Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
File: 0vHIhC58-JGyNNOh4OLg73PoQqo.mft (raw, json)
Hash identifier: /BTfQvGK+Rgoa1wM4gDgz064ZHHttb4j9dV1wSDLOC4=
Subject key identifier: 17:60:84:46:01:6B:30:8D:E1:C4:75:80:B3:58:38:31:FB:8A:5E:24
Authority key identifier: D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
Certificate issuer: /CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Certificate serial: 01A001A66283CB3188A639485016EFD1489F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
Manifest number: 1A03
Signing time: Fri 14 Aug 2026 19:01:16 +0000
Manifest this update: Fri 14 Aug 2026 19:01:16 +0000
Manifest next update: Sat 15 Aug 2026 19:01:16 +0000
Files and hashes: 1: 0vHIhC58-JGyNNOh4OLg73PoQqo.crl (hash: w3/G1JCywT/p/8NZ9kqyCWGamuS2R3MODz74LILsjns=)
2: l9fT_tPQilc8kDDpXdmC63EbBTU.roa (hash: e0hhcAS9+zmOEL/7aF5yJ1rOw5m87GlUo2fUEzHI/tc=)
3: zZqdbpX91TjBbrVKBU--OsfsNgs.roa (hash: 5bqwY0fuE7qADoXdmI9CeMVMqqLQteAK+rBOtRg2eMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:62:83:cb:31:88:a6:39:48:50:16:ef:d1:48:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Validity
Not Before: Aug 14 19:01:16 2026 GMT
Not After : Aug 15 19:01:16 2026 GMT
Subject: CN=17608446016b308de1c47580b3583831fb8a5e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f9:7f:f0:bd:f4:ed:75:89:72:20:80:db:79:
f2:6f:60:52:64:c5:22:ec:d6:7c:44:a2:b3:00:c7:
e0:08:bd:d8:54:51:f3:03:84:12:7f:1b:59:51:cb:
46:55:5d:f0:1e:0d:f9:70:35:6f:6a:e7:a0:1d:10:
4a:0a:7b:3b:e9:8a:ed:28:6d:b2:29:19:4c:54:5f:
0b:14:63:06:b5:53:57:e5:c0:76:2c:8c:2b:46:11:
3d:31:93:1f:1e:a0:af:01:e3:78:3d:5d:1a:95:64:
95:fd:eb:1a:b1:00:86:e6:2b:d4:78:f9:0f:5c:20:
b2:06:8e:1a:2b:cd:3d:fe:fc:14:ef:6e:3b:81:f3:
f5:9f:3a:1e:af:ee:62:46:44:cb:75:04:fe:28:99:
5e:de:84:64:ff:e9:cf:3e:da:08:95:bd:46:12:75:
06:73:3e:93:ac:69:23:f2:06:01:f9:0a:78:91:ca:
18:ad:bf:50:2a:6b:05:17:c4:6b:60:55:ac:79:4f:
d2:20:e2:0c:74:95:bc:44:5f:6a:27:87:37:a4:40:
11:29:2c:58:e1:96:65:62:97:02:a5:7f:b0:ec:d2:
dd:59:10:1c:dc:66:c4:f9:6f:ac:09:69:f5:1c:a1:
03:0e:6f:45:0d:9d:7f:71:7d:7c:43:69:c4:ba:12:
02:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:60:84:46:01:6B:30:8D:E1:C4:75:80:B3:58:38:31:FB:8A:5E:24
X509v3 Authority Key Identifier:
keyid:D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:aa:68:36:a1:e4:6e:66:e2:11:92:c5:e9:2f:37:92:a1:1b:
4f:d2:ab:65:43:33:de:07:05:ef:ea:8b:f8:dc:99:9c:a7:d8:
98:a0:b1:5d:35:c4:08:fc:50:21:9f:4e:7f:69:a1:1b:85:25:
94:15:9c:c5:ab:3d:74:12:cb:05:cd:e8:c0:79:a8:41:6b:6b:
1c:f7:f5:ff:b8:73:4b:a6:8d:02:c7:a3:78:48:c4:a6:a1:12:
9d:66:b8:f9:e0:3f:65:31:c0:fa:f0:ef:e5:b8:1b:28:a0:72:
7c:8b:6b:f3:da:e9:0e:8f:0b:08:9f:cd:d4:6f:6d:87:0b:df:
6d:b3:50:f8:4e:fb:3e:24:69:27:a3:72:ae:de:87:17:85:45:
17:e6:a3:de:48:2b:e0:44:1e:42:ff:b6:9e:cb:b8:12:5b:2d:
80:6c:fc:24:ed:db:e2:28:f8:a0:97:b0:2b:2d:f5:da:97:f2:
c2:25:ab:f6:45:4d:37:75:6a:2a:d0:24:b8:b5:04:4e:58:6d:
01:e9:55:5c:a3:12:4b:9d:21:9b:bf:9a:72:19:f8:91:89:03:
b7:77:9e:ce:c3:8f:52:f2:f0:72:6b:91:c0:93:8f:6b:78:a1:
10:6c:67:20:28:64:c7:15:f3:69:2d:fd:ba:3f:18:87:0b:06:
4a:b2:a4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:38 2026 by rpki-client