Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
File: r0eMzcBICmtDus2KruAHmxbsLmg.mft (raw, json)
Hash identifier: 4pvIqyuETHy6uz+i7k12e2DfxTzFL1fE+DBhaU8w9ls=
Subject key identifier: 07:DF:90:08:4F:C1:08:C8:35:88:9B:CD:5C:54:05:0A:89:43:32:28
Authority key identifier: AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68
Certificate issuer: /CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68
Certificate serial: 019F1A1F05559314D05FB6C7987DC76A5A34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
Manifest number: 0C0A
Signing time: Tue 30 Jun 2026 20:01:08 +0000
Manifest this update: Tue 30 Jun 2026 20:01:08 +0000
Manifest next update: Wed 01 Jul 2026 20:01:08 +0000
Files and hashes: 1: r0eMzcBICmtDus2KruAHmxbsLmg.crl (hash: mQgwA5i01xojt6f5vpBI/mgo+X1rqZ7kqVnpVBedi0o=)
2: schhp52ulEJ2Q5lWWzeviWV-gSw.roa (hash: HhUn0pI+C/AL7qljIPdAHULHb8txQJ+RtoE68bF3XwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:1f:05:55:93:14:d0:5f:b6:c7:98:7d:c7:6a:5a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68
Validity
Not Before: Jun 30 20:01:08 2026 GMT
Not After : Jul 1 20:01:08 2026 GMT
Subject: CN=07df90084fc108c835889bcd5c54050a89433228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7c:42:04:7a:d2:de:f1:41:4e:19:ff:fc:3e:
f8:75:08:67:50:85:42:52:cf:d3:57:7a:40:76:48:
96:8b:83:ae:b2:1b:50:65:e7:eb:26:7d:5f:4e:f1:
49:92:20:ea:a4:b6:f5:3b:29:6b:1b:9f:bd:80:b9:
40:15:53:7a:8d:ab:df:21:7f:1d:95:74:61:d3:14:
ee:a6:37:4a:8f:45:63:c4:e5:dc:71:97:85:47:92:
b3:9c:85:4c:56:0d:6a:aa:37:1b:f0:a6:fa:74:03:
10:5c:bb:e0:94:fb:bd:04:57:2f:c3:7d:b2:0f:10:
c1:ff:40:f4:64:b1:a4:a4:d7:1b:5f:53:ad:2d:f1:
0b:f8:e6:60:ea:2b:02:82:eb:bd:4d:8f:13:16:86:
93:b2:53:d4:c7:24:aa:6b:4b:6b:a0:4f:71:7b:03:
f5:af:40:f5:22:a2:97:c2:49:96:fb:64:10:17:7e:
14:6e:a0:4a:b5:8e:2a:61:c2:5b:e5:6f:a0:77:9c:
50:1d:14:0f:71:ca:3c:02:fd:e0:3b:81:d8:97:d6:
a5:67:b0:41:29:44:f7:c7:5e:b7:a1:fd:e1:6f:e4:
06:b8:ce:d2:c8:24:f9:0c:04:18:72:99:3d:42:6b:
e4:9c:9c:0f:c3:be:b9:b2:23:44:54:14:eb:01:a0:
dc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DF:90:08:4F:C1:08:C8:35:88:9B:CD:5C:54:05:0A:89:43:32:28
X509v3 Authority Key Identifier:
keyid:AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f3:43:fc:4d:39:e1:4a:17:b5:ae:fc:88:07:6e:f3:55:08:
10:93:44:6b:4b:6d:b1:90:50:ea:ec:d0:e3:0d:f9:34:5b:08:
8f:03:4b:44:96:0a:01:06:3b:83:bf:f2:d3:63:73:1e:c7:a3:
36:8a:3c:24:c5:a6:02:16:a6:cc:50:72:73:d4:98:81:17:8f:
04:df:0c:05:5d:ff:52:d5:3f:fb:b8:94:5a:1f:cb:74:6e:7a:
e1:d6:7d:cd:31:24:a3:ba:6e:64:d9:10:6a:d2:7a:04:ff:f4:
2c:16:f1:b9:f1:42:8a:a4:9a:cc:ed:34:47:20:1a:50:1b:f5:
4a:44:6f:04:7b:7f:96:34:6f:64:f9:db:35:dc:e4:62:43:c5:
9e:a3:b4:5d:c7:1e:58:5c:7e:c7:f5:f2:db:87:3d:5e:0f:5e:
fa:71:68:0e:50:47:02:ac:5c:b2:75:19:34:5d:47:95:97:54:
f7:0c:80:f8:2c:72:62:e7:4e:fb:b1:32:61:0a:04:57:fe:58:
7a:72:8f:a6:d7:5f:0c:82:61:d5:7a:c3:7e:82:0f:e5:f0:49:
47:f1:bc:a0:9e:a5:67:43:ff:cd:8d:fc:84:ca:73:ef:27:f8:
5b:36:94:5b:97:06:30:e6:bc:da:64:3a:c4:93:3a:8b:89:11:
4c:c9:b4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 02:19:08 2026 by rpki-client