Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/0CIVj9T34wlqA33Dz6vY807qq9E.mft
File: 0CIVj9T34wlqA33Dz6vY807qq9E.mft (raw, json)
Hash identifier: Jvas73/N0+w7DLTWfhAc2e3JHYNlirY+IeJ+ZjndJKI=
Subject key identifier: 3D:75:EA:77:C3:9E:86:F9:EA:A0:58:3A:4D:F0:25:C0:C6:0E:54:F6
Authority key identifier: D0:22:15:8F:D4:F7:E3:09:6A:03:7D:C3:CF:AB:D8:F3:4E:EA:AB:D1
Certificate issuer: /CN=d022158fd4f7e3096a037dc3cfabd8f34eeaabd1
Certificate serial: 019F85D5E6865A4939C5E4CDB998954FD4F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CIVj9T34wlqA33Dz6vY807qq9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/0CIVj9T34wlqA33Dz6vY807qq9E.mft
Manifest number: 3A
Signing time: Tue 21 Jul 2026 18:00:15 +0000
Manifest this update: Tue 21 Jul 2026 18:00:15 +0000
Manifest next update: Wed 22 Jul 2026 18:00:15 +0000
Files and hashes: 1: 0CIVj9T34wlqA33Dz6vY807qq9E.crl (hash: 3JvfkUz/8mJyXr9CXhx95NvoT3Iagh89OfMfyVwZErg=)
2: Bz5NRIKEHWfWVwIKVd1EZ3eOmwc.roa (hash: xvKgGhY+ZlcBTXkjAQHJhU0l6IZYcdXuey6wO6lkMfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/0CIVj9T34wlqA33Dz6vY807qq9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/0CIVj9T34wlqA33Dz6vY807qq9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CIVj9T34wlqA33Dz6vY807qq9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d5:e6:86:5a:49:39:c5:e4:cd:b9:98:95:4f:d4:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d022158fd4f7e3096a037dc3cfabd8f34eeaabd1
Validity
Not Before: Jul 21 18:00:15 2026 GMT
Not After : Jul 22 18:00:15 2026 GMT
Subject: CN=3d75ea77c39e86f9eaa0583a4df025c0c60e54f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:74:56:d7:ce:c7:31:0a:38:7b:56:63:ee:ce:
87:13:20:a0:16:07:e2:a8:d9:09:56:50:4c:f2:0c:
ac:8a:f2:02:66:42:70:27:e7:df:2a:9c:e3:0c:80:
9c:82:ac:94:1c:bb:3c:f0:29:a6:fc:69:73:02:a9:
a9:27:2e:f1:0b:14:5b:00:b4:71:5d:e6:79:2e:54:
e2:a6:5e:d4:2a:53:2d:66:ab:53:3b:c1:3e:00:eb:
a2:c6:98:0d:bc:92:5c:8a:ad:fb:c2:68:60:09:cc:
04:2b:c0:d3:fa:f1:f4:f0:62:25:6d:35:d3:72:3d:
76:92:27:42:5a:33:41:1e:58:05:75:c6:ae:30:81:
b4:f7:b7:e1:39:8a:61:04:52:f6:55:db:b5:65:0d:
48:e0:c4:cf:d5:bf:77:59:2b:b6:74:71:89:15:96:
26:09:bb:e2:26:2a:45:21:93:2b:99:2a:68:f6:74:
37:51:62:99:8c:38:b0:4d:89:6c:29:25:1a:7a:07:
a3:50:bd:98:80:9e:c6:7c:46:b4:4c:6a:80:3e:0f:
f1:13:63:d7:01:e9:b4:e0:f1:45:1b:b5:30:63:63:
16:b4:9b:92:24:a2:94:76:e4:ff:60:d6:44:89:05:
00:76:a2:a4:85:22:47:58:a1:a0:90:b3:fc:5a:56:
43:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:75:EA:77:C3:9E:86:F9:EA:A0:58:3A:4D:F0:25:C0:C6:0E:54:F6
X509v3 Authority Key Identifier:
keyid:D0:22:15:8F:D4:F7:E3:09:6A:03:7D:C3:CF:AB:D8:F3:4E:EA:AB:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CIVj9T34wlqA33Dz6vY807qq9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/0CIVj9T34wlqA33Dz6vY807qq9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/0CIVj9T34wlqA33Dz6vY807qq9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:e4:cf:95:03:99:f5:ff:81:3d:d1:90:7b:e7:40:be:8a:06:
54:a9:3b:c4:cf:9f:2e:31:51:1b:a4:cd:16:b7:3d:3f:55:db:
01:76:62:10:8d:05:27:f1:99:fa:34:f8:d1:97:34:f5:c9:53:
0f:25:d5:48:40:80:95:d7:06:91:a2:67:6d:e4:02:ca:49:66:
8f:26:cd:54:eb:b5:d0:92:bf:c6:d1:6a:01:6b:6b:ec:24:4b:
5e:79:1c:7e:94:3a:89:8c:13:ab:eb:a1:01:6c:81:96:be:de:
70:23:4b:02:e8:e1:78:1b:67:ee:cf:5e:d7:17:02:4e:3a:9b:
df:fb:76:7d:20:6c:bf:02:36:f3:29:05:d1:63:3e:a9:85:eb:
1a:8d:0b:d0:bc:c5:c9:69:56:bd:37:e7:c6:78:90:fc:d7:89:
15:5a:37:d5:d1:e1:16:ce:5f:2f:d0:4d:62:be:4a:68:7d:db:
1d:22:00:47:47:f5:81:40:cf:e5:26:7c:3b:b1:bd:5b:19:01:
68:28:b4:44:6a:0e:98:82:1d:f8:5c:88:25:3b:ef:0a:98:af:
4e:7e:49:97:39:69:c2:19:48:f1:47:ad:a2:ba:cc:fe:80:93:
4e:cd:ad:2b:f7:ec:46:9c:7a:94:87:64:4d:a1:91:b4:96:17:
db:fc:ff:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+F1eaGWkk5xeTNuZiVT9T1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMjIxNThmZDRmN2UzMDk2YTAzN2RjM2NmYWJkOGYzNGVl
YWFiZDEwHhcNMjYwNzIxMTgwMDE1WhcNMjYwNzIyMTgwMDE1WjAzMTEwLwYDVQQD
EygzZDc1ZWE3N2MzOWU4NmY5ZWFhMDU4M2E0ZGYwMjVjMGM2MGU1NGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXRW187HMQo4e1Zj7s6HEyCgFgfi
qNkJVlBM8gysivICZkJwJ+ffKpzjDICcgqyUHLs88Cmm/GlzAqmpJy7xCxRbALRx
XeZ5LlTipl7UKlMtZqtTO8E+AOuixpgNvJJciq37wmhgCcwEK8DT+vH08GIlbTXT
cj12kidCWjNBHlgFdcauMIG097fhOYphBFL2Vdu1ZQ1I4MTP1b93WSu2dHGJFZYm
CbviJipFIZMrmSpo9nQ3UWKZjDiwTYlsKSUaegejUL2YgJ7GfEa0TGqAPg/xE2PX
Aem04PFFG7UwY2MWtJuSJKKUduT/YNZEiQUAdqKkhSJHWKGgkLP8WlZDYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD116nfDnob56qBYOk3wJcDGDlT2MB8GA1UdIwQY
MBaAFNAiFY/U9+MJagN9w8+r2PNO6qvRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMENJVmo5VDM0d2xxQTMzRHo2dlk4MDdxcTlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84MmQ2NWEtNDVlMi00ZWZiLWIyM2Mt
OTU1YWQ3OGJjYjA3LzEvMENJVmo5VDM0d2xxQTMzRHo2dlk4MDdxcTlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC84MmQ2NWEtNDVlMi00ZWZiLWIyM2MtOTU1YWQ3OGJjYjA3
LzEvMENJVmo5VDM0d2xxQTMzRHo2dlk4MDdxcTlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdOTPlQOZ
9f+BPdGQe+dAvooGVKk7xM+fLjFRG6TNFrc9P1XbAXZiEI0FJ/GZ+jT40Zc09clT
DyXVSECAldcGkaJnbeQCyklmjybNVOu10JK/xtFqAWtr7CRLXnkcfpQ6iYwTq+uh
AWyBlr7ecCNLAujheBtn7s9e1xcCTjqb3/t2fSBsvwI28ykF0WM+qYXrGo0L0LzF
yWlWvTfnxniQ/NeJFVo31dHhFs5fL9BNYr5KaH3bHSIAR0f1gUDP5SZ8O7G9WxkB
aCi0RGoOmIId+FyIJTvvCpivTn5JlzlpwhlI8UetorrM/oCTTs2tK/fsRpx6lIdk
TaGRtJYX2/z/aQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:41:45 2026 by rpki-client