Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
File: 0mpECeqR9QbWM4ccbDVUDUYDN9E.mft (raw, json)
Hash identifier: c4cWs6XsCp3qEGIMvIibp65d/l3+fAOhM4Lj3j05QNM=
Subject key identifier: 94:86:DC:37:F5:78:7C:FE:34:28:1B:05:26:D1:C2:1B:81:59:41:30
Authority key identifier: D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1
Certificate issuer: /CN=d26a4409ea91f506d633871c6c35540d460337d1
Certificate serial: 019F9F5FCC4817A069595C1A157CE1CC1BB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
Manifest number: 11AF
Signing time: Sun 26 Jul 2026 17:01:23 +0000
Manifest this update: Sun 26 Jul 2026 17:01:23 +0000
Manifest next update: Mon 27 Jul 2026 17:01:23 +0000
Files and hashes: 1: 0mpECeqR9QbWM4ccbDVUDUYDN9E.crl (hash: U671fwJ2Na8K6/cZZ9hiT9ZZLmvRJiRl9yMvihnUZZE=)
2: AcTeoEML1ryHQtehrMdoz9pSMNk.roa (hash: 58HREcExgCm4jYk7OfR+la9NkSYLp6wFVz1Zv1g3G6w=)
3: wzoQWaU78B1JYcVEw1aU_m666Qg.roa (hash: YXxlzjY6ITzVnS2guD8G2HgvMXrNu1UDUO++sIfSdhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:5f:cc:48:17:a0:69:59:5c:1a:15:7c:e1:cc:1b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d26a4409ea91f506d633871c6c35540d460337d1
Validity
Not Before: Jul 26 17:01:23 2026 GMT
Not After : Jul 27 17:01:23 2026 GMT
Subject: CN=9486dc37f5787cfe34281b0526d1c21b81594130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ca:d5:47:dc:0d:97:42:86:83:1a:70:18:c7:
62:4d:30:7a:ab:10:d1:8b:db:38:13:d7:37:b1:2f:
43:23:62:56:ca:bb:2f:c4:ca:02:72:0e:35:f4:ae:
9d:fd:51:64:72:fe:c7:35:21:3a:83:f2:00:a2:9e:
bf:db:04:fb:36:77:e3:bd:a1:b7:a6:3a:91:91:6d:
15:18:3a:e8:f9:81:25:13:ca:a3:17:cd:70:4e:53:
78:a2:0d:fb:f5:dd:ab:e5:6d:7f:13:db:63:72:6a:
59:cf:cd:d7:2e:f5:01:d7:52:28:f7:e7:34:74:ac:
a2:cf:9c:45:68:ce:ad:bc:f7:10:cd:d7:37:1e:16:
33:95:3f:51:93:76:b0:11:14:d9:43:41:af:78:7b:
89:9d:12:59:a7:4b:f6:a3:6d:8c:63:b1:fe:17:c6:
ce:d0:cb:2f:93:95:6a:93:fc:c4:42:9f:f8:f5:4e:
61:bc:52:e7:a5:d5:e9:7c:6e:4c:90:99:ba:27:0e:
a7:bb:36:e3:8e:b7:ce:cd:ff:22:0a:f2:2d:43:e7:
14:3c:db:a3:98:f5:17:9a:21:51:62:5e:59:8e:88:
85:fe:a9:3b:61:40:68:cf:96:a4:d4:45:9a:6b:17:
b0:10:03:3f:dd:c5:43:6c:4b:26:93:fc:c2:40:36:
72:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:86:DC:37:F5:78:7C:FE:34:28:1B:05:26:D1:C2:1B:81:59:41:30
X509v3 Authority Key Identifier:
keyid:D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:26:e3:94:c0:54:5c:97:15:89:e6:ae:45:59:f7:6f:c7:d0:
7e:d0:a0:e8:f6:49:bf:59:4f:45:44:bb:b2:73:ea:20:cd:77:
e2:66:54:10:72:d3:96:f1:4d:e5:7d:91:00:71:9a:a3:c3:98:
f3:78:cc:0e:cf:2d:a5:d3:ba:bc:b4:82:4a:b9:82:3e:a0:10:
2e:20:0f:89:c3:b9:fd:77:f4:dd:64:df:64:af:f6:e5:54:4f:
08:5f:89:c2:7d:03:b1:93:c0:fa:6c:f7:9f:51:fa:37:32:ff:
42:95:cf:13:75:bc:42:09:d6:2a:3c:53:65:ee:95:dc:90:b4:
e0:ef:7f:9e:e1:7b:67:99:f5:7e:cf:e0:52:f0:89:37:dd:e7:
a4:08:8c:60:17:a6:e7:31:57:64:a3:36:40:d1:46:4d:69:59:
77:30:10:9c:37:89:53:76:dc:ed:1f:55:75:44:1f:73:cb:b5:
37:52:bc:82:df:87:ab:03:0c:5f:b6:49:c6:54:17:73:8e:37:
f9:04:1f:49:d5:2b:c4:c3:59:11:07:60:94:a5:71:9c:bb:51:
65:da:d8:3d:7e:d4:62:6a:24:fe:c9:b4:37:a9:79:2a:61:9a:
67:1b:fc:7d:75:90:2e:00:d2:91:2c:f2:e1:bf:ba:ea:bc:af:
29:3f:08:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:19:16 2026 by rpki-client