Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
File: 0VK0wfXUhO78KxWX9FUAOrZUsFU.mft (raw, json)
Hash identifier: o8MjqevyoXNTGkS12njtg1bOScZETvif5k6l57Qh0AQ=
Subject key identifier: AE:97:D1:D3:CC:37:26:92:FD:74:41:D9:1A:BC:03:BF:F5:92:37:B1
Authority key identifier: D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55
Certificate issuer: /CN=d152b4c1f5d484eefc2b1597f455003ab654b055
Certificate serial: 019F1830CD4C4D3B0AB4E5D9FE4CFA49D254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 11:01:19 +0000
Manifest this update: Tue 30 Jun 2026 11:01:19 +0000
Manifest next update: Wed 01 Jul 2026 11:01:19 +0000
Files and hashes: 1: 0VK0wfXUhO78KxWX9FUAOrZUsFU.crl (hash: Y7jqm88vrgk5DmdmBrrdBzcwpyd6SZXgmIqgKapXzRY=)
2: NP9SfFGYsYXsch7Dr3qELq74PLU.roa (hash: fuLAQTL3YUInXQtx9TnphHOeZzSHEh2X+xButoDoLCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:cd:4c:4d:3b:0a:b4:e5:d9:fe:4c:fa:49:d2:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d152b4c1f5d484eefc2b1597f455003ab654b055
Validity
Not Before: Jun 30 11:01:19 2026 GMT
Not After : Jul 1 11:01:19 2026 GMT
Subject: CN=ae97d1d3cc372692fd7441d91abc03bff59237b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b9:52:49:40:19:83:42:1d:e9:16:8f:99:36:
2b:a3:98:94:f2:39:cc:3c:d2:1e:27:01:a3:a0:a8:
9b:49:df:e3:67:17:7b:45:ae:f0:74:51:12:25:d5:
17:0d:a6:86:82:53:b3:14:12:c0:38:2b:bc:4a:30:
7f:e5:e3:b3:0f:6e:b5:6d:a0:9d:36:83:34:0d:62:
96:ac:ae:e2:61:97:58:8f:f2:80:e3:dc:2b:af:79:
ad:30:13:77:53:90:25:49:7e:e1:18:ab:54:b8:8e:
30:6b:26:e3:f0:63:b3:69:cc:cb:af:8d:6e:f7:00:
ca:fc:44:0b:84:b7:1c:4d:be:26:7f:6d:67:ea:55:
eb:c4:f0:e7:65:7c:02:81:4c:96:66:fa:37:29:5f:
82:f1:b8:82:c2:f6:fa:a5:b0:fe:d2:db:f7:10:74:
1d:47:1b:e8:21:59:ab:01:97:12:4a:55:ee:65:4f:
7b:9b:86:cb:62:7f:17:48:9d:7d:3a:c4:6b:20:eb:
8f:0e:32:09:ba:19:cf:98:1f:40:b3:92:e8:20:15:
60:b2:65:35:b3:be:dc:5c:ae:8a:93:c4:ce:25:f2:
aa:90:06:24:a5:60:56:5d:ac:81:96:ca:7b:b7:e3:
c2:9f:bf:5c:03:aa:51:38:ad:0d:8a:a5:5b:44:60:
81:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:97:D1:D3:CC:37:26:92:FD:74:41:D9:1A:BC:03:BF:F5:92:37:B1
X509v3 Authority Key Identifier:
keyid:D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:4c:ca:78:25:a0:ba:02:95:e2:f1:a1:eb:a6:f6:d1:97:41:
98:9c:a5:e7:67:8b:ac:6c:6e:48:13:5d:dc:ae:5e:78:09:b4:
15:75:c1:14:ea:c9:b0:f1:72:89:74:65:8a:e5:b1:da:8b:88:
2b:97:48:27:f1:13:ee:4a:d5:d3:f3:6e:8e:b2:c5:26:1d:c3:
3e:04:f0:cb:f8:d9:d9:70:37:15:08:61:97:e7:99:97:ad:5e:
b3:e3:78:9a:81:d1:05:5a:2c:c9:bb:6e:f7:a7:3d:4f:61:68:
44:21:e6:88:0f:54:4f:9c:79:5f:b8:c1:e8:b8:d0:88:15:ce:
92:a9:f9:98:a5:99:2e:77:56:04:ec:15:ab:63:f1:99:20:14:
da:91:31:ad:3f:fb:c3:45:00:06:f1:58:27:75:fd:85:3a:b8:
f0:49:ec:a4:de:f4:51:d3:f7:56:ba:f8:57:e0:92:65:98:6c:
a8:96:3f:9f:6a:c2:0d:87:95:3d:4e:d2:70:97:f7:5b:cd:70:
8c:3d:eb:cb:f3:3b:76:bb:93:18:1a:ce:8a:89:4f:d4:dd:70:
34:d0:ca:c3:45:35:db:96:9f:5f:c4:3f:e0:f6:4e:de:22:2f:
c1:c6:fd:c6:fd:4d:e4:ec:55:c0:ff:91:cd:06:e2:d6:89:17:
83:fc:0f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:38:05 2026 by rpki-client