
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
File: A0sO7SxaeHrYf7SfBNP989D0nUw.mft (raw, json)
Hash identifier: q9eeZobm2aYIM7bxmF0V8gK24GOE9ShxhQv1dhR8vLc=
Subject key identifier: 63:B3:E6:43:53:E8:80:78:EE:65:9E:90:21:FA:48:79:6B:7A:C0:90
Authority key identifier: 03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
Certificate issuer: /CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Certificate serial: 019F17F93E03C03DBE005799AEC0F104EB5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
Manifest number: 198C
Signing time: Tue 30 Jun 2026 10:00:38 +0000
Manifest this update: Tue 30 Jun 2026 10:00:38 +0000
Manifest next update: Wed 01 Jul 2026 10:00:38 +0000
Files and hashes: 1: A0sO7SxaeHrYf7SfBNP989D0nUw.crl (hash: zt9VgSWciYU2c79uNbZ8puiIt3BtIhPbz73KH3ll3Rs=)
2: AnjhFMrWNEvE6l4HScTxK_j27SU.roa (hash: q/okpxUfXsi/Ghlksygzoe9SFHbeI77lnOKud4Wi2WM=)
3: ZRqL0ZQYom47oCvdLADk1vcBuk4.roa (hash: GIVmQ7w9VSaVEEGnKk80w5fPNmlaYNBnsxkMwqLM9S8=)
4: s-hYEuR7QzCMZYkhMtC8P1oHx24.roa (hash: xVxCRO6iWAgbZPNlY9qjziiMXXmRZfi75ei52vrfj30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:3e:03:c0:3d:be:00:57:99:ae:c0:f1:04:eb:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Validity
Not Before: Jun 30 10:00:38 2026 GMT
Not After : Jul 1 10:00:38 2026 GMT
Subject: CN=63b3e64353e88078ee659e9021fa48796b7ac090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c0:e9:36:97:b1:f7:81:80:7c:53:5f:09:34:
7f:61:df:99:38:a1:eb:f3:b4:77:da:b1:0e:43:b5:
a5:55:87:c3:b3:44:f8:bc:fb:cf:d0:ba:d4:d7:af:
a4:ab:c9:42:dd:8e:9a:b2:0f:54:9e:22:c0:cf:a0:
61:06:43:de:cd:37:22:45:1f:9d:f2:9f:ef:e2:3a:
db:3e:ea:5d:32:fc:92:9c:f3:bf:cf:c2:23:82:17:
d1:86:b6:a3:48:64:75:5b:6d:c7:3c:35:09:0c:4c:
5b:7c:3d:d1:99:5a:73:55:b6:61:60:b1:1d:96:30:
73:dd:96:9d:d1:fb:c5:ed:da:5e:8d:96:c8:a7:4c:
fc:01:d7:b9:bc:62:1a:89:11:eb:94:5d:21:e1:0b:
96:fb:eb:5e:63:67:16:5e:79:75:ea:69:ea:d8:33:
94:84:a4:38:f1:37:2b:bb:70:37:54:12:c2:ce:6d:
e9:2e:75:7c:18:87:69:f9:39:f4:41:13:4c:9c:75:
7a:3c:1c:57:4f:bf:67:0d:8a:40:4d:42:af:f4:f3:
3b:45:ac:59:d7:5f:b0:c6:e3:f5:db:81:d2:2b:77:
61:d3:1e:c7:b8:aa:9c:0a:a7:da:ec:eb:55:36:46:
85:43:06:b7:ba:ca:44:97:da:47:38:01:03:56:ce:
95:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B3:E6:43:53:E8:80:78:EE:65:9E:90:21:FA:48:79:6B:7A:C0:90
X509v3 Authority Key Identifier:
keyid:03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a1:7e:bc:b3:e2:76:fb:60:27:b2:a2:8c:51:93:48:50:52:
cd:9a:4b:1c:3e:71:c5:46:90:4c:e3:78:b3:f2:f2:4c:7b:4a:
01:90:f0:49:b3:d2:02:de:b6:f7:77:45:1b:85:39:e7:35:03:
29:0c:ac:bc:89:34:20:b1:61:3b:93:25:c6:ee:12:ef:ff:76:
ca:95:ae:16:c4:81:55:6a:1c:67:57:39:10:ad:9d:b1:59:39:
73:be:51:8b:ce:d8:06:19:1f:53:21:ea:be:8b:5f:f2:26:32:
09:6f:70:ac:c8:51:fc:32:f8:29:49:04:e9:98:b3:04:3a:37:
09:16:54:a9:2f:3e:c5:df:c0:01:72:72:54:1b:80:dd:e8:35:
42:8b:48:0b:ab:ef:02:f0:68:b7:46:67:ad:53:29:ba:3e:68:
05:a1:80:24:bc:27:70:d3:97:87:4e:1d:0a:f2:48:15:de:08:
0b:74:1b:0f:63:db:b5:14:8d:c0:e1:3f:e7:b4:f6:8a:67:15:
23:ae:5f:f4:8a:8a:63:71:db:ec:48:f5:aa:81:bd:fa:24:26:
4c:7a:0e:30:a0:7d:f9:e3:c9:88:b3:8d:06:aa:8d:9c:f3:a6:
26:3b:87:20:9f:00:9d:f4:9d:d6:49:90:73:f7:2e:be:22:71:
d8:3c:3a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:19:15 2026 by rpki-client