Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
File: 0AumM_HpgkB20WGpg9i46IEmOYI.mft (raw, json)
Hash identifier: M6FLcbGPux766txY99Jc5MV5Q3U+7wQ9ILM/lp3/p28=
Subject key identifier: FA:57:B3:F2:9D:01:DF:23:CB:D6:E9:98:48:DD:26:77:EA:93:B3:D7
Authority key identifier: D0:0B:A6:33:F1:E9:82:40:76:D1:61:A9:83:D8:B8:E8:81:26:39:82
Certificate issuer: /CN=d00ba633f1e9824076d161a983d8b8e881263982
Certificate serial: 019F178C4D6233ED5C2D6FA62F27A767D8FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
Manifest number: 198A
Signing time: Tue 30 Jun 2026 08:01:38 +0000
Manifest this update: Tue 30 Jun 2026 08:01:38 +0000
Manifest next update: Wed 01 Jul 2026 08:01:38 +0000
Files and hashes: 1: 0AumM_HpgkB20WGpg9i46IEmOYI.crl (hash: qUirjlpJLxcoHt4yPbWpYV40rvuZsl679J+dkZcrVUA=)
2: ISlu2yBKOiwYiK7qUKEsRGH2kzo.roa (hash: 4RnBkIb7B8coxfzF6I8zgcJVOP7X3HVqDAGpERLc3lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 08:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:8c:4d:62:33:ed:5c:2d:6f:a6:2f:27:a7:67:d8:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00ba633f1e9824076d161a983d8b8e881263982
Validity
Not Before: Jun 30 08:01:38 2026 GMT
Not After : Jul 1 08:01:38 2026 GMT
Subject: CN=fa57b3f29d01df23cbd6e99848dd2677ea93b3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b8:68:32:98:bc:f5:c2:c8:b0:ba:aa:7f:8d:
09:69:03:f6:fd:72:4f:c7:81:97:62:15:af:0d:e5:
f8:46:e1:7b:d3:eb:1e:8c:c1:86:4f:53:61:35:0d:
ed:9d:07:24:d3:27:33:4f:17:4e:98:42:b4:de:58:
25:39:5f:c3:f3:da:24:bc:4e:14:3c:13:c5:55:3e:
65:19:86:f1:97:ff:b1:75:c1:53:c3:b6:2b:a9:79:
a3:dc:7a:6c:8f:04:78:b1:6c:26:58:d3:b2:99:cd:
0b:8a:93:b3:e7:9c:35:ac:eb:71:8d:4e:eb:04:6d:
61:84:a8:f3:a7:8f:3b:d4:79:ff:1b:0d:0c:e3:65:
6a:f3:75:b2:45:4c:6c:50:ff:1a:02:65:87:3f:fa:
39:65:ca:81:0f:c9:95:33:a2:f3:d2:8f:88:ce:15:
71:d6:d9:ad:40:cb:53:e1:7e:02:19:23:7c:90:64:
b7:e8:e6:86:6d:2d:df:e3:8d:c9:fd:98:1b:5d:28:
3f:5b:11:62:1f:2b:84:b2:7a:87:c8:41:5d:1d:bd:
3b:fc:d1:06:43:5c:d1:a3:62:c5:ef:ed:fe:43:3a:
62:e8:e0:0d:1d:19:94:16:1e:86:d4:22:25:be:84:
46:c3:11:6a:04:2f:64:bf:10:e3:a8:fc:45:1d:e2:
cc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:57:B3:F2:9D:01:DF:23:CB:D6:E9:98:48:DD:26:77:EA:93:B3:D7
X509v3 Authority Key Identifier:
keyid:D0:0B:A6:33:F1:E9:82:40:76:D1:61:A9:83:D8:B8:E8:81:26:39:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:80:95:2f:2b:9c:bf:f1:c3:30:cc:b3:40:e0:2e:59:a8:58:
a9:ab:f0:60:d3:8e:5d:e7:95:e8:69:29:4f:ca:00:4c:fc:ec:
7c:45:6d:31:fb:74:b8:e1:08:fd:61:8e:dc:8d:da:8d:45:16:
78:0b:fc:d2:31:b9:7c:f0:03:db:f9:2a:90:66:07:ff:af:9a:
70:74:72:5e:45:b4:67:80:2e:50:4c:18:9a:bb:74:36:a0:2b:
ba:99:b2:82:f9:44:d2:a4:52:13:a5:ea:7d:ba:22:b7:c5:38:
68:21:55:c4:8c:b4:4c:49:d6:ef:01:cb:65:89:24:f2:69:50:
ce:ff:c5:81:a9:9e:76:34:b2:b4:4f:b1:81:fd:79:a2:c2:3e:
40:60:39:c4:53:8a:b8:4a:82:06:15:55:5a:7d:86:6f:3e:22:
c9:93:18:24:94:a0:0d:ef:3f:d3:7b:dd:40:f3:48:38:8b:87:
b7:ec:91:ec:08:58:ec:11:38:dd:f2:b7:3d:52:d2:a2:64:6e:
51:ae:92:5f:4d:32:78:0c:a1:03:40:21:c9:81:3d:07:38:8c:
75:6d:57:d3:1c:f9:21:88:4d:64:84:16:12:d5:59:21:31:1c:
22:6b:fc:76:85:e5:19:64:55:47:29:f7:ed:7c:87:c6:33:e2:
bb:cc:5c:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8XjE1iM+1cLW+mLyenZ9j9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMGJhNjMzZjFlOTgyNDA3NmQxNjFhOTgzZDhiOGU4ODEy
NjM5ODIwHhcNMjYwNjMwMDgwMTM4WhcNMjYwNzAxMDgwMTM4WjAzMTEwLwYDVQQD
EyhmYTU3YjNmMjlkMDFkZjIzY2JkNmU5OTg0OGRkMjY3N2VhOTNiM2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbhoMpi89cLIsLqqf40JaQP2/XJP
x4GXYhWvDeX4RuF70+sejMGGT1NhNQ3tnQck0yczTxdOmEK03lglOV/D89okvE4U
PBPFVT5lGYbxl/+xdcFTw7YrqXmj3HpsjwR4sWwmWNOymc0LipOz55w1rOtxjU7r
BG1hhKjzp4871Hn/Gw0M42Vq83WyRUxsUP8aAmWHP/o5ZcqBD8mVM6Lz0o+IzhVx
1tmtQMtT4X4CGSN8kGS36OaGbS3f443J/ZgbXSg/WxFiHyuEsnqHyEFdHb07/NEG
Q1zRo2LF7+3+Qzpi6OANHRmUFh6G1CIlvoRGwxFqBC9kvxDjqPxFHeLMbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpXs/KdAd8jy9bpmEjdJnfqk7PXMB8GA1UdIwQY
MBaAFNALpjPx6YJAdtFhqYPYuOiBJjmCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEF1bU1fSHBna0IyMFdHcGc5aTQ2SUVtT1lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80MDg2NjctMGIzOS00ZGEwLTlhYTAt
M2NjMTFiYzlkNTk0LzEvMEF1bU1fSHBna0IyMFdHcGc5aTQ2SUVtT1lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80MDg2NjctMGIzOS00ZGEwLTlhYTAtM2NjMTFiYzlkNTk0
LzEvMEF1bU1fSHBna0IyMFdHcGc5aTQ2SUVtT1lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF4CVLyuc
v/HDMMyzQOAuWahYqavwYNOOXeeV6GkpT8oATPzsfEVtMft0uOEI/WGO3I3ajUUW
eAv80jG5fPAD2/kqkGYH/6+acHRyXkW0Z4AuUEwYmrt0NqArupmygvlE0qRSE6Xq
fboit8U4aCFVxIy0TEnW7wHLZYkk8mlQzv/FgamedjSytE+xgf15osI+QGA5xFOK
uEqCBhVVWn2Gbz4iyZMYJJSgDe8/03vdQPNIOIuHt+yR7AhY7BE43fK3PVLSomRu
Ua6SX00yeAyhA0AhyYE9BziMdW1X0xz5IYhNZIQWEtVZITEcImv8doXlGWRVRyn3
7XyHxjPiu8xcNA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:14 2026 by rpki-client