Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
File: 0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft (raw, json)
Hash identifier: yNW90/LtiGH8EO2TS+XTbcmCz6ueh1rr9VN3TAWeUMo=
Subject key identifier: 16:E8:6C:A2:E7:F1:0D:9B:F3:19:67:38:A9:85:8B:B3:71:62:02:FF
Authority key identifier: D0:EE:03:89:68:7D:BD:44:5D:E6:F9:23:9C:1D:02:C3:77:0C:F5:74
Certificate issuer: /CN=d0ee0389687dbd445de6f9239c1d02c3770cf574
Certificate serial: 019FFC7FDA26CAB2ADA752DEDAD75A7EEAD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
Manifest number: 19FF
Signing time: Thu 13 Aug 2026 19:01:05 +0000
Manifest this update: Thu 13 Aug 2026 19:01:05 +0000
Manifest next update: Fri 14 Aug 2026 19:01:05 +0000
Files and hashes: 1: 0O4DiWh9vURd5vkjnB0Cw3cM9XQ.crl (hash: afqgqus6hTArnOIyCvfW+vcxzGpONcYFHmoU9npOJGA=)
2: ufg8Cy-npLiG4EP7oeE-jAY168k.roa (hash: mWJPH552eZGzUsrCNb54v4U4ffZaIGFDBWjHB1EftzA=)
3: ut5dpGeCvxjJRpLmR_ipxil5ZUA.roa (hash: PaeXiU3oIApbKxkYqCqS8/5Z6kGo2lJVdWVbX8L9K5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 19:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fc:7f:da:26:ca:b2:ad:a7:52:de:da:d7:5a:7e:ea:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ee0389687dbd445de6f9239c1d02c3770cf574
Validity
Not Before: Aug 13 19:01:05 2026 GMT
Not After : Aug 14 19:01:05 2026 GMT
Subject: CN=16e86ca2e7f10d9bf3196738a9858bb3716202ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c3:89:58:a4:49:2f:89:25:dc:31:52:15:3d:
82:63:e4:e0:ac:25:01:7a:60:7b:10:55:8f:fa:9c:
fd:9d:f3:96:72:27:40:07:88:bc:ee:d6:31:19:3a:
0d:0d:5b:75:9f:e7:45:b0:58:24:00:1c:51:bb:74:
56:04:c9:99:a1:1a:cf:7d:c4:d4:1e:cf:4f:dc:b3:
68:1c:48:0d:74:34:26:15:25:38:bd:53:e6:64:38:
5b:da:f9:e5:49:b0:71:e4:bc:b9:73:e3:d7:66:b9:
d3:71:ba:1d:38:d0:f6:e5:10:ad:90:21:76:c0:ad:
e7:f0:63:5a:d3:b0:bb:22:21:67:21:8a:8b:a6:d5:
ca:1f:ba:53:88:0f:35:58:31:43:a8:d0:85:3c:dd:
ff:d2:de:12:ac:0e:8f:ef:75:50:7d:03:24:4f:4e:
a1:13:5e:7d:f4:8f:cc:ef:b3:7f:3b:d3:9d:50:55:
ef:7f:a3:ba:46:1d:53:7f:c6:bf:2e:c3:63:5a:4b:
ec:74:fb:f0:1e:4e:f9:2e:93:06:17:18:b7:ab:15:
1c:df:70:e1:aa:74:f0:ea:af:b5:20:70:fc:2b:1c:
45:94:04:a4:ba:77:5d:62:c0:a1:ea:1d:66:e6:e7:
a7:b2:f0:11:21:55:b1:8d:10:1d:e1:4b:d7:7f:30:
84:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E8:6C:A2:E7:F1:0D:9B:F3:19:67:38:A9:85:8B:B3:71:62:02:FF
X509v3 Authority Key Identifier:
keyid:D0:EE:03:89:68:7D:BD:44:5D:E6:F9:23:9C:1D:02:C3:77:0C:F5:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:31:5e:10:bb:73:f6:b0:3c:0c:01:4c:8f:db:0c:89:37:70:
56:8c:e1:99:fa:63:ee:ae:72:d2:55:b1:c9:68:58:ea:56:51:
1d:e7:1d:d7:db:9f:23:46:09:c1:16:b2:c7:85:61:88:08:16:
b3:9b:52:dd:f4:71:db:37:7a:a4:6c:b3:b4:9c:35:3f:1b:5c:
e7:6f:22:fb:f1:29:52:a6:96:3f:05:b2:28:f0:a0:55:77:15:
69:62:28:89:7f:47:80:5f:c1:24:6c:e7:02:2f:e4:79:89:3e:
f3:7c:b1:e6:01:55:a9:8a:ae:4e:ae:c6:9d:8a:7e:ba:61:33:
3c:9a:e6:46:9a:5e:00:ef:5c:6f:83:20:8c:84:b7:b7:5f:d7:
ab:8f:37:74:13:30:ba:de:c6:ae:ff:2e:ab:3b:71:aa:af:a0:
12:cf:bd:ed:21:2a:06:60:b7:13:77:a3:1a:4f:22:18:fe:da:
71:d0:16:11:f6:cb:1c:6d:e3:dc:2d:92:a7:53:47:ab:73:ff:
e2:d0:a2:42:0d:c3:a4:ec:f7:31:52:8a:a6:2e:e7:bc:dd:fb:
d9:44:ca:91:7f:24:c3:7c:29:61:90:1c:73:ad:0a:3a:f1:ef:
d6:52:af:74:af:3d:d7:89:b2:67:5b:de:db:fb:bf:04:21:d0:
53:33:bf:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 03:30:49 2026 by rpki-client