Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
File: 0mHPvAfsMGN33LFql6EWDHptgsw.mft (raw, json)
Hash identifier: Wm6mT4oif6AMyvwu9wR64WaJMeY+mP2GlJ2BBr/ir5U=
Subject key identifier: 03:AA:68:20:C9:2E:03:54:43:74:64:81:70:70:69:4A:90:AE:AA:29
Authority key identifier: D2:61:CF:BC:07:EC:30:63:77:DC:B1:6A:97:A1:16:0C:7A:6D:82:CC
Certificate issuer: /CN=d261cfbc07ec306377dcb16a97a1160c7a6d82cc
Certificate serial: 01A000933FD0BE2F833FB735418B1819AA59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
Manifest number: 0642
Signing time: Fri 14 Aug 2026 14:00:45 +0000
Manifest this update: Fri 14 Aug 2026 14:00:45 +0000
Manifest next update: Sat 15 Aug 2026 14:00:45 +0000
Files and hashes: 1: 0mHPvAfsMGN33LFql6EWDHptgsw.crl (hash: zdHsqOr7INCo3P4nhE50AbmGMgN+SoO5y9z/Li6XvHY=)
2: WrFq8U6oGpZOyYQTgpsxtULaHpY.roa (hash: DaTkNKa/8bSzoEGirYCzYE6s6ctR7ykUWbX1j0yLFaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:3f:d0:be:2f:83:3f:b7:35:41:8b:18:19:aa:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d261cfbc07ec306377dcb16a97a1160c7a6d82cc
Validity
Not Before: Aug 14 14:00:45 2026 GMT
Not After : Aug 15 14:00:45 2026 GMT
Subject: CN=03aa6820c92e0354437464817070694a90aeaa29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:70:ce:60:52:28:e5:ae:92:62:a9:6f:0f:db:
e2:cf:b1:f6:d5:a8:8c:8c:2c:c1:f0:e7:03:c4:a8:
df:b1:0b:a1:60:25:b0:3b:21:d0:5e:13:2c:f6:6a:
9a:2d:1e:72:67:d3:77:60:48:fe:4f:b9:00:08:fd:
3c:e1:8f:67:7a:48:de:4d:9d:ba:9b:26:6c:18:c1:
bb:60:aa:2c:56:ea:0f:fa:ea:a3:3f:b6:41:e9:b0:
e8:7d:86:c6:e1:7c:8c:77:c8:59:e3:87:ee:2c:85:
34:cb:4c:fa:5c:96:53:93:16:60:30:34:a5:07:ca:
5e:40:e4:0f:56:09:7f:44:75:fd:53:e0:86:62:b9:
87:bf:a1:bd:0b:9a:e4:51:11:99:d1:5d:f0:1d:4e:
e6:3c:f5:04:d6:7a:79:42:ee:b8:41:c9:ac:b4:cf:
93:f4:c6:a6:c6:8e:5a:6e:8e:4d:14:47:00:06:95:
a0:7e:de:2a:ec:dc:6e:31:e5:bc:99:fe:e7:ac:a4:
03:94:17:83:1f:c9:f3:00:51:f7:39:28:c7:1a:8d:
2e:51:70:20:87:45:e2:00:33:2a:d1:8e:89:a5:05:
1a:ee:48:2d:7d:09:7b:1a:7d:c3:d9:2e:77:a9:7d:
71:b5:0f:36:1a:57:f5:d2:6f:0e:bb:c6:27:a2:69:
66:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AA:68:20:C9:2E:03:54:43:74:64:81:70:70:69:4A:90:AE:AA:29
X509v3 Authority Key Identifier:
keyid:D2:61:CF:BC:07:EC:30:63:77:DC:B1:6A:97:A1:16:0C:7A:6D:82:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:95:ac:8f:87:a9:ca:f5:a4:88:f7:a2:4a:b3:50:25:8c:36:
94:d1:36:bd:8e:83:62:5f:e5:00:0a:1e:73:67:47:ba:21:e5:
fb:74:d6:d2:b7:ec:b1:e5:f5:bc:4f:f3:f9:b7:04:86:2b:fe:
05:14:41:0c:e9:3b:24:a5:dd:05:ef:fc:72:d2:db:15:d2:79:
22:be:5d:6c:88:fd:5d:41:3c:49:6f:4f:e4:aa:a8:0f:32:08:
a9:f8:c5:ab:c2:39:28:58:19:61:2e:29:e0:d9:d2:3d:8d:a1:
51:ec:cd:ba:f0:2b:d5:74:c6:d8:26:8f:b5:c1:25:d5:e0:5d:
dd:cd:23:04:4f:10:a5:d8:ef:24:bd:79:27:7f:ea:58:a4:04:
78:47:af:2a:de:b2:73:2c:be:4d:df:33:a5:5e:2c:29:eb:85:
5e:09:61:da:e2:09:41:f4:7f:5d:e4:ec:55:de:88:64:07:4d:
2f:40:f1:e8:88:41:1c:b0:eb:92:3b:d4:62:59:fb:e2:94:a8:
b1:d5:35:4f:f7:f3:de:60:76:e8:ae:f1:d5:b1:f3:c6:5c:fb:
e3:6f:dc:33:22:be:1e:ea:bc:e7:58:fb:ac:37:55:6b:81:3d:
0d:ba:09:9d:28:e4:c4:c9:a6:67:19:fb:c1:61:45:33:ed:e7:
f9:f3:a4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:03 2026 by rpki-client