Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
File: 0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft (raw, json)
Hash identifier: UjgJ+uiRsioyxUbRcuCmWpJr/i8jBEVCLi+JZDJXzVk=
Subject key identifier: 6F:AA:50:79:DC:68:F9:00:E4:B0:6B:CE:AF:03:6B:63:A1:BA:F2:8F
Authority key identifier: D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
Certificate issuer: /CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Certificate serial: 019F1153036046247218911C355833411E66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
Manifest number: 1237
Signing time: Mon 29 Jun 2026 03:01:20 +0000
Manifest this update: Mon 29 Jun 2026 03:01:20 +0000
Manifest next update: Tue 30 Jun 2026 03:01:20 +0000
Files and hashes: 1: 0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl (hash: 2Y/1MkVkgcMDtjPozYCylPJKK4JhI6dpZCw+Fs7ps7A=)
2: 9gVKfPDu8oaxgCYhsIHGv4QIfWU.roa (hash: fllRN8SucuRDRWnVjdcisQzmvofCxZ5K6VMo5ZRY8Z0=)
3: YOp__Ry-NGpngn9AjDGoHEbjeCg.roa (hash: ON5r8fZJQGVj6wPi39Ya/7ATYu3d/0MWZ+FMIC4DzPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:53:03:60:46:24:72:18:91:1c:35:58:33:41:1e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Validity
Not Before: Jun 29 03:01:20 2026 GMT
Not After : Jun 30 03:01:20 2026 GMT
Subject: CN=6faa5079dc68f900e4b06bceaf036b63a1baf28f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:02:9a:1f:8b:73:76:ef:a8:b7:24:6a:d8:dc:
6d:25:3e:01:70:db:82:8d:9e:41:07:cb:b4:d4:d0:
29:9a:8d:73:a0:34:98:52:01:24:82:3e:e4:b6:b2:
d4:c8:d9:42:ac:05:16:57:2a:dc:45:3c:af:0c:84:
e8:6f:e2:67:8d:02:e6:3b:9f:3b:03:56:eb:f4:0e:
93:24:a7:6b:cf:a5:fe:f4:8a:bb:4c:1e:12:a2:66:
a4:e3:91:5f:66:1e:8b:39:97:75:f9:dc:cc:18:09:
bc:5a:ff:df:bc:19:b7:2f:cc:12:22:4e:0e:1a:ed:
07:8b:27:83:06:6c:f5:5f:09:b5:b9:bd:5e:f9:f7:
ef:7d:9d:8c:d5:c7:49:1c:dc:cf:9c:d4:e3:aa:06:
6b:72:53:bc:4c:8b:b6:f5:a5:95:e0:cf:18:af:1e:
95:e7:36:87:ee:bb:fd:ea:b5:66:0c:c0:7e:ba:10:
ef:ce:b9:6a:51:26:70:0d:93:bb:c5:74:66:ee:de:
d5:05:10:dc:1d:55:13:5f:54:69:a1:a4:e3:c6:28:
e2:28:d4:1e:41:1f:35:55:cb:db:37:9b:2f:9d:7a:
cf:d9:97:fa:93:5c:ac:c0:0f:ed:95:7d:0f:ad:58:
00:4b:89:01:57:9c:a2:c1:65:d0:e6:d7:41:45:51:
77:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AA:50:79:DC:68:F9:00:E4:B0:6B:CE:AF:03:6B:63:A1:BA:F2:8F
X509v3 Authority Key Identifier:
keyid:D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:0c:89:a9:e5:14:7a:ae:c9:ed:8a:18:51:e4:58:61:8b:77:
54:b6:c1:e3:bd:39:6e:78:19:42:0a:1d:cd:55:ec:49:dd:b6:
04:98:14:d3:30:31:ea:26:32:bb:4a:95:38:38:8c:42:47:08:
3e:fb:e8:f0:cc:91:f1:4a:1b:63:32:28:c8:9d:23:c7:0c:4f:
ad:09:76:2d:48:0d:dc:13:38:35:b9:e8:3d:70:46:5c:4b:88:
f8:ae:f6:65:a5:fc:a5:16:ee:68:8e:85:83:0c:d0:3d:1b:a4:
a3:11:b6:5e:02:70:6a:6a:f4:12:d4:7f:e4:22:b2:5f:55:a2:
0c:ba:37:96:12:f0:ed:90:60:6f:a8:ae:ff:ad:bb:3d:66:92:
af:c2:fd:ce:33:e7:f6:a4:56:aa:af:40:96:76:fa:71:a4:24:
82:e4:08:87:e9:02:cb:06:7f:84:51:4f:5c:12:2b:88:6b:8c:
66:f3:12:b1:2d:99:7b:3f:60:a0:de:9e:ac:97:9b:5e:a2:30:
1e:2e:58:d1:b1:cf:42:a2:bf:56:a6:45:8d:6a:5e:2d:9c:1e:
83:7f:94:87:44:c3:60:5b:34:c2:8b:e4:bb:51:dd:ba:fc:70:
0f:16:77:9c:6b:e1:0f:81:41:84:e4:8b:8e:86:ed:d7:16:09:
e0:28:f5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:43:14 2026 by rpki-client