Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
File: 0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft (raw, json)
Hash identifier: +3B0/v+Ff22gnNUg2Q0uxb0rPOM8fjcZ7QvKdwefb3c=
Subject key identifier: 6A:01:8C:05:52:7D:76:35:26:B8:39:5B:76:2F:2B:A6:7A:B3:03:1C
Authority key identifier: D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06
Certificate issuer: /CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06
Certificate serial: 019F17C33C0EAD69155D83668E1CD201BC1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 09:01:38 +0000
Manifest this update: Tue 30 Jun 2026 09:01:38 +0000
Manifest next update: Wed 01 Jul 2026 09:01:38 +0000
Files and hashes: 1: 0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl (hash: YGcnWbu5M/UyadcdgWGERNS9ly7U6Zt8FN5XSjNoFkw=)
2: lNZ8b2GqipxFmFvx0Lw_q8EwfSo.roa (hash: qDLpSNqlibtH6zRBXzlD7tUyev4dQUA/1eIb4IG63oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c3:3c:0e:ad:69:15:5d:83:66:8e:1c:d2:01:bc:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06
Validity
Not Before: Jun 30 09:01:38 2026 GMT
Not After : Jul 1 09:01:38 2026 GMT
Subject: CN=6a018c05527d763526b8395b762f2ba67ab3031c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f9:c5:45:30:80:53:d9:f1:ba:51:ac:10:a1:
3d:d5:c8:dc:62:15:72:ae:06:e2:49:61:d0:2d:1f:
d2:e2:8f:25:2f:d5:dd:6f:be:6b:a4:12:b7:cc:d0:
8c:b6:a6:12:22:c4:bb:57:d5:83:62:1d:32:2d:ff:
b4:4c:79:7c:27:97:a6:32:85:db:b0:86:13:ae:eb:
82:4e:9b:9b:2e:50:b0:53:d6:b4:a5:bb:91:af:59:
84:bf:24:40:0c:bb:02:1e:ea:33:ec:7b:17:73:c1:
4f:10:7e:45:54:c3:b9:63:fa:29:46:f2:7c:82:98:
cf:d1:f3:3a:ed:88:17:2a:1a:3d:7f:c1:d8:fd:b9:
53:f8:99:75:e7:c3:03:fc:c1:42:d5:a9:04:6f:42:
b4:91:0b:07:5d:87:a8:ff:79:d8:c3:c4:0a:29:fa:
4d:6d:97:db:4a:f9:6b:ac:00:3f:77:1b:0f:e9:1e:
71:4f:81:6f:2d:15:9d:a3:35:0b:19:a0:f8:5a:49:
9a:9a:5e:00:5d:50:f6:7f:c6:92:f7:f9:90:d4:d3:
1b:f1:b2:7d:2e:d6:8f:6c:4d:e4:cc:1e:74:5f:71:
f6:63:8f:05:74:42:3f:69:db:45:52:8a:c6:0a:19:
5a:49:2a:61:b9:83:32:a9:a5:d7:8f:a4:30:64:3b:
0e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:01:8C:05:52:7D:76:35:26:B8:39:5B:76:2F:2B:A6:7A:B3:03:1C
X509v3 Authority Key Identifier:
keyid:D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:4f:cc:fb:1c:6a:1c:1c:b1:52:a9:8d:61:16:72:27:94:79:
99:6d:78:00:32:ca:02:92:85:1b:01:c2:37:78:f0:61:d4:26:
c6:88:4e:f7:f0:03:95:e9:f8:27:67:34:63:03:ac:52:1f:52:
f5:85:8c:d6:70:3d:69:8e:e3:eb:e2:81:36:54:f7:da:17:fc:
07:ac:e5:39:c8:cb:83:c4:48:cd:42:87:59:39:95:b2:e2:03:
3c:d7:97:10:ea:4e:3a:1e:a8:ff:ca:bb:07:a7:9a:49:de:c1:
5e:cf:ab:7a:33:c3:3d:64:21:81:78:5e:0b:c6:93:47:f8:f9:
e9:92:53:52:03:eb:9d:90:74:25:f4:74:2d:08:7a:41:46:1e:
1f:63:e3:0c:cc:dc:02:65:cf:9c:d7:40:a3:e0:19:95:e2:a1:
fb:cd:ed:7f:9a:4c:6d:44:de:79:a1:7e:cc:c3:47:9e:67:03:
2d:11:e9:10:7b:6b:4a:ca:79:3b:49:f3:d8:43:ec:b4:39:5f:
3d:9a:28:a5:55:a2:d3:e6:00:62:70:3c:f9:36:04:79:ad:7f:
74:6b:3e:df:43:3f:70:fb:57:f2:83:fe:e7:a0:b4:14:41:f3:
f7:98:a7:15:1a:95:6d:13:9c:e8:ed:16:96:96:b8:98:23:a1:
c1:a5:13:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:26 2026 by rpki-client