Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
File: 0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft (raw, json)
Hash identifier: mUjNpENfb6/OYT/wCU98v3mbzA9gwfJAN+mnsvZp9co=
Subject key identifier: 82:51:F5:44:DF:6A:27:AC:81:7A:12:6E:01:6B:F6:C0:4A:30:45:DC
Authority key identifier: D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD
Certificate issuer: /CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
Certificate serial: 019F17F9E02CADA1460D939E1E5CACB34607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
Manifest number: 0DE9
Signing time: Tue 30 Jun 2026 10:01:19 +0000
Manifest this update: Tue 30 Jun 2026 10:01:19 +0000
Manifest next update: Wed 01 Jul 2026 10:01:19 +0000
Files and hashes: 1: 0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl (hash: iOFoI/G+DXru3sn/zKPXanzL3xmj4/u0Q0gSuErb6uk=)
2: 1-bzA-LC9HAAJGIHNZyWh_5MoU-g.roa (hash: RnN32d6e4MWESaRTbw2K0CLbZb59w+5PKP+DYaK/k9o=)
3: rTSOfv72iKS4Od2LIB0_G10Sm1g.roa (hash: gNhIcqNEFyGD4jxJEKcU893kImcieeuHGUa4eFshagU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:e0:2c:ad:a1:46:0d:93:9e:1e:5c:ac:b3:46:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
Validity
Not Before: Jun 30 10:01:19 2026 GMT
Not After : Jul 1 10:01:19 2026 GMT
Subject: CN=8251f544df6a27ac817a126e016bf6c04a3045dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7c:ae:ea:3e:db:22:1b:86:9a:70:f2:f3:0c:
12:e4:67:ba:c2:4f:00:89:2c:91:ca:8b:6e:c6:44:
46:0b:6c:40:2c:50:c7:4f:4b:36:6b:bf:3f:6e:a7:
d3:1e:99:37:eb:49:d4:14:f6:17:48:e5:82:50:05:
34:45:22:42:00:13:0d:9b:8c:34:33:8a:b5:15:54:
e4:31:0a:01:6a:10:e0:0c:5a:99:ec:fb:41:ff:f6:
0b:09:f7:29:6d:c8:67:e1:20:4d:82:e5:7c:1d:82:
d3:68:8c:50:9c:c2:e0:20:b8:9f:21:ee:c2:58:29:
76:a1:55:99:8a:ed:90:d1:3a:2f:18:da:f3:a6:76:
c4:af:bb:a1:0b:0e:a9:c4:b4:d6:93:57:07:07:d5:
35:10:48:0e:79:02:cf:97:02:89:63:27:bd:1f:4a:
44:f9:c4:06:b3:06:e6:18:c1:7e:c0:a7:f6:cf:91:
6c:03:ea:39:41:bc:ef:ac:b8:cc:33:c0:11:a3:1b:
d9:33:6d:d3:97:a5:3a:a9:87:89:97:f5:c8:bd:2f:
1c:ae:e0:06:60:fd:34:a9:10:04:33:91:62:42:59:
a0:40:73:54:54:c0:7f:ac:4c:66:e4:f3:ae:f2:46:
38:2e:80:c9:af:9e:7b:62:3b:8a:12:70:52:c0:04:
f7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:51:F5:44:DF:6A:27:AC:81:7A:12:6E:01:6B:F6:C0:4A:30:45:DC
X509v3 Authority Key Identifier:
keyid:D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:96:34:2b:8c:1c:ad:cf:b8:0d:b7:99:bb:56:6e:fb:a9:06:
fb:45:b0:45:bc:cf:49:76:78:d7:8e:0e:f7:fe:e4:c9:1e:82:
fa:e2:53:a8:32:09:39:9b:ec:1a:a2:08:40:b3:f6:51:25:a6:
a3:e5:93:29:0f:d0:a9:73:7a:db:16:3c:f8:5f:b5:55:a3:97:
26:66:60:9c:54:90:2b:5e:b9:dd:71:82:bb:ac:60:94:f2:11:
e9:54:d1:8c:e9:8e:33:70:97:22:21:68:5e:e4:ef:66:7a:32:
c7:08:d2:da:e2:ca:d3:1a:a2:f8:2f:07:bc:18:55:a1:2a:bd:
ef:8b:48:af:dc:01:4e:73:95:f0:a2:6c:0a:1e:98:e7:8c:ad:
8b:71:0f:af:b9:a2:4a:de:45:f9:46:60:24:60:1d:1c:60:cd:
b8:f5:ff:00:23:f8:5b:5c:b9:52:c7:9e:b4:f8:25:bd:55:c9:
84:c9:95:d9:c2:ef:92:a4:24:3d:39:7e:7b:ba:66:b6:24:9e:
58:30:95:53:66:53:f5:fc:b9:d3:4b:a4:fa:c1:74:74:60:18:
a0:22:ba:93:13:29:04:10:42:06:d1:e9:16:fa:7b:d4:b3:94:
0a:5d:dd:c9:29:60:df:47:6e:85:45:ab:b2:1e:cd:2b:37:ef:
68:1c:27:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8X+eAsraFGDZOeHlyss0YHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZjk3ODllMWI1OWZhMmYyYzUwY2UxZThlMTJlYjk3NjU1
YmJjZGQwHhcNMjYwNjMwMTAwMTE5WhcNMjYwNzAxMTAwMTE5WjAzMTEwLwYDVQQD
Eyg4MjUxZjU0NGRmNmEyN2FjODE3YTEyNmUwMTZiZjZjMDRhMzA0NWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHyu6j7bIhuGmnDy8wwS5Ge6wk8A
iSyRyotuxkRGC2xALFDHT0s2a78/bqfTHpk360nUFPYXSOWCUAU0RSJCABMNm4w0
M4q1FVTkMQoBahDgDFqZ7PtB//YLCfcpbchn4SBNguV8HYLTaIxQnMLgILifIe7C
WCl2oVWZiu2Q0TovGNrzpnbEr7uhCw6pxLTWk1cHB9U1EEgOeQLPlwKJYye9H0pE
+cQGswbmGMF+wKf2z5FsA+o5QbzvrLjMM8ARoxvZM23Tl6U6qYeJl/XIvS8cruAG
YP00qRAEM5FiQlmgQHNUVMB/rExm5POu8kY4LoDJr557YjuKEnBSwAT3GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJR9UTfaiesgXoSbgFr9sBKMEXcMB8GA1UdIwQY
MBaAFNL5eJ4bWfovLFDOHo4S65dlW7zdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHZsNG5odFotaThzVU00ZWpoTHJsMlZidk4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81ODA3NjktYTljNC00OTlhLWI5ZGIt
YmM1YWI4MTk4N2YwLzEvMHZsNG5odFotaThzVU00ZWpoTHJsMlZidk4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy81ODA3NjktYTljNC00OTlhLWI5ZGItYmM1YWI4MTk4N2Yw
LzEvMHZsNG5odFotaThzVU00ZWpoTHJsMlZidk4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu5Y0K4wc
rc+4DbeZu1Zu+6kG+0WwRbzPSXZ4144O9/7kyR6C+uJTqDIJOZvsGqIIQLP2USWm
o+WTKQ/QqXN62xY8+F+1VaOXJmZgnFSQK1653XGCu6xglPIR6VTRjOmOM3CXIiFo
XuTvZnoyxwjS2uLK0xqi+C8HvBhVoSq974tIr9wBTnOV8KJsCh6Y54yti3EPr7mi
St5F+UZgJGAdHGDNuPX/ACP4W1y5UseetPglvVXJhMmV2cLvkqQkPTl+e7pmtiSe
WDCVU2ZT9fy500uk+sF0dGAYoCK6kxMpBBBCBtHpFvp71LOUCl3dySlg30duhUWr
sh7NKzfvaBwn8g==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:27 2026 by rpki-client