Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
File: r070qO03Ebas1owPSPYhgx_Vqq4.mft (raw, json)
Hash identifier: 7opScUzKJAKmZlt3sp3qPAfUlGkdQKiSc5wdi5+ycRc=
Subject key identifier: DB:35:20:D3:66:3E:E6:1D:C1:B7:D8:4D:4E:7B:DF:3E:51:8B:46:86
Authority key identifier: AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
Certificate issuer: /CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Certificate serial: 019EBA3479D95E8FEAFFD006569D9BC14253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
Manifest number: 195A
Signing time: Fri 12 Jun 2026 05:01:01 +0000
Manifest this update: Fri 12 Jun 2026 05:01:01 +0000
Manifest next update: Sat 13 Jun 2026 05:01:01 +0000
Files and hashes: 1: IFfM41C2iw4zVbKliZbWU1sGtlo.roa (hash: 2tPJsJbwIDoCDzDnvS5bHZwht6rGtT6H5rAQ7kX958E=)
2: cmKT8tNT04DB4snpmXdQUr0nl3Q.roa (hash: PNE5CH9WwmP98sniR82D6V4y4hCcTeAU6RiNs++jAdg=)
3: r070qO03Ebas1owPSPYhgx_Vqq4.crl (hash: PQlUpNKh//8cADgamDP3eHLBIq8jWLB3Un6j+6utCAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:34:79:d9:5e:8f:ea:ff:d0:06:56:9d:9b:c1:42:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Validity
Not Before: Jun 12 05:01:01 2026 GMT
Not After : Jun 13 05:01:01 2026 GMT
Subject: CN=db3520d3663ee61dc1b7d84d4e7bdf3e518b4686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b3:22:39:23:6e:2d:39:42:6c:6f:3a:fc:5d:
48:58:a1:14:52:19:15:71:27:cb:dd:6b:0c:8c:9a:
a9:e1:ce:52:c2:2c:e0:38:08:7f:fd:39:f0:f6:1c:
69:c8:45:3d:08:02:84:5b:54:ec:84:76:17:11:ac:
a7:bb:34:d1:78:d4:e3:62:df:f3:e8:b6:a3:78:f3:
e9:32:4d:3b:0b:c4:63:e4:72:9c:31:88:9e:15:a8:
30:af:f8:72:00:74:e6:2e:f1:9c:ce:56:fa:d0:4c:
ce:59:f3:12:b5:8a:6f:a9:37:19:b4:86:c5:b0:da:
16:70:84:9c:77:95:8c:62:3e:d8:2f:da:87:78:fb:
57:be:e7:18:17:b9:00:cc:eb:51:08:63:ed:7d:6e:
56:1a:db:a0:44:ed:20:3f:14:9d:be:e6:79:b5:41:
16:28:0d:0b:9d:13:87:7f:1d:95:7b:95:8d:06:df:
fc:6a:b4:b7:33:ed:42:31:cf:bd:5d:44:30:40:1f:
24:16:53:68:4e:d8:43:e9:78:6b:23:0b:79:c2:3a:
6b:0f:16:3c:c1:0d:e2:a8:92:29:4b:ba:bd:84:05:
b7:2c:82:c3:1c:7b:c3:0a:7b:64:42:c6:e9:de:f4:
24:ec:a3:23:75:95:95:da:ad:a5:1c:70:b3:26:df:
7f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:35:20:D3:66:3E:E6:1D:C1:B7:D8:4D:4E:7B:DF:3E:51:8B:46:86
X509v3 Authority Key Identifier:
keyid:AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:05:34:74:be:b0:bb:69:57:7e:33:bd:05:fb:50:3e:ad:22:
b1:0e:8c:16:11:64:e2:13:5b:42:a2:d7:39:da:a3:9c:6a:1e:
5f:95:e9:08:1a:0c:eb:a7:e9:1c:9d:6f:37:45:f6:7f:fb:aa:
f6:b0:cb:7c:a4:62:b7:3f:14:d6:1f:b8:b6:76:84:3a:ab:ca:
77:d2:45:c3:bc:ec:79:d5:7b:99:67:47:91:08:34:8d:66:a9:
66:36:e4:8d:a4:73:53:3b:c8:a3:13:b1:00:b5:70:37:62:24:
98:17:67:49:3c:96:1d:b6:1f:9b:37:b5:f2:56:5b:e5:a9:3a:
ba:a9:63:dc:b6:58:65:1c:8c:8a:b3:ba:46:b2:16:e6:f8:cc:
99:79:40:70:16:5d:1f:75:3c:c8:19:e5:6c:76:79:78:04:dc:
40:83:16:df:f0:e7:92:d8:89:cd:71:1a:19:e1:ff:5b:ab:5b:
f7:f6:79:fe:e1:28:e5:31:85:65:ea:b2:85:8d:80:c4:66:21:
a4:cd:e9:9f:da:54:e5:f9:00:80:3d:32:02:62:7f:0a:b8:4a:
44:56:01:aa:19:5f:77:fe:ae:56:ec:ca:10:5e:22:fe:30:58:
f9:c7:a2:8b:00:a8:68:22:c2:82:f7:b7:05:35:7e:26:a2:d7:
17:d0:55:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:04:08 2026 by rpki-client