Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
File: 0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft (raw, json)
Hash identifier: lCjH7JaxT4awmnXMnKJIjMpPJ4xvrY35x5GOxawChFY=
Subject key identifier: 20:0D:05:89:52:52:DA:50:C2:33:3B:3D:68:18:54:3B:8E:46:27:24
Authority key identifier: D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08
Certificate issuer: /CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
Certificate serial: 01A0016F0D9E9BB0CC72FB6880D6AFDB6940
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
Manifest number: 17B4
Signing time: Fri 14 Aug 2026 18:00:50 +0000
Manifest this update: Fri 14 Aug 2026 18:00:50 +0000
Manifest next update: Sat 15 Aug 2026 18:00:50 +0000
Files and hashes: 1: 0NhTEIhVVHGuhHppc2WhR24nfps.roa (hash: UAiJiA/nFpUR+80xJrPSC3HfZCrrUkoKtrqsQ8RFQsc=)
2: 0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl (hash: 2Xjr8nzp2gx6cKMvkkc9y8/vytMlyXccyr5DPezOiXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:0d:9e:9b:b0:cc:72:fb:68:80:d6:af:db:69:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
Validity
Not Before: Aug 14 18:00:50 2026 GMT
Not After : Aug 15 18:00:50 2026 GMT
Subject: CN=200d05895252da50c2333b3d6818543b8e462724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9b:e3:1a:2d:b1:d1:94:8a:1e:14:8e:5c:9e:
5c:67:58:f6:e4:c3:63:b9:31:29:28:db:36:07:e7:
6b:18:b0:be:6f:6b:fe:85:0e:11:c9:a6:49:6b:58:
7f:11:ff:7d:41:4d:95:2d:78:59:34:c9:d6:0e:fe:
cb:89:eb:32:85:d6:b2:21:ae:44:eb:54:e9:46:62:
ed:08:b1:3b:f4:d5:b9:e1:c9:f4:a6:84:86:64:38:
ab:12:49:ad:07:51:40:4f:1b:97:32:ff:2f:66:47:
0c:6d:bb:2c:a8:67:8d:00:da:8f:f6:39:84:5d:a8:
d9:61:30:70:da:2e:37:e2:78:10:12:a7:78:8e:f4:
0c:5d:52:93:8c:af:4d:0d:98:b1:ad:6d:e4:b5:86:
a4:a3:db:89:dc:ca:92:6b:4b:a0:dc:f6:07:94:d5:
c9:9d:8d:2e:0b:ed:9b:12:1c:f5:81:24:59:77:03:
32:97:aa:bf:63:73:58:0f:5c:85:33:6d:f9:f2:44:
9c:7f:c3:c6:93:9d:c8:d0:b6:e3:a8:83:e2:68:02:
6e:2f:81:6d:81:96:5e:48:99:7d:f4:39:14:aa:d5:
8c:42:48:f8:8d:f2:c7:bb:c7:63:bc:82:85:6d:78:
62:aa:0e:7a:b3:c5:ba:56:bf:d9:5f:51:d4:38:ad:
d4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0D:05:89:52:52:DA:50:C2:33:3B:3D:68:18:54:3B:8E:46:27:24
X509v3 Authority Key Identifier:
keyid:D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:1f:a4:0b:5d:5f:43:86:80:0e:9a:d6:62:ca:6c:8d:bf:b0:
51:b6:f9:1e:e9:80:c6:a1:35:e7:39:a3:87:48:9e:f8:2d:2c:
86:af:e2:17:36:7c:b9:3d:e4:e3:74:d6:01:c7:49:e1:85:3d:
fc:10:27:a1:1a:b2:28:16:87:7f:ab:2c:af:08:68:2a:c3:a1:
18:89:0a:0e:1f:25:11:5d:ee:e6:2e:66:e8:ea:f3:e9:8f:dd:
d8:f9:85:23:cb:02:5e:5c:be:1a:18:39:6a:04:41:5e:85:a5:
e7:f6:8d:11:48:43:31:58:34:81:8a:25:80:5a:c3:4f:67:6f:
79:9c:cb:e8:06:ec:76:2b:e3:dc:d7:be:57:db:a3:0a:d8:5f:
b1:3d:96:42:a1:68:e6:d7:6d:cc:a3:88:a4:d5:10:06:53:5b:
bc:b1:30:ff:28:ba:9f:4e:fb:69:d1:bd:59:04:f0:3e:d8:e3:
f9:09:04:43:46:6e:79:ea:a0:ce:6f:47:f4:1a:07:fe:e2:ae:
33:64:fe:8e:b4:f0:de:00:f0:5a:b1:92:91:a0:d8:d8:36:f1:
18:ba:1e:b3:06:ef:7a:37:d8:4b:b5:97:ec:3f:12:a6:3d:9a:
c0:57:fa:9d:0c:0d:46:03:93:ae:ed:cb:74:3b:94:c7:0a:47:
cc:2c:93:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABbw2em7DMcvtogNav22lAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZjZlNmI1YTM0ZmQxOGI0MzUzODVkYjg3YmIzYWU5NzQ3
ODUxMDgwHhcNMjYwODE0MTgwMDUwWhcNMjYwODE1MTgwMDUwWjAzMTEwLwYDVQQD
EygyMDBkMDU4OTUyNTJkYTUwYzIzMzNiM2Q2ODE4NTQzYjhlNDYyNzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5vjGi2x0ZSKHhSOXJ5cZ1j25MNj
uTEpKNs2B+drGLC+b2v+hQ4RyaZJa1h/Ef99QU2VLXhZNMnWDv7LiesyhdayIa5E
61TpRmLtCLE79NW54cn0poSGZDirEkmtB1FATxuXMv8vZkcMbbssqGeNANqP9jmE
XajZYTBw2i434ngQEqd4jvQMXVKTjK9NDZixrW3ktYako9uJ3MqSa0ug3PYHlNXJ
nY0uC+2bEhz1gSRZdwMyl6q/Y3NYD1yFM2358kScf8PGk53I0LbjqIPiaAJuL4Ft
gZZeSJl99DkUqtWMQkj4jfLHu8djvIKFbXhiqg56s8W6Vr/ZX1HUOK3UjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCANBYlSUtpQwjM7PWgYVDuORickMB8GA1UdIwQY
MBaAFNL25rWjT9GLQ1OF24e7Oul0eFEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHZibXRhTlAwWXREVTRYYmg3czY2WFI0VVFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS85YjBjNzctODA4NS00YTVhLWJhY2Ut
MTQzYzNkMzhkMTdjLzEvMHZibXRhTlAwWXREVTRYYmg3czY2WFI0VVFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS85YjBjNzctODA4NS00YTVhLWJhY2UtMTQzYzNkMzhkMTdj
LzEvMHZibXRhTlAwWXREVTRYYmg3czY2WFI0VVFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADx+kC11f
Q4aADprWYspsjb+wUbb5HumAxqE15zmjh0ie+C0shq/iFzZ8uT3k43TWAcdJ4YU9
/BAnoRqyKBaHf6ssrwhoKsOhGIkKDh8lEV3u5i5m6Orz6Y/d2PmFI8sCXly+Ghg5
agRBXoWl5/aNEUhDMVg0gYolgFrDT2dveZzL6Absdivj3Ne+V9ujCthfsT2WQqFo
5tdtzKOIpNUQBlNbvLEw/yi6n077adG9WQTwPtjj+QkEQ0Zueeqgzm9H9BoH/uKu
M2T+jrTw3gDwWrGSkaDY2DbxGLoeswbvejfYS7WX7D8Spj2awFf6nQwNRgOTru3L
dDuUxwpHzCyT9w==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:34:22 2026 by rpki-client