Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.mft
File: d0HROhWph91gAZwCZdLs7EhAlEo.mft (raw, json)
Hash identifier: hRcuvYs0bYro4yyky0T2ZJwoaeFQgkyQ9CIj4fXGpIE=
Subject key identifier: AB:55:DF:06:18:0E:01:2D:45:59:B3:B7:66:B1:C9:47:ED:67:DA:C1
Authority key identifier: 77:41:D1:3A:15:A9:87:DD:60:01:9C:02:65:D2:EC:EC:48:40:94:4A
Certificate issuer: /CN=7741d13a15a987dd60019c0265d2ecec4840944a
Certificate serial: 01A01FB05EEEA3DB8EA2FAC9633E790F0C28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0HROhWph91gAZwCZdLs7EhAlEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.mft
Manifest number: 0B24
Signing time: Thu 20 Aug 2026 15:00:47 +0000
Manifest this update: Thu 20 Aug 2026 15:00:47 +0000
Manifest next update: Fri 21 Aug 2026 15:00:47 +0000
Files and hashes: 1: 2aVju54fgg9bD1JRsSNN37U-9Hk.roa (hash: gQ2ZXX3Kuvxj5T+dbec4hU1fv3yACHxOQmVvGeAb560=)
2: d0HROhWph91gAZwCZdLs7EhAlEo.crl (hash: lni+4aQoxXUvinx+L2Wn0dIDpIPl275EQFxgo1fP5Ec=)
3: sRYXppUiSNJrW5d1MVXqJ1v0U0g.roa (hash: e8cW0JrKBdNEagEPQSlGciScba5vYX0jEPFos43/Uno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0HROhWph91gAZwCZdLs7EhAlEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:b0:5e:ee:a3:db:8e:a2:fa:c9:63:3e:79:0f:0c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7741d13a15a987dd60019c0265d2ecec4840944a
Validity
Not Before: Aug 20 15:00:47 2026 GMT
Not After : Aug 21 15:00:47 2026 GMT
Subject: CN=ab55df06180e012d4559b3b766b1c947ed67dac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ca:94:85:f3:68:f7:61:88:27:1c:7a:e7:88:
97:52:15:6c:a6:fd:cf:1d:2f:2f:02:4e:40:41:17:
07:2a:99:4e:d2:76:46:4f:3f:0d:b7:ca:de:58:06:
29:c5:60:40:ed:b7:8d:c4:56:b7:71:03:1f:6b:d5:
4f:1a:4b:ed:d5:34:20:37:59:c6:4f:06:dd:d8:f8:
66:6a:90:cd:63:cf:a8:cc:9d:b8:af:11:bd:a4:88:
e1:ec:cb:3b:c2:e4:0e:13:ab:3d:06:87:7a:cb:f1:
66:ce:fa:6d:ba:28:0c:3e:40:a2:a3:45:f2:00:2e:
48:56:87:64:98:20:05:2d:5c:1e:e9:6b:6f:0d:65:
39:10:71:34:e6:4f:75:06:90:fa:22:15:58:80:91:
8a:5c:e9:f0:0c:7b:fd:b7:8b:e5:d8:5f:b7:c8:9c:
4e:94:a4:d2:b4:ba:50:18:8f:f2:34:56:be:d2:fd:
44:c9:b1:df:46:5e:a1:6c:8b:92:a0:af:99:c2:6a:
92:94:01:e3:8f:a8:14:3e:41:84:ae:9a:7a:02:f5:
6a:6a:57:bb:00:48:c0:cc:0c:c0:e2:62:78:02:c1:
72:ec:44:5f:cb:9f:20:ba:c7:6a:ef:7b:3b:a7:c3:
90:a8:6c:fc:53:68:22:55:2c:33:25:12:84:3d:ff:
d7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:55:DF:06:18:0E:01:2D:45:59:B3:B7:66:B1:C9:47:ED:67:DA:C1
X509v3 Authority Key Identifier:
keyid:77:41:D1:3A:15:A9:87:DD:60:01:9C:02:65:D2:EC:EC:48:40:94:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0HROhWph91gAZwCZdLs7EhAlEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:c1:f1:0b:29:6e:d9:28:8e:3b:f4:aa:42:7e:a8:92:26:1e:
76:96:ea:5a:64:91:ff:60:b7:73:e8:97:98:ea:af:1d:6d:de:
ae:26:99:14:fc:78:be:eb:72:51:3d:4f:f4:e7:4a:d7:46:2f:
7a:8e:2c:2d:d6:56:93:97:8f:32:55:40:ba:4d:e8:cd:d5:20:
de:7d:64:93:64:b6:8a:e4:cb:9d:b4:c7:11:47:2b:3f:a7:72:
b5:f5:04:0c:1b:5f:2e:fe:b4:9d:7e:3f:cd:91:56:29:c1:a2:
b1:36:b2:22:b4:a0:fe:59:2f:d8:3e:b6:03:bd:0f:a4:25:ef:
42:66:1f:ac:2f:93:e4:c9:aa:44:3a:35:f8:df:2d:17:aa:9d:
55:2b:dc:f2:4b:f2:28:da:2e:36:95:12:eb:b1:b8:7e:2f:97:
1d:29:df:55:c4:4b:31:70:c9:a0:a2:45:ec:de:f4:05:b6:e4:
18:46:d6:1a:f7:36:68:f3:6b:1b:a8:fc:53:f4:e6:8f:58:7e:
5c:a7:77:44:41:29:e6:82:f5:5e:97:38:68:72:57:5c:58:07:
a4:64:e7:67:eb:13:a2:47:6a:b2:a0:e8:fb:6e:01:de:f1:05:
bf:df:f8:59:f7:97:45:b3:24:95:4d:3b:c2:32:50:4c:35:83:
91:73:7e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:55:18 2026 by rpki-client