Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ab49f2-301d-4a36-86a3-3f8695d7e4df/1/0vP4aGthfF-Ryb3Blzuimh5KCQY.mft
File: 0vP4aGthfF-Ryb3Blzuimh5KCQY.mft (raw, json)
Hash identifier: ZppanuXMbhNUqYrck3GSVE2ohkSg+JV0pbA5/QyRWzQ=
Subject key identifier: 70:D2:37:47:A1:C0:14:0C:7A:42:DF:48:6F:7A:8B:12:1E:DD:8A:3B
Authority key identifier: D2:F3:F8:68:6B:61:7C:5F:91:C9:BD:C1:97:3B:A2:9A:1E:4A:09:06
Certificate issuer: /CN=d2f3f8686b617c5f91c9bdc1973ba29a1e4a0906
Certificate serial: 019EB6570B43B8ED7585F70F385753DB0747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vP4aGthfF-Ryb3Blzuimh5KCQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ab49f2-301d-4a36-86a3-3f8695d7e4df/1/0vP4aGthfF-Ryb3Blzuimh5KCQY.mft
Manifest number: 73
Signing time: Thu 11 Jun 2026 11:00:18 +0000
Manifest this update: Thu 11 Jun 2026 11:00:18 +0000
Manifest next update: Fri 12 Jun 2026 11:00:18 +0000
Files and hashes: 1: 0vP4aGthfF-Ryb3Blzuimh5KCQY.crl (hash: CHqfjW+T9gKzyT5z9YSVmG7GAK1JTwAaHzBG/nQYBnw=)
2: lU_WZzSGPkN2lCXxCgcT0qQBuOo.roa (hash: tCgmfSIJNiS09xw5Xo1JHjiKnprFuPx/FKkDIUMpTuk=)
3: nTRfa4CEfSEPj4ycmsgCW3AglMw.roa (hash: pESFbqN8pdSMrVdxz/DWJSvAlDHXy+G546a5D6LdrE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ab49f2-301d-4a36-86a3-3f8695d7e4df/1/0vP4aGthfF-Ryb3Blzuimh5KCQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ab49f2-301d-4a36-86a3-3f8695d7e4df/1/0vP4aGthfF-Ryb3Blzuimh5KCQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vP4aGthfF-Ryb3Blzuimh5KCQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 11:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:57:0b:43:b8:ed:75:85:f7:0f:38:57:53:db:07:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f3f8686b617c5f91c9bdc1973ba29a1e4a0906
Validity
Not Before: Jun 11 11:00:18 2026 GMT
Not After : Jun 12 11:00:18 2026 GMT
Subject: CN=70d23747a1c0140c7a42df486f7a8b121edd8a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6c:46:21:2d:56:2d:e9:ab:b8:df:e4:38:f0:
d9:cc:a1:ef:75:c5:c5:3d:65:66:d2:c3:5c:ba:c1:
d7:d2:f3:5e:25:d8:bc:60:7f:96:02:2d:59:28:9d:
48:a6:b1:0c:a0:94:68:35:7c:a3:60:1d:9d:15:8a:
b7:c3:43:1b:28:54:76:44:ce:0d:fc:6f:25:84:7b:
09:7e:09:6d:c1:7b:7d:0e:45:a4:fd:e2:be:26:5d:
81:2a:95:91:a9:f2:0e:86:30:12:59:39:1a:60:22:
93:5b:0e:38:fd:f8:f2:c8:ca:12:58:4b:fb:d4:f8:
35:83:c9:52:83:a7:7f:f4:2e:80:6b:51:d8:a3:5e:
64:ba:9c:ac:c8:f0:32:23:13:ec:71:c8:2f:be:55:
48:bc:23:5b:47:2e:c6:cb:ea:3b:9d:bc:1a:03:16:
9c:38:12:4b:06:36:16:bf:d6:92:85:f6:56:e8:b3:
78:5e:eb:c3:e4:70:02:b4:e3:51:95:12:f8:30:ba:
33:11:c7:cd:da:45:f6:87:a2:76:c2:d0:74:a8:62:
30:e6:ff:1a:08:0c:22:39:47:15:c7:eb:f9:5d:d6:
5d:72:53:8b:70:b8:5e:9e:85:79:5a:97:b8:9f:4e:
6c:1a:a9:cf:95:a6:ec:1c:f3:9d:29:25:1e:d9:8b:
aa:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D2:37:47:A1:C0:14:0C:7A:42:DF:48:6F:7A:8B:12:1E:DD:8A:3B
X509v3 Authority Key Identifier:
keyid:D2:F3:F8:68:6B:61:7C:5F:91:C9:BD:C1:97:3B:A2:9A:1E:4A:09:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vP4aGthfF-Ryb3Blzuimh5KCQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ab49f2-301d-4a36-86a3-3f8695d7e4df/1/0vP4aGthfF-Ryb3Blzuimh5KCQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ab49f2-301d-4a36-86a3-3f8695d7e4df/1/0vP4aGthfF-Ryb3Blzuimh5KCQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:0a:3d:77:13:ec:fc:be:d3:ab:42:1e:af:29:06:24:86:6b:
0b:24:da:e5:e8:c2:58:f6:4e:fa:68:2f:3f:58:f0:5b:2b:5a:
58:90:1a:f5:79:50:09:bd:95:45:37:9e:35:fa:ed:06:1c:30:
24:6e:3b:32:3e:71:98:eb:1c:29:88:63:6b:cc:76:41:af:67:
14:84:40:59:78:f7:f0:12:a5:54:5a:97:79:2f:ba:97:98:d5:
cb:3f:ad:fd:fc:22:0a:a8:08:92:fe:13:aa:a9:f4:69:17:62:
18:6c:46:b7:2a:e7:05:9e:a3:35:e5:90:2d:50:0a:d8:c2:dd:
e7:43:36:62:be:47:e4:be:18:5c:dc:c8:a0:70:67:57:5c:4e:
2d:0f:31:59:64:66:04:dd:83:fa:57:36:18:59:1a:9c:47:32:
b2:9a:ff:06:4d:ad:30:9c:00:c5:f8:af:fd:e5:b6:f6:29:b7:
7c:a7:e1:f7:8b:d4:53:15:d7:93:a5:b0:fe:6b:de:43:47:02:
59:b0:e9:4a:3a:37:cf:a3:cc:c3:d5:40:fa:e6:2e:81:42:2f:
6c:90:86:a3:a8:44:56:9b:66:5e:cd:f1:5f:d5:33:bf:a3:cd:
04:17:73:a3:a8:6f:ed:81:be:f2:9b:d8:8b:67:a5:4c:9a:70:
22:8a:3f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 15:37:45 2026 by rpki-client