Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
File: 0NhScDKV7Pi5cgH5FjEPiPTAirc.mft (raw, json)
Hash identifier: 6ODORzOXTa/qdd67VjcdU2jiiYTgo3pkFfRx7/P8lhs=
Subject key identifier: AD:10:B8:A1:52:1E:54:20:75:56:2B:16:84:AC:B3:F8:89:B3:12:0B
Authority key identifier: D0:D8:52:70:32:95:EC:F8:B9:72:01:F9:16:31:0F:88:F4:C0:8A:B7
Certificate issuer: /CN=d0d852703295ecf8b97201f916310f88f4c08ab7
Certificate serial: 019F189E05B86850AB78ADB916E7A73E6CBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0NhScDKV7Pi5cgH5FjEPiPTAirc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 13:00:37 +0000
Manifest this update: Tue 30 Jun 2026 13:00:37 +0000
Manifest next update: Wed 01 Jul 2026 13:00:37 +0000
Files and hashes: 1: 0NhScDKV7Pi5cgH5FjEPiPTAirc.crl (hash: Uj6MFdyxmH86F/Ua0LRBcFJYq4ZGvlOmKChV8/crTig=)
2: VIaUBNL6WlewF92VFkKdJgnVoGY.roa (hash: BUyipvdgIG16YQ2huh7/x7j/eCf65uRrmNCB96nUmSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0NhScDKV7Pi5cgH5FjEPiPTAirc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:05:b8:68:50:ab:78:ad:b9:16:e7:a7:3e:6c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0d852703295ecf8b97201f916310f88f4c08ab7
Validity
Not Before: Jun 30 13:00:37 2026 GMT
Not After : Jul 1 13:00:37 2026 GMT
Subject: CN=ad10b8a1521e542075562b1684acb3f889b3120b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e0:d8:05:60:cb:09:7c:d1:f4:ae:cf:97:63:
11:4b:9b:81:8f:3d:39:08:31:7e:58:b7:d1:bc:35:
ba:7d:f0:d2:46:4e:12:cc:22:65:5d:b3:28:96:79:
17:1f:c5:b5:ef:2c:9c:2a:0a:13:64:7e:a1:0e:4b:
81:a9:6f:2e:86:95:5b:05:d4:fa:eb:ab:34:b4:f2:
cf:25:03:0f:67:ab:7a:f9:b3:eb:4e:03:1a:d0:5c:
19:6e:a8:a5:b2:94:6a:d5:f6:8e:15:f5:60:40:49:
f6:cc:52:0c:15:37:48:24:eb:86:b7:66:a1:b7:00:
ef:d2:78:92:69:49:82:a7:d7:f4:47:8c:c0:8d:5b:
a2:cf:f7:d9:07:69:fc:99:51:ce:e5:9b:4d:89:c8:
21:61:9b:93:75:e8:d0:d0:f9:63:79:1c:5d:07:91:
e9:87:56:6f:11:4c:52:cd:7a:9f:52:26:9f:63:7f:
60:e7:96:f7:8d:ea:6a:36:dc:1f:6c:ef:7f:7d:a3:
d2:09:33:f4:04:8b:92:58:50:a8:43:1e:01:e7:c7:
18:16:28:bb:59:0d:66:cc:59:57:d7:e6:d8:83:19:
c7:27:2e:99:dc:1e:98:14:d9:49:d0:6b:11:7b:62:
f5:53:f0:e9:61:30:d9:b0:90:f8:3b:74:cc:1b:d3:
9f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:10:B8:A1:52:1E:54:20:75:56:2B:16:84:AC:B3:F8:89:B3:12:0B
X509v3 Authority Key Identifier:
keyid:D0:D8:52:70:32:95:EC:F8:B9:72:01:F9:16:31:0F:88:F4:C0:8A:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NhScDKV7Pi5cgH5FjEPiPTAirc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f9:f1:9e:9e:9f:63:c1:0f:ca:12:92:2c:d4:b4:c1:2b:5f:
e3:3a:1e:33:61:5a:72:6a:96:f9:66:26:4b:6a:9d:b7:d2:94:
2e:61:cf:59:3b:6e:58:bf:0d:ed:c1:73:1e:0c:1c:30:c1:0a:
bb:ac:1c:e8:1f:34:97:13:c7:27:fb:85:ee:f3:41:23:94:3a:
1b:9a:d9:e2:fc:b0:52:b6:97:fb:77:97:7e:62:e2:71:dc:3a:
6b:31:2c:a0:b3:fc:40:16:dd:64:e2:0f:e7:17:72:64:d5:06:
3f:17:30:29:b6:ac:8d:8c:ae:b1:e5:c3:34:a0:43:68:66:b4:
70:c7:ef:24:3e:c0:61:dc:23:cb:e4:6d:12:1c:fb:0a:cf:29:
0b:34:52:1f:56:30:53:82:44:41:c1:f3:ed:b2:2a:10:4e:7a:
24:8e:53:4f:c5:15:04:2e:42:05:fc:10:04:7a:03:02:58:7e:
8e:df:56:54:ed:2b:54:49:8d:10:21:01:5d:ca:26:46:9e:fe:
03:eb:48:b8:70:3d:4d:be:76:e8:fa:1c:81:5b:44:e7:db:12:
48:85:0d:b3:01:c5:6f:a9:98:32:03:4f:5a:ac:fd:05:56:0f:
4c:7c:3d:36:78:bb:b0:ea:1a:b6:ed:5a:ed:78:fa:0e:f3:6b:
8a:6c:81:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:18 2026 by rpki-client