Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
File: A83mT0Foo_OZt3SU2Urqdyksm88.mft (raw, json)
Hash identifier: tk8QHkqx4Po9QfrA2m77pRjyfSJHc4hsgEMbolojLXg=
Subject key identifier: D2:D4:43:6D:63:61:92:0E:B6:70:F4:2C:F7:8C:30:65:DD:CE:88:5E
Authority key identifier: 03:CD:E6:4F:41:68:A3:F3:99:B7:74:94:D9:4A:EA:77:29:2C:9B:CF
Certificate issuer: /CN=03cde64f4168a3f399b77494d94aea77292c9bcf
Certificate serial: 019F186786E6307468A4610E3DB4D689524E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
Manifest number: 14EE
Signing time: Tue 30 Jun 2026 12:01:05 +0000
Manifest this update: Tue 30 Jun 2026 12:01:05 +0000
Manifest next update: Wed 01 Jul 2026 12:01:05 +0000
Files and hashes: 1: A83mT0Foo_OZt3SU2Urqdyksm88.crl (hash: 9VEXImaJSxqNBLR400eH8DpixTxTBd1dq3GoL78Qato=)
2: VqbW8hWa6U_90YgDAsOUDVLHuCw.roa (hash: quQX28Hjb85Vem897JezSZ+lGMfYDszka76M0Xq2SLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:86:e6:30:74:68:a4:61:0e:3d:b4:d6:89:52:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03cde64f4168a3f399b77494d94aea77292c9bcf
Validity
Not Before: Jun 30 12:01:05 2026 GMT
Not After : Jul 1 12:01:05 2026 GMT
Subject: CN=d2d4436d6361920eb670f42cf78c3065ddce885e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8b:02:fc:e0:20:b9:6e:19:fa:e7:f2:1c:3b:
ce:6f:f5:83:39:e0:20:48:4f:d0:b1:dd:0d:92:63:
24:8c:9d:43:dc:b6:c5:ac:b1:0c:83:44:ae:67:b9:
b0:32:88:ef:aa:80:8f:56:ab:96:62:d2:55:91:19:
70:eb:d7:f2:a8:a7:86:de:82:26:4a:dd:12:97:94:
81:b7:dd:5e:2c:74:26:d2:ac:b4:4a:9e:55:b6:61:
0b:76:96:50:44:67:48:52:ba:71:5f:fb:a3:1a:6a:
cf:92:11:0c:b1:d8:f0:11:af:ee:63:11:fc:38:61:
2f:3c:d5:50:ea:6f:9c:5e:09:45:6f:fa:9a:8d:52:
e2:95:09:43:99:52:85:ca:5b:7a:64:6c:0c:c7:a4:
00:ed:55:d1:98:7f:e7:b9:50:83:f0:12:6b:74:46:
74:23:82:53:f8:96:af:36:ab:ef:5c:63:c8:69:81:
16:85:d0:97:5f:01:49:e1:16:b8:67:ad:ac:4e:db:
ad:a5:68:07:89:02:15:d3:0a:0d:47:49:f4:0a:86:
83:df:42:a1:b3:a0:b7:88:aa:36:ea:57:40:61:71:
30:4a:e9:92:e9:55:8c:24:c8:7d:f2:05:9e:b0:e9:
c3:47:7b:b6:40:5d:91:80:fd:e5:91:c2:0e:b2:37:
fa:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D4:43:6D:63:61:92:0E:B6:70:F4:2C:F7:8C:30:65:DD:CE:88:5E
X509v3 Authority Key Identifier:
keyid:03:CD:E6:4F:41:68:A3:F3:99:B7:74:94:D9:4A:EA:77:29:2C:9B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a0:77:aa:9a:d6:7c:22:90:14:ef:ef:8d:6a:f9:80:75:e7:
6b:79:71:32:50:3e:d9:15:05:70:57:e1:20:54:99:e9:1a:2b:
22:aa:37:2d:50:ab:e9:08:6d:43:92:39:ac:15:9c:f8:95:44:
84:1f:81:22:ea:ad:e9:e0:96:ed:f6:84:b6:54:c5:8f:0c:08:
d0:48:9f:3c:e9:88:60:be:76:da:f1:02:44:75:45:a2:13:c5:
46:53:54:28:fb:a5:43:63:d4:92:e1:af:1e:be:a4:d6:bb:28:
e8:fe:f2:69:6d:ac:89:4a:56:da:24:98:bd:ac:89:fa:be:a6:
d9:01:ac:85:1e:62:a8:52:b1:a5:e9:d5:3d:d6:7a:8c:d1:8a:
d1:3c:2e:86:53:f4:62:89:4f:6b:04:27:a5:79:4a:ec:2f:a4:
79:df:57:63:03:b6:56:3b:88:ec:09:78:3e:5c:34:bd:9e:35:
55:18:dc:07:b2:36:e2:be:c8:29:a0:54:6b:ae:10:a1:cb:90:
6c:51:d5:38:d9:a7:80:8c:65:17:72:8e:60:ae:21:92:19:f4:
a1:8c:da:74:96:e0:27:cf:a7:c2:ac:9c:73:2f:15:2a:a2:fb:
0d:b0:9c:35:89:15:b9:4a:5c:96:d2:8f:1a:a0:f5:84:b0:02:
f8:9f:ec:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:07 2026 by rpki-client