B:EC:67:C6:E3:A0:A8:88:BA:7A:E9:8D
Certificate issuer: /CN=d27b877f899341269bec67c6e3a0a888ba7ae98d
Certificate serial: 019F8456291DEA5BCC16A0447CE2E6A51717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
Manifest number: 0DC5
Signing time: Tue 21 Jul 2026 11:01:06 +0000
Manifest this update: Tue 21 Jul 2026 11:01:06 +0000
Manifest next update: Wed 22 Jul 2026 11:01:06 +0000
Files and hashes: 1: 0nuHf4mTQSab7GfG46CoiLp66Y0.crl (hash: tOJkReDNF8UfTj7JWNPtNJnWIn8++N48qOu8GILDGtM=)
2: ESKSicApbc_Lc7K1oxfrHyvWB2A.roa (hash: 9hp563pGKax4wS0ioE86wmQq8LK8c0yOcQLKfH9tKgk=)
3: GzzDQC3ubi3zt1X18DBGioGRdBc.roa (hash: D/wNKKfIUY9J0S4B/WgJwAFtRjUwUsHpDQtQvyp4Lvk=)
4: a8xxFezDGCmHsEOSRqb1XFyjzzQ.roa (hash: UKvCG+Ut498aH2KrK/T04+U4clxpUw2ygew8dg+YGZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 11:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:56:29:1d:ea:5b:cc:16:a0:44:7c:e2:e6:a5:17:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d27b877f899341269bec67c6e3a0a888ba7ae98d
Validity
Not Before: Jul 21 11:01:06 2026 GMT
Not After : Jul 22 11:01:06 2026 GMT
Subject: CN=8e9d0141d6aef815d1c505bb139f0d621e6a583b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cb:3f:ba:14:67:d1:2c:7a:a2:bf:de:62:f4:
01:ea:67:d2:6a:cb:00:c2:2d:d6:4e:2f:ff:ed:d3:
fa:a5:a1:88:54:ff:c3:f0:03:5d:39:0b:85:a8:e2:
90:f4:4f:b1:ac:48:56:a4:1d:a6:bf:e7:02:ff:5c:
02:eb:42:77:b7:cc:57:68:41:3f:ed:49:00:99:40:
54:65:31:fa:9a:6a:7c:a9:b6:9c:11:bb:42:b3:da:
50:ee:5d:83:42:e4:ab:fb:50:39:d2:7d:3b:dc:58:
79:e0:01:4c:4f:7c:44:82:90:38:d7:ce:58:4a:01:
c9:bc:f2:9c:8f:4f:5d:8b:e9:2d:33:57:ea:ee:37:
c4:43:94:bd:52:9a:54:8f:1f:2c:3a:09:5a:6c:b1:
fe:ca:fc:c5:ef:fd:b8:bb:23:f5:0d:b1:7f:5c:9c:
42:d7:5c:7f:63:f4:8f:c8:45:70:10:b2:3c:ab:a7:
76:c7:49:1c:d6:20:2e:60:bb:12:7e:56:37:df:95:
f8:aa:cb:e2:c1:85:a8:3a:c4:3d:89:6c:d6:03:bc:
d9:7a:f2:65:1f:1f:40:36:23:76:4a:ed:d1:54:c4:
42:3e:8e:f7:cb:d5:e5:f5:a9:b7:32:83:23:60:e5:
d1:71:90:d6:1a:7e:50:e9:27:2f:72:f6:d6:32:84:
14:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9D:01:41:D6:AE:F8:15:D1:C5:05:BB:13:9F:0D:62:1E:6A:58:3B
X509v3 Authority Key Identifier:
keyid:D2:7B:87:7F:89:93:41:26:9B:EC:67:C6:E3:A0:A8:88:BA:7A:E9:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:77:ec:5c:00:3b:65:2c:7b:b6:9c:d0:15:e3:b8:0b:d1:23:
23:9e:e5:72:63:b5:92:af:e5:05:32:f4:4a:6e:bb:50:a5:70:
4c:13:07:f3:ed:24:ee:4c:55:55:81:d3:60:2c:8d:25:1b:2b:
c1:85:6c:eb:42:16:d1:51:51:aa:40:c6:0a:94:f1:5c:cb:68:
34:a9:ee:72:e1:ef:e4:d6:9b:e7:5c:fb:e2:8d:2c:38:06:a1:
e8:fe:a0:38:b5:ae:9c:fe:24:aa:48:e6:cb:c2:70:e6:c0:94:
a8:0b:aa:a7:36:a4:cf:7c:35:36:9c:ca:a9:29:d9:d3:a2:14:
d1:05:4f:00:c2:7b:fe:99:44:87:43:6d:b0:02:0a:7f:d0:af:
9f:b0:e5:c6:92:a3:77:b0:e9:07:61:55:7e:61:96:54:8b:b0:
57:d6:72:55:18:80:e8:a0:65:d2:28:5a:c6:2f:60:50:38:62:
dc:4a:1a:e5:51:27:2a:65:5a:14:52:9a:d1:60:7f:04:c9:29:
1f:77:63:6d:e9:9f:ab:2b:9b:fb:e0:17:71:3a:8a:53:0c:8e:
bf:96:0b:54:12:82:84:8a:7b:00:4e:6e:56:d4:02:1f:4d:a2:
64:48:54:e2:65:61:da:72:33:0e:15:c8:d3:ea:08:7a:01:c2:
55:2e:12:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+EVikd6lvMFqBEfOLmpRcXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyN2I4NzdmODk5MzQxMjY5YmVjNjdjNmUzYTBhODg4YmE3
YWU5OGQwHhcNMjYwNzIxMTEwMTA2WhcNMjYwNzIyMTEwMTA2WjAzMTEwLwYDVQQD
Eyg4ZTlkMDE0MWQ2YWVmODE1ZDFjNTA1YmIxMzlmMGQ2MjFlNmE1ODNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycs/uhRn0Sx6or/eYvQB6mfSassA
wi3WTi//7dP6paGIVP/D8ANdOQuFqOKQ9E+xrEhWpB2mv+cC/1wC60J3t8xXaEE/
7UkAmUBUZTH6mmp8qbacEbtCs9pQ7l2DQuSr+1A50n073Fh54AFMT3xEgpA4185Y
SgHJvPKcj09di+ktM1fq7jfEQ5S9UppUjx8sOglabLH+yvzF7/24uyP1DbF/XJxC
11x/Y/SPyEVwELI8q6d2x0kc1iAuYLsSflY335X4qsviwYWoOsQ9iWzWA7zZevJl
Hx9ANiN2Su3RVMRCPo73y9Xl9am3MoMjYOXRcZDWGn5Q6ScvcvbWMoQUuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6dAUHWrvgV0cUFuxOfDWIealg7MB8GA1UdIwQY
MBaAFNJ7h3+Jk0Emm+xnxuOgqIi6eumNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG51SGY0bVRRU2FiN0dmRzQ2Q29pTHA2NlkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80NDVlZDAtNDhiMy00MDhlLWExYmMt
OTk3OWRmNTJiMDE4LzEvMG51SGY0bVRRU2FiN0dmRzQ2Q29pTHA2NlkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS80NDVlZDAtNDhiMy00MDhlLWExYmMtOTk3OWRmNTJiMDE4
LzEvMG51SGY0bVRRU2FiN0dmRzQ2Q29pTHA2NlkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcHfsXAA7
ZSx7tpzQFeO4C9EjI57lcmO1kq/lBTL0Sm67UKVwTBMH8+0k7kxVVYHTYCyNJRsr
wYVs60IW0VFRqkDGCpTxXMtoNKnucuHv5Nab51z74o0sOAah6P6gOLWunP4kqkjm
y8Jw5sCUqAuqpzakz3w1NpzKqSnZ06IU0QVPAMJ7/plEh0NtsAIKf9Cvn7DlxpKj
d7DpB2FVfmGWVIuwV9ZyVRiA6KBl0ihaxi9gUDhi3Eoa5VEnKmVaFFKa0WB/BMkp
H3djbemfqyub++AXcTqKUwyOv5YLVBKChIp7AE5uVtQCH02iZEhU4mVh2nIzDhXI
0+oIegHCVS4SWg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:07:04 2026 by rpki-client