Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
File: 0haCh3tsivdeJ2DPhUDnhFLUvsA.mft (raw, json)
Hash identifier: er9FNgU0hNTu6QlkAToJ9Kt2GgMrjOlVbCN5s4oMuJE=
Subject key identifier: B8:97:49:0D:2B:0B:C1:1A:A2:2C:AB:4C:A4:E0:E2:95:DF:07:A6:7C
Authority key identifier: D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
Certificate issuer: /CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Certificate serial: 019F194426D65F16D1FA6856A07A5DB65AFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
Manifest number: 0EAB
Signing time: Tue 30 Jun 2026 16:02:04 +0000
Manifest this update: Tue 30 Jun 2026 16:02:04 +0000
Manifest next update: Wed 01 Jul 2026 16:02:04 +0000
Files and hashes: 1: 0haCh3tsivdeJ2DPhUDnhFLUvsA.crl (hash: SnMDgj2+mUpYuAXUwIBmQmXF1caj8DXXjD+24I6Kng4=)
2: NiVW-1DlGr5hCTPyCnLWhfcQSJ0.roa (hash: P0xJoWIH1C9Cod99ksa8hxvCHok9B+UC8X73hnLeN0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:44:26:d6:5f:16:d1:fa:68:56:a0:7a:5d:b6:5a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Validity
Not Before: Jun 30 16:02:04 2026 GMT
Not After : Jul 1 16:02:04 2026 GMT
Subject: CN=b897490d2b0bc11aa22cab4ca4e0e295df07a67c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:32:c2:3f:3c:63:6f:d9:a9:a3:11:d3:84:5e:
d9:3c:13:89:dc:b2:54:76:3e:04:62:3a:66:6e:cd:
11:11:65:62:cd:fe:a1:ca:5a:e7:fa:b0:a9:98:9e:
cc:4c:7c:c1:1d:dd:05:b9:bd:5d:79:ae:5d:58:2b:
ae:40:43:69:08:2a:57:87:89:ce:f5:4d:4e:cc:73:
cf:6b:38:bb:66:91:1c:b6:81:48:6f:0e:63:34:0f:
c7:8e:4c:df:54:68:2e:4c:06:6d:02:e1:57:9d:9b:
10:83:f9:52:aa:f2:36:7c:4c:99:6b:ca:e5:3e:b8:
76:58:d1:9d:1f:a4:88:46:d5:55:ae:d8:df:c1:ab:
97:bb:76:cc:22:5c:0c:02:d1:b9:78:21:fc:e8:8a:
76:c3:c4:cd:d9:1c:f6:5e:b2:3d:ff:87:9e:98:a7:
00:ef:1b:ff:a0:e1:de:2a:7c:4b:08:e3:9c:79:11:
97:51:d7:9f:45:c4:f7:ae:fa:c0:68:c2:cd:22:bc:
ac:d2:31:db:99:a3:0a:32:0f:4e:18:ed:66:2d:04:
84:66:de:cd:a1:74:ba:7f:f9:b1:f5:05:bf:b6:ac:
e5:bf:4c:46:15:37:9c:1e:d2:74:ae:9f:95:17:2d:
2f:08:2b:f1:27:0e:c3:01:d4:90:22:a9:90:9e:64:
99:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:97:49:0D:2B:0B:C1:1A:A2:2C:AB:4C:A4:E0:E2:95:DF:07:A6:7C
X509v3 Authority Key Identifier:
keyid:D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:9a:10:ae:36:cd:d6:15:f9:27:be:1e:1d:e6:45:2b:69:f5:
02:dd:84:9d:c3:0b:73:fb:a2:2b:5d:3c:dc:9f:f0:f3:2c:40:
ee:83:ef:86:48:e0:05:7b:17:cf:9d:2c:94:08:2b:46:bc:c5:
cf:99:39:5d:ef:51:25:e4:aa:8a:55:5f:e8:d2:de:dc:8f:7e:
e8:ac:28:70:fc:97:dc:42:bb:84:49:2b:ce:35:26:99:e0:bb:
23:ea:87:6e:21:6f:a5:5a:e9:9e:11:75:27:84:88:0c:83:5c:
ef:2a:5f:5f:d1:26:21:93:b3:be:2d:e6:6b:b4:b5:fe:13:6a:
88:5d:d9:13:57:4c:ce:3b:36:3b:d6:47:1b:18:bf:ae:af:09:
d2:b6:b8:af:67:3a:7b:85:f1:74:25:83:29:c9:4e:8f:1f:89:
0d:e2:fe:be:6e:46:bb:f1:16:b7:c7:af:62:ae:c9:60:7b:e0:
f2:e5:87:d4:9f:d5:67:5d:3d:e3:4c:50:6d:68:a7:37:70:cb:
64:98:67:62:f5:86:09:95:06:43:1f:e8:8b:4a:4e:12:87:45:
d8:48:33:16:92:4a:99:f7:68:03:cb:1c:82:91:d6:e6:c4:d9:
d6:3d:9d:b6:87:e9:a5:31:29:4f:d0:59:e0:da:b8:6a:95:d0:
d0:02:6d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:03 2026 by rpki-client