Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
File: r070qO03Ebas1owPSPYhgx_Vqq4.mft (raw, json)
Hash identifier: Pq9ZVCHUTC+G8J3NNhPPL0go9JLnD8UtaHHwvDbgWCQ=
Subject key identifier: 10:BB:03:1A:BF:12:4B:EF:A0:CF:86:45:C4:F1:85:ED:6B:B4:13:6A
Authority key identifier: AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
Certificate issuer: /CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Certificate serial: 019EB845CFBAE961D082DC0633AEDB8B572C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
Manifest number: 1959
Signing time: Thu 11 Jun 2026 20:00:43 +0000
Manifest this update: Thu 11 Jun 2026 20:00:43 +0000
Manifest next update: Fri 12 Jun 2026 20:00:43 +0000
Files and hashes: 1: IFfM41C2iw4zVbKliZbWU1sGtlo.roa (hash: 2tPJsJbwIDoCDzDnvS5bHZwht6rGtT6H5rAQ7kX958E=)
2: cmKT8tNT04DB4snpmXdQUr0nl3Q.roa (hash: PNE5CH9WwmP98sniR82D6V4y4hCcTeAU6RiNs++jAdg=)
3: r070qO03Ebas1owPSPYhgx_Vqq4.crl (hash: JHbB+hb7rq3VJJRcGRniZD7tMNVSHWsS8WI6CeaYhCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:45:cf:ba:e9:61:d0:82:dc:06:33:ae:db:8b:57:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Validity
Not Before: Jun 11 20:00:43 2026 GMT
Not After : Jun 12 20:00:43 2026 GMT
Subject: CN=10bb031abf124befa0cf8645c4f185ed6bb4136a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fd:f7:7d:a6:07:a7:27:31:6f:10:7f:94:c0:
b0:49:e8:cc:35:90:9e:c6:d7:10:26:91:5b:2b:58:
b0:53:8b:8a:86:61:c6:06:49:24:47:30:90:07:34:
34:ca:6a:8c:64:e3:e6:98:49:07:99:b4:0a:37:92:
2b:83:41:5e:a1:da:ee:42:0b:29:77:a7:ab:ed:a8:
53:05:f0:7e:7d:44:bd:d5:0b:a9:d0:93:df:47:29:
57:6f:94:1f:94:38:a5:0e:5f:ff:f0:00:7c:f1:aa:
cc:65:02:9e:3c:48:b5:22:1a:8e:1f:9c:ce:13:79:
38:d4:b0:3c:31:dd:22:71:b2:75:04:12:87:40:ee:
58:b2:37:e1:fe:14:4f:48:88:3b:87:c3:d5:fc:7c:
16:6f:77:cc:f1:ff:fb:a3:2a:4e:cc:76:1d:1d:1d:
57:ba:c4:77:26:3d:04:cc:f9:a5:bf:db:f2:0a:64:
f0:f9:6d:ed:dd:4d:01:7b:a9:18:bf:4a:0b:15:84:
12:ca:4d:bd:d2:99:b0:64:76:9e:c0:e4:34:0e:2d:
46:35:5c:94:a5:de:43:bb:e8:29:09:f7:51:86:21:
1f:1e:56:93:f8:08:5f:f7:5b:04:8b:50:bd:dc:dc:
6c:55:a4:8f:f3:8c:57:23:57:94:ee:50:3a:02:60:
7a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BB:03:1A:BF:12:4B:EF:A0:CF:86:45:C4:F1:85:ED:6B:B4:13:6A
X509v3 Authority Key Identifier:
keyid:AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:d1:3b:59:91:f4:5a:52:e8:79:48:b6:c7:d7:5c:1b:ae:1c:
e1:7e:e7:be:e9:c1:1b:74:fc:6e:bb:1d:d1:6c:58:36:46:2b:
c1:c9:30:a5:9b:bd:72:3a:44:2d:33:77:89:4c:b4:62:95:b4:
bf:bc:b1:1b:ab:25:76:a2:bc:e2:70:fa:43:52:93:de:60:27:
cd:c9:7d:87:13:34:70:fb:01:35:3c:61:96:91:cc:52:e3:dd:
d6:4d:d9:9a:ce:83:17:53:c3:4a:e9:ce:99:c4:44:b8:08:e3:
38:1c:66:2c:db:0c:8d:04:4d:25:54:e5:9f:82:89:93:25:7d:
85:c3:b1:c4:ec:3f:bf:93:1d:76:8f:8c:0b:cf:4e:c1:21:5c:
94:12:08:ac:46:4a:32:cd:3e:35:b7:6f:71:f1:7c:d4:99:9b:
b0:48:62:70:bf:a2:92:22:ca:1d:8e:d4:e1:5c:c0:36:f4:4a:
e2:11:08:f5:51:fc:48:f7:d6:19:34:e8:6e:c7:a2:75:46:0d:
fe:93:1b:c6:0b:9a:d5:b8:be:f3:53:02:ac:00:0c:a5:16:1e:
ea:d7:ec:9a:a3:dd:c0:2b:d6:ac:72:01:a1:c6:81:dc:da:39:
d5:4b:65:4d:6d:d0:16:2f:43:5f:91:81:e6:5b:8c:9e:fe:08:
06:1c:59:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:54:14 2026 by rpki-client