Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
File: 0gsI5gdmjgYFAITuN5KKHAsDVJI.mft (raw, json)
Hash identifier: HBJUsfx5ZPVfLcpSxkuukO7+bvIgBlSO1mFXOgSRg20=
Subject key identifier: C2:FA:E4:45:F5:0F:10:78:AC:10:D9:58:36:28:C0:FA:13:61:84:F2
Authority key identifier: D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
Certificate issuer: /CN=d20b08e607668e06050084ee37928a1c0b035492
Certificate serial: 019F14C16E6A526AE4BB760424E5949D9F72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
Manifest number: 06B5
Signing time: Mon 29 Jun 2026 19:00:48 +0000
Manifest this update: Mon 29 Jun 2026 19:00:48 +0000
Manifest next update: Tue 30 Jun 2026 19:00:48 +0000
Files and hashes: 1: 0gsI5gdmjgYFAITuN5KKHAsDVJI.crl (hash: oKPJ8Y8rG4TlmsUWD0ZP9A4FdHVd70zLEY+KIU299DQ=)
2: Gm-t-lh2E0gK3CSrIU-gJkije_Q.roa (hash: Ono4+T4YpgzQm0xFxMzJXZM1mWa8sfDRC5aPTIXlCxg=)
3: HOPT3iuIJW2Ca5RKaQZ_7H8DEUg.roa (hash: Z7lWxJ3V5i6LgJFHNccxxl1xQSA36VYmA9LTVT4CQFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 19:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:c1:6e:6a:52:6a:e4:bb:76:04:24:e5:94:9d:9f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d20b08e607668e06050084ee37928a1c0b035492
Validity
Not Before: Jun 29 19:00:48 2026 GMT
Not After : Jun 30 19:00:48 2026 GMT
Subject: CN=c2fae445f50f1078ac10d9583628c0fa136184f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:99:18:24:88:81:0e:0b:b4:ac:93:7c:b0:3d:
0e:ee:e6:7c:3e:52:b5:f5:63:d3:6b:2a:7f:29:f1:
eb:d3:dd:b6:81:19:f0:24:a9:72:0c:45:40:f5:45:
d9:a9:f6:05:1b:49:79:1f:c9:60:e5:e4:ca:7f:a9:
aa:81:22:19:96:c6:f1:48:f9:03:88:ea:d2:33:9b:
a6:e3:51:8f:01:f6:18:44:94:90:58:de:69:57:62:
6d:e4:d4:af:ad:9a:6c:b0:07:43:14:f6:b9:f4:6f:
4f:98:7b:b2:6e:7e:e8:ee:a4:f9:aa:e9:b7:8d:a3:
bf:63:dd:4d:8e:58:be:4e:ff:79:69:df:8c:d3:52:
78:18:32:4d:24:69:ae:b6:5b:6d:cf:52:fa:65:7f:
41:ad:2a:c5:d1:80:7c:58:48:71:37:1d:5b:9d:c1:
39:53:6b:04:56:f6:e8:ac:3a:a9:77:0d:62:ac:51:
ba:23:9e:a4:71:d6:36:58:c7:e4:18:e8:cf:97:b0:
f9:86:16:5c:3a:5c:b1:13:88:59:ea:81:b2:0c:29:
a0:d2:55:e6:47:04:c5:80:8d:8d:44:ba:7b:e8:a9:
53:00:79:f9:23:4a:1b:05:08:ae:4c:65:fb:f8:f1:
c8:29:be:be:c4:43:7d:80:45:93:78:dd:77:66:13:
06:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FA:E4:45:F5:0F:10:78:AC:10:D9:58:36:28:C0:FA:13:61:84:F2
X509v3 Authority Key Identifier:
keyid:D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:15:a2:33:49:54:4d:18:19:35:44:7f:91:5f:87:10:ba:50:
ec:f7:38:92:29:e6:a3:69:24:0e:e5:76:f0:95:ac:34:30:57:
cd:2a:76:46:f3:90:a6:da:af:7b:f5:40:21:34:ee:c1:f9:fd:
26:b5:34:d6:38:2e:ad:65:c0:a8:3e:7a:32:47:e1:68:bd:2c:
1a:e0:40:79:bf:dc:d2:e5:3e:8b:78:3e:ca:6b:b0:a2:2d:9c:
61:6d:00:37:5d:d8:01:e7:ef:1b:08:d1:c8:65:94:aa:41:c4:
37:a1:5c:f7:75:3f:3a:ce:e8:dc:ee:b4:e8:e6:a7:9c:21:16:
9e:23:a7:44:c8:1e:9c:57:f2:29:46:5b:f9:be:09:32:27:54:
a2:3c:89:1d:95:b8:dd:48:e8:a2:aa:64:fb:6b:d2:97:fb:cc:
68:8e:a0:bd:8f:64:44:9b:3c:18:d1:a5:9c:86:e8:be:53:07:
7c:49:4a:86:4a:4e:d4:97:fb:2e:59:7d:7a:98:b9:1c:b6:58:
3b:dc:05:9c:51:3a:6b:5e:55:06:26:3a:17:c9:fb:5f:d5:7c:
66:9f:95:23:85:1c:58:50:25:4a:c2:a7:3f:5f:d9:fe:4b:06:
e2:51:1a:d7:46:fc:d6:af:ef:bb:5c:f6:6e:c7:49:83:7c:a4:
16:ff:40:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 01:28:36 2026 by rpki-client