Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
File: 0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft (raw, json)
Hash identifier: 8JZbFgmn7oqGsR3mohVBgH+H5Ov5NXQF43buYx24Zck=
Subject key identifier: CC:2A:70:4B:7B:D7:CD:57:3B:28:E0:98:D8:F9:51:77:72:AD:B8:B6
Authority key identifier: D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9
Certificate issuer: /CN=d29dc792adfcfe88c79e7958fbfec525630b62f9
Certificate serial: 019F17F922CC19141DF8D1BD561056E8AF12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
Manifest number: 0D8C
Signing time: Tue 30 Jun 2026 10:00:31 +0000
Manifest this update: Tue 30 Jun 2026 10:00:31 +0000
Manifest next update: Wed 01 Jul 2026 10:00:31 +0000
Files and hashes: 1: 0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl (hash: FOHj5zcXGXCGEMK7mult8L4qa+cuHOvibPHsFnfGyHQ=)
2: 1KnU7H_UVe-XpNapFYFQEn0LJJQ.roa (hash: cUtUMg5M4fjhGoVm34BuVn+17rIs5yEOOCki02p10ww=)
3: j5hpz0Ky4wyZsfB5ISUjvlPvrQ8.roa (hash: eXsNvI5c0yl1gppo8mH8F57qlB2x5VSSClL68a+AJ/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:22:cc:19:14:1d:f8:d1:bd:56:10:56:e8:af:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d29dc792adfcfe88c79e7958fbfec525630b62f9
Validity
Not Before: Jun 30 10:00:31 2026 GMT
Not After : Jul 1 10:00:31 2026 GMT
Subject: CN=cc2a704b7bd7cd573b28e098d8f9517772adb8b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:96:18:0a:b6:65:24:77:07:45:16:de:e9:f5:
d7:e5:91:92:4e:ef:a4:09:5a:e0:9b:3f:e6:04:c5:
68:e7:8a:0d:61:23:b3:5f:e7:7e:bf:f4:91:01:02:
ff:93:8b:a1:d2:c4:1c:d3:e2:c2:5a:c2:28:83:30:
0b:c3:5d:59:b5:0e:86:4f:87:d5:6e:bd:6a:19:1a:
e1:98:2b:01:2e:bd:b9:f9:19:c7:6d:20:08:e8:0f:
99:4c:6c:6d:fb:2c:2a:69:92:d3:bb:4a:8b:35:c1:
f2:23:e7:38:c1:3d:c5:a9:65:e5:7b:b8:36:56:1d:
6e:84:b6:77:5c:78:39:37:c1:90:40:f1:44:aa:78:
97:62:47:54:d6:12:59:d9:2d:cd:f1:03:cb:70:4b:
bb:e6:b0:9b:51:27:0f:c6:0c:5a:5b:3d:92:a1:3f:
1b:5f:5d:a8:41:fd:32:e6:94:2c:cd:21:df:2b:b6:
f0:10:9b:d4:d6:5d:0b:34:2a:15:de:86:4a:85:d6:
04:38:49:ea:7c:00:65:04:5f:69:36:ad:b8:2e:5b:
84:61:d7:81:19:62:cc:5c:3c:e1:55:6d:4b:51:79:
38:bd:87:ea:50:94:18:3f:a3:1d:21:67:86:a6:e8:
34:31:b9:4b:d1:b7:15:7a:bd:7d:85:89:96:8a:9d:
81:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2A:70:4B:7B:D7:CD:57:3B:28:E0:98:D8:F9:51:77:72:AD:B8:B6
X509v3 Authority Key Identifier:
keyid:D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:2a:6b:97:be:9b:5c:93:e2:1c:c6:48:02:00:b1:3d:9e:36:
bd:df:9b:28:8f:84:8f:aa:41:26:91:10:08:02:c5:91:98:57:
85:70:f3:bb:1e:85:0b:53:65:5f:02:09:be:e1:d2:f9:6e:db:
f5:b7:7e:fe:68:74:91:d7:7d:d6:27:9a:51:b7:e1:c2:5d:c5:
ac:b6:ff:7d:73:4d:25:2a:9f:a3:3e:43:0e:d2:c4:42:e4:13:
59:0a:7e:59:2f:5a:27:a2:b2:70:57:6a:18:73:3e:6a:25:fd:
ff:9d:5b:e6:9f:1b:a1:d5:b5:d3:f2:81:2e:4e:70:a4:b4:73:
cb:e2:2d:bc:18:46:8f:b5:92:65:d4:54:75:76:fc:b2:8c:6e:
98:e0:1f:88:e7:88:00:aa:32:f9:47:88:aa:14:13:47:8b:1e:
0e:a0:a9:9d:35:c4:2e:83:5e:20:b9:58:17:7c:e4:86:81:8f:
18:df:ce:97:99:01:a7:47:6d:ac:17:24:ba:61:3b:73:80:a4:
9c:94:84:1b:f0:8d:69:b0:3c:0f:ec:33:8d:49:e6:6a:8b:a5:
f8:95:7b:06:86:bc:a9:66:d8:1e:4d:29:0a:d8:8f:63:c3:20:
7b:49:5f:38:fc:d9:55:0a:d0:6c:a4:e0:11:93:64:d0:21:94:
1c:cb:ab:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8X+SLMGRQd+NG9VhBW6K8SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyOWRjNzkyYWRmY2ZlODhjNzllNzk1OGZiZmVjNTI1NjMw
YjYyZjkwHhcNMjYwNjMwMTAwMDMxWhcNMjYwNzAxMTAwMDMxWjAzMTEwLwYDVQQD
EyhjYzJhNzA0YjdiZDdjZDU3M2IyOGUwOThkOGY5NTE3NzcyYWRiOGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZYYCrZlJHcHRRbe6fXX5ZGSTu+k
CVrgmz/mBMVo54oNYSOzX+d+v/SRAQL/k4uh0sQc0+LCWsIogzALw11ZtQ6GT4fV
br1qGRrhmCsBLr25+RnHbSAI6A+ZTGxt+ywqaZLTu0qLNcHyI+c4wT3FqWXle7g2
Vh1uhLZ3XHg5N8GQQPFEqniXYkdU1hJZ2S3N8QPLcEu75rCbUScPxgxaWz2SoT8b
X12oQf0y5pQszSHfK7bwEJvU1l0LNCoV3oZKhdYEOEnqfABlBF9pNq24LluEYdeB
GWLMXDzhVW1LUXk4vYfqUJQYP6MdIWeGpug0MblL0bcVer19hYmWip2BWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwqcEt7181XOyjgmNj5UXdyrbi2MB8GA1UdIwQY
MBaAFNKdx5Kt/P6Ix555WPv+xSVjC2L5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHAzSGtxMzhfb2pIbm5sWS1fN0ZKV01MWXZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kOGY4Y2YtMTg4YS00YmQwLThkYmEt
NDFlN2ZiYTZkNmUxLzEvMHAzSGtxMzhfb2pIbm5sWS1fN0ZKV01MWXZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kOGY4Y2YtMTg4YS00YmQwLThkYmEtNDFlN2ZiYTZkNmUx
LzEvMHAzSGtxMzhfb2pIbm5sWS1fN0ZKV01MWXZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMyprl76b
XJPiHMZIAgCxPZ42vd+bKI+Ej6pBJpEQCALFkZhXhXDzux6FC1NlXwIJvuHS+W7b
9bd+/mh0kdd91ieaUbfhwl3FrLb/fXNNJSqfoz5DDtLEQuQTWQp+WS9aJ6KycFdq
GHM+aiX9/51b5p8bodW10/KBLk5wpLRzy+ItvBhGj7WSZdRUdXb8soxumOAfiOeI
AKoy+UeIqhQTR4seDqCpnTXELoNeILlYF3zkhoGPGN/Ol5kBp0dtrBckumE7c4Ck
nJSEG/CNabA8D+wzjUnmaoul+JV7Boa8qWbYHk0pCtiPY8Mge0lfOPzZVQrQbKTg
EZNk0CGUHMur8w==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:02 2026 by rpki-client