Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
File: 0PT6gHWHU7JDohZe3ep12-7oJsQ.mft (raw, json)
Hash identifier: cO65D//x8gsBG6GtnKN6cLNhVpcibgnasgwHs2hOpP4=
Subject key identifier: 21:34:AE:5C:0E:FE:23:3F:56:8A:5A:72:B4:56:03:E2:9D:F9:FA:69
Authority key identifier: D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4
Certificate issuer: /CN=d0f4fa80758753b243a2165eddea75dbeee826c4
Certificate serial: 019FA071D6B97D31CB1F32AD0089DD2F2C6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
Manifest number: 14BA
Signing time: Sun 26 Jul 2026 22:00:42 +0000
Manifest this update: Sun 26 Jul 2026 22:00:42 +0000
Manifest next update: Mon 27 Jul 2026 22:00:42 +0000
Files and hashes: 1: 0PT6gHWHU7JDohZe3ep12-7oJsQ.crl (hash: nraqPLYnE2dxI2O3SiIxeymTo4NQq8AGQWWAJno4EH8=)
2: pLi1qq2wcSmdgCiUnjjCoQErQdA.roa (hash: 7prO26MADaOtqZ/YBeNHajM4pUEvbdbYtkMA592/T+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:71:d6:b9:7d:31:cb:1f:32:ad:00:89:dd:2f:2c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f4fa80758753b243a2165eddea75dbeee826c4
Validity
Not Before: Jul 26 22:00:42 2026 GMT
Not After : Jul 27 22:00:42 2026 GMT
Subject: CN=2134ae5c0efe233f568a5a72b45603e29df9fa69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0f:c8:74:39:72:bc:c9:6a:21:e9:94:f9:38:
70:21:5a:c8:1b:8d:48:8d:46:87:05:19:54:ae:45:
f8:bf:6f:dc:cd:1d:32:14:6a:76:3b:8d:40:99:57:
88:14:49:ea:78:46:fd:56:c8:33:29:6a:39:86:a3:
44:27:eb:3a:90:0d:21:32:e3:98:78:c0:b0:d8:81:
d0:1a:cf:89:a9:8b:f5:e6:99:fa:7e:72:b1:07:70:
a7:fa:d8:51:e3:29:01:ea:04:ba:8c:f1:8d:5a:f1:
00:d0:cd:b2:30:5d:a9:7f:6b:29:76:27:14:01:14:
fb:ba:db:45:97:4c:0a:e7:90:0b:71:9d:98:86:84:
9e:5c:60:20:d7:f7:f4:dd:06:af:54:c1:71:45:2e:
62:be:a6:1a:34:ac:c3:5e:a1:df:e0:b4:a7:b3:b8:
22:4c:6f:98:f7:b4:20:2f:51:47:a0:2c:64:d6:73:
5f:09:23:b1:e2:4e:b7:1f:49:be:5a:e1:cd:ce:96:
83:b0:3f:8c:f1:0b:e9:28:34:54:dd:fe:b5:3f:4c:
ef:38:77:0e:c5:7e:5e:dc:54:70:f3:f6:30:f4:93:
79:dd:e5:50:39:29:e2:28:83:de:45:af:22:41:9f:
14:dd:c9:e2:35:cf:04:15:43:7a:0f:5c:c4:23:aa:
75:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:34:AE:5C:0E:FE:23:3F:56:8A:5A:72:B4:56:03:E2:9D:F9:FA:69
X509v3 Authority Key Identifier:
keyid:D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:55:96:38:8f:fd:f5:7b:a2:49:1c:5a:ff:6d:a9:b6:1c:0e:
da:1e:d7:63:52:bf:b0:c3:78:92:f8:63:54:66:1a:35:3a:46:
83:0a:2c:7e:4c:33:95:be:f7:35:31:ff:5c:b3:3f:9e:40:3f:
5a:8f:f2:8d:58:15:68:3d:a2:48:bc:9f:74:b5:dd:4a:62:c8:
a7:df:dc:fc:b3:f7:62:4d:ca:9c:91:c8:fc:0e:2a:e5:02:f3:
a4:f2:61:99:32:c3:a0:ba:f8:a6:f0:5f:4d:f4:6b:9c:a0:5e:
2a:b6:ac:b1:91:10:dd:95:50:16:68:82:2a:31:90:68:23:86:
a9:29:e3:d5:54:fb:c2:41:01:91:ba:5b:77:48:e3:a9:ea:75:
87:ac:3f:99:29:de:f1:9e:a5:e4:73:e8:21:3b:8f:9c:66:aa:
35:c3:ab:fa:8c:70:cd:4e:0b:5a:7f:1e:6d:2e:fe:62:bd:ba:
ed:2b:fe:3d:24:12:b1:f8:24:84:e8:a3:ed:61:d1:7f:69:88:
22:3b:27:09:ac:fc:03:4d:1e:d0:69:d3:f6:da:71:d0:6d:fd:
7e:aa:7e:0a:36:ff:bd:af:23:22:b6:cc:fb:db:78:12:72:62:
aa:b9:ba:ef:fb:ed:aa:a7:de:b8:25:79:1d:cb:4c:fa:97:81:
1f:a8:4e:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gcda5fTHLHzKtAIndLyxuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZjRmYTgwNzU4NzUzYjI0M2EyMTY1ZWRkZWE3NWRiZWVl
ODI2YzQwHhcNMjYwNzI2MjIwMDQyWhcNMjYwNzI3MjIwMDQyWjAzMTEwLwYDVQQD
EygyMTM0YWU1YzBlZmUyMzNmNTY4YTVhNzJiNDU2MDNlMjlkZjlmYTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQ/IdDlyvMlqIemU+ThwIVrIG41I
jUaHBRlUrkX4v2/czR0yFGp2O41AmVeIFEnqeEb9VsgzKWo5hqNEJ+s6kA0hMuOY
eMCw2IHQGs+JqYv15pn6fnKxB3Cn+thR4ykB6gS6jPGNWvEA0M2yMF2pf2spdicU
ART7uttFl0wK55ALcZ2YhoSeXGAg1/f03QavVMFxRS5ivqYaNKzDXqHf4LSns7gi
TG+Y97QgL1FHoCxk1nNfCSOx4k63H0m+WuHNzpaDsD+M8QvpKDRU3f61P0zvOHcO
xX5e3FRw8/Yw9JN53eVQOSniKIPeRa8iQZ8U3cniNc8EFUN6D1zEI6p12QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCE0rlwO/iM/VopacrRWA+Kd+fppMB8GA1UdIwQY
MBaAFND0+oB1h1OyQ6IWXt3qddvu6CbEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFBUNmdIV0hVN0pEb2haZTNlcDEyLTdvSnNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jYTVjMTktZTQ5Ni00OWU4LThiOTMt
NzJhMWYzNzcxOWJiLzEvMFBUNmdIV0hVN0pEb2haZTNlcDEyLTdvSnNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jYTVjMTktZTQ5Ni00OWU4LThiOTMtNzJhMWYzNzcxOWJi
LzEvMFBUNmdIV0hVN0pEb2haZTNlcDEyLTdvSnNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArFWWOI/9
9XuiSRxa/22pthwO2h7XY1K/sMN4kvhjVGYaNTpGgwosfkwzlb73NTH/XLM/nkA/
Wo/yjVgVaD2iSLyfdLXdSmLIp9/c/LP3Yk3KnJHI/A4q5QLzpPJhmTLDoLr4pvBf
TfRrnKBeKrassZEQ3ZVQFmiCKjGQaCOGqSnj1VT7wkEBkbpbd0jjqep1h6w/mSne
8Z6l5HPoITuPnGaqNcOr+oxwzU4LWn8ebS7+Yr267Sv+PSQSsfgkhOij7WHRf2mI
IjsnCaz8A00e0GnT9tpx0G39fqp+Cjb/va8jIrbM+9t4EnJiqrm67/vtqqfeuCV5
HctM+peBH6hOpw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 01:55:37 2026 by rpki-client