Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft
File: 0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft (raw, json)
Hash identifier: d8gk06k4Vd+B4IXc9Wd7NVn265mN9DTLvuzxZzMib/Y=
Subject key identifier: A0:5C:EB:22:BD:1D:97:C8:7C:B4:05:0F:67:5F:B1:41:E3:97:23:CC
Authority key identifier: D2:2E:1F:58:1C:D1:1E:1D:0A:2B:69:3A:53:D3:A5:B6:FD:ED:4D:FA
Certificate issuer: /CN=d22e1f581cd11e1d0a2b693a53d3a5b6fded4dfa
Certificate serial: 019F1152E43EB3DCB9B48B40E86684C9DCD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i4fWBzRHh0KK2k6U9Oltv3tTfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft
Manifest number: 0102
Signing time: Mon 29 Jun 2026 03:01:12 +0000
Manifest this update: Mon 29 Jun 2026 03:01:12 +0000
Manifest next update: Tue 30 Jun 2026 03:01:12 +0000
Files and hashes: 1: 0i4fWBzRHh0KK2k6U9Oltv3tTfo.crl (hash: PjdA/JB/CvwEFb/jWuMhKunsLjNMLgRvaOWYMv94N5o=)
2: z5djvf3-CKw5x5kwKKqaRZmCe2I.asa (hash: ZvW8uuufeamy31o99OQxuIpFF7lTKfAP5mzTU9+Pnks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0i4fWBzRHh0KK2k6U9Oltv3tTfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:52:e4:3e:b3:dc:b9:b4:8b:40:e8:66:84:c9:dc:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d22e1f581cd11e1d0a2b693a53d3a5b6fded4dfa
Validity
Not Before: Jun 29 03:01:12 2026 GMT
Not After : Jun 30 03:01:12 2026 GMT
Subject: CN=a05ceb22bd1d97c87cb4050f675fb141e39723cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:05:42:42:ca:8b:3d:ce:30:7d:76:1b:84:22:
45:05:72:fc:64:fb:57:3b:0b:b3:f2:30:49:c3:f8:
6c:51:61:0c:fa:46:27:f2:38:3c:e4:a9:df:b7:f6:
5a:10:41:f1:4e:d1:60:ec:69:a5:24:8f:34:a3:6b:
38:e2:a8:65:56:43:15:2e:ab:cd:90:c5:be:86:9c:
f6:2c:1a:81:7c:dc:69:82:1c:a5:79:a2:9e:a5:c8:
a3:ba:14:7f:3c:46:b6:6e:7a:34:07:bb:9b:3a:67:
a4:0d:22:f9:28:ec:c9:5a:37:77:8f:fa:61:7f:e1:
a8:1a:cc:c9:04:18:6a:3f:66:7c:a0:dc:37:99:0c:
d5:e7:a0:07:fb:f7:f4:21:9b:99:28:40:c4:f4:3b:
7d:45:98:c2:fc:37:94:a7:50:41:d8:b8:f7:5d:09:
1f:c6:f8:12:34:b8:9e:94:4c:95:8a:8e:20:2f:4b:
22:f4:04:58:00:98:66:10:8f:ed:61:8b:f8:31:11:
1b:3d:62:6e:2b:09:71:94:72:96:0e:9b:15:c3:09:
26:2a:ed:e9:2b:d5:04:f7:f8:33:79:ab:2b:1c:4a:
a8:33:20:c5:fb:ff:ee:e5:05:f6:46:c2:3e:2a:69:
73:8d:31:8b:8c:4d:bd:ab:fa:2e:23:da:56:4e:6a:
a6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5C:EB:22:BD:1D:97:C8:7C:B4:05:0F:67:5F:B1:41:E3:97:23:CC
X509v3 Authority Key Identifier:
keyid:D2:2E:1F:58:1C:D1:1E:1D:0A:2B:69:3A:53:D3:A5:B6:FD:ED:4D:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i4fWBzRHh0KK2k6U9Oltv3tTfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:18:ac:5f:4f:8d:98:7d:7a:ed:b2:c8:cc:6d:16:15:5b:8b:
57:3a:93:ff:a3:4d:d9:c5:9a:8d:69:79:00:36:a0:cf:e8:75:
0d:8d:67:9f:64:78:c6:49:7a:d3:5f:bb:2a:63:36:c9:04:f9:
21:8b:a2:b3:ae:11:a1:99:25:9f:dc:d0:e9:37:f1:2d:3d:09:
90:8f:34:4b:6e:c9:4e:1b:31:f0:6e:29:10:c1:25:86:c5:e6:
70:82:c3:f1:fc:0a:bf:41:f3:6b:8d:c2:7a:30:b2:93:1d:9b:
a6:d4:3a:39:9e:7b:67:bb:14:82:ec:3e:43:d2:99:76:89:ef:
fb:ac:6f:94:f0:27:ec:7c:aa:9d:ec:85:6b:0d:28:b9:9a:86:
33:0e:d2:8a:47:54:50:b7:65:3d:d7:6e:e6:79:98:c3:7d:c6:
9e:4c:fe:58:4a:99:21:79:9d:5b:dc:25:8b:fd:14:29:1c:d8:
0d:47:bc:5d:ca:8f:da:c7:8a:d4:9c:7b:85:37:cc:83:cf:81:
ab:f6:aa:bf:32:32:d1:27:21:c6:ff:c5:fe:a7:b7:47:6e:23:
15:53:b9:8f:24:8f:aa:54:70:bf:b3:9a:fb:d3:14:3a:4a:99:
5e:27:10:f8:ac:83:e4:26:4f:d9:c1:34:94:88:3b:f0:3e:45:
77:54:a6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:41:56 2026 by rpki-client