Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
File: 0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft (raw, json)
Hash identifier: w8oZxOEhq1zybVm8AEFV7aDzuakjdPyQMPvcytNRRmc=
Subject key identifier: 0B:68:C9:06:0A:D3:03:98:ED:13:BF:87:A3:71:9A:DE:42:E6:71:B1
Authority key identifier: D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56
Certificate issuer: /CN=d22e95c4519de9208e3d22332aabec6b1a2ea756
Certificate serial: 019F189E33F33D504093FF93B7D09FD9DC1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 13:00:48 +0000
Manifest this update: Tue 30 Jun 2026 13:00:48 +0000
Manifest next update: Wed 01 Jul 2026 13:00:48 +0000
Files and hashes: 1: 0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl (hash: emBEXK/WonxwOrj2dkZWiD9mi4O5PnrWnSTcEUZ4C+c=)
2: DCqk_IhQ4FSiE_K9oD22DV8FaxY.roa (hash: NtlKgarvCVLW792kP4u1993m8xjj7hSbfL1JoLagIyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:33:f3:3d:50:40:93:ff:93:b7:d0:9f:d9:dc:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d22e95c4519de9208e3d22332aabec6b1a2ea756
Validity
Not Before: Jun 30 13:00:48 2026 GMT
Not After : Jul 1 13:00:48 2026 GMT
Subject: CN=0b68c9060ad30398ed13bf87a3719ade42e671b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:29:47:be:04:0d:70:9c:ad:1c:ae:61:47:01:
56:0d:c7:38:21:1a:cc:1d:24:be:9e:b8:d3:f2:2b:
6d:c3:e7:72:8f:75:fb:15:af:87:7c:dc:8c:ea:33:
98:77:0b:da:f4:af:95:4e:43:1a:63:95:67:8c:11:
96:f3:62:5e:10:24:10:0d:e8:48:da:77:4d:5a:c7:
96:96:2b:10:87:a6:89:40:a7:4e:59:bd:b8:80:e0:
66:be:a7:e1:60:67:ee:e1:90:a1:66:93:1f:80:7e:
85:08:0d:b3:a3:3a:95:5a:62:e6:d2:b0:fc:dd:bd:
11:92:91:5f:59:0a:d7:89:e9:69:27:1c:19:e6:50:
0a:4e:7a:b2:96:be:ef:d1:29:f2:a2:8d:96:11:96:
6f:f2:40:1a:72:e9:9d:41:c6:cf:dd:2d:aa:b7:7b:
73:b8:dd:50:5e:eb:6b:bb:ed:18:83:f0:10:ca:e1:
65:b7:18:aa:1a:64:1e:b9:09:a3:08:b4:54:f7:e3:
28:1d:70:f7:da:2f:61:88:c1:bf:ff:4a:aa:23:ea:
16:c8:80:33:6c:8f:04:b3:80:e4:b0:c4:8f:78:58:
f9:a1:ec:6b:eb:52:61:cf:db:94:e8:d9:18:e9:88:
af:5e:9a:27:d7:74:05:68:ea:4b:06:ec:34:c9:45:
f2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:68:C9:06:0A:D3:03:98:ED:13:BF:87:A3:71:9A:DE:42:E6:71:B1
X509v3 Authority Key Identifier:
keyid:D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:86:9e:77:a2:f8:36:c7:ac:8d:b7:04:84:e8:81:d3:aa:bb:
10:98:e3:8a:9c:c6:5e:b9:21:fe:96:a8:e6:30:f4:b5:3e:46:
62:ec:40:d3:b6:4d:14:98:ce:89:f8:74:4c:e9:03:11:04:68:
4f:ba:e2:bc:f1:fe:ab:fc:f6:24:8d:d9:d6:84:f1:f8:0e:51:
2c:e4:40:f8:08:e0:53:fb:01:8f:19:4c:a2:91:5e:44:09:55:
2f:b4:e2:08:37:74:b2:2e:95:15:ae:b7:4b:dd:3f:83:81:09:
05:6a:9d:b4:78:7d:e2:3a:db:92:da:b7:d7:cc:55:6a:31:bb:
1a:82:31:70:b2:cc:69:9f:c5:48:36:41:b4:2a:c2:d2:d2:1e:
4d:5c:6c:4c:0e:b8:24:30:18:55:12:7f:f1:e5:8f:18:27:7d:
a8:2c:9e:12:d4:5d:4a:12:c6:e5:07:69:da:d4:0c:82:2a:41:
ae:42:79:1f:85:ee:08:8b:d4:93:2c:f8:53:50:fa:71:e0:84:
0f:24:5a:51:05:f1:ed:d2:a9:e5:85:86:b7:e8:9b:f3:ff:81:
5d:47:d9:4c:b3:66:4e:26:93:3e:d4:8a:32:01:ea:9f:8a:48:
37:48:9c:95:ad:c0:78:a9:8f:de:c2:e8:03:a7:d7:0a:1c:c8:
85:57:9d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:02 2026 by rpki-client