
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
File: 0QOvGXZFpJQcbNsIZprwCLeRAr4.mft (raw, json)
Hash identifier: LX34M4yunIkzouuGjT6DYlWzl2FTfFqD/eSPYwD/61s=
Subject key identifier: 28:13:29:9F:75:C1:4B:56:23:19:E0:2A:3A:D8:E6:ED:92:E5:9C:C9
Authority key identifier: D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
Certificate issuer: /CN=d103af197645a4941c6cdb08669af008b79102be
Certificate serial: 019EB98FAA7E90112415DD4844D9799EFB80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
Manifest number: 12C8
Signing time: Fri 12 Jun 2026 02:01:00 +0000
Manifest this update: Fri 12 Jun 2026 02:01:00 +0000
Manifest next update: Sat 13 Jun 2026 02:01:00 +0000
Files and hashes: 1: 0QOvGXZFpJQcbNsIZprwCLeRAr4.crl (hash: Rhmj5a1apzfvkvFLxSbRzTXfHuusciNhKymx8q+9X0I=)
2: IKgcyvSIA45izSMf7tUqa3g6d94.roa (hash: bRbSeQALCJ6vQauwQMiodJiLk0I/cBj0aUju5c7LVIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:aa:7e:90:11:24:15:dd:48:44:d9:79:9e:fb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d103af197645a4941c6cdb08669af008b79102be
Validity
Not Before: Jun 12 02:01:00 2026 GMT
Not After : Jun 13 02:01:00 2026 GMT
Subject: CN=2813299f75c14b562319e02a3ad8e6ed92e59cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ef:c4:2f:02:28:fe:1e:45:50:43:46:ac:46:
d9:31:66:ad:21:4c:f2:e0:ed:f1:66:47:ed:95:51:
43:60:82:7d:d8:40:9e:70:f3:0a:15:e2:82:5c:fc:
41:b9:ab:b4:2a:a7:32:2c:80:b9:ee:f5:c3:9d:48:
f8:c5:0f:e7:24:e5:83:64:c6:5b:fd:43:67:d0:a5:
c2:15:c0:fc:78:a2:f7:4d:38:a5:17:58:4d:12:08:
e5:8b:a0:8d:36:b4:bd:dc:4d:68:eb:da:af:f8:73:
77:2c:57:f6:30:84:c8:3d:26:da:95:e1:4e:de:37:
2d:9d:b1:3d:8c:02:eb:74:fe:29:94:d1:e9:ff:eb:
16:71:81:be:ed:74:6c:bd:ad:4e:0f:7b:4d:20:42:
e7:b4:50:69:ab:bf:5b:ea:37:c0:1c:dd:ef:a2:85:
d7:94:2f:7b:9d:3b:21:b0:fa:18:c7:32:dd:27:cd:
58:1c:10:20:4a:d8:9f:cb:b1:de:13:7a:fc:7b:af:
37:23:8a:d0:09:bf:55:c3:dd:8f:b5:91:c4:a8:99:
a4:e6:79:95:dd:fe:8d:bc:1e:7d:2c:d2:8d:fd:6a:
86:d0:f0:f2:ca:69:80:9c:5b:c0:ba:15:2c:32:d0:
24:b2:b4:d1:cb:34:aa:73:b4:70:b3:da:c9:05:8b:
69:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:13:29:9F:75:C1:4B:56:23:19:E0:2A:3A:D8:E6:ED:92:E5:9C:C9
X509v3 Authority Key Identifier:
keyid:D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e3:77:1e:55:3e:89:b0:aa:ef:36:4e:d9:82:98:ea:0e:bc:
1a:88:aa:4e:c9:ee:29:38:c7:71:6c:bd:f8:74:bc:51:96:1d:
7d:fe:58:60:c3:03:4d:2f:13:43:dc:47:62:5c:a1:1c:7e:75:
10:1a:6b:d0:56:91:b1:a1:f0:c0:a2:67:42:ce:12:7a:0b:6a:
3d:d6:96:9b:f6:52:77:29:2d:c1:f8:22:51:30:6b:b3:6b:0c:
bd:2c:8d:38:bf:12:d6:74:d4:d5:57:ad:a9:3e:52:8f:a8:1e:
4e:17:47:73:71:1d:96:c4:fc:4c:aa:04:cb:38:1a:4e:c4:0c:
aa:54:a7:85:f0:9b:90:3e:55:e4:b1:09:5b:4f:de:9e:3f:7a:
f7:1e:91:c7:d6:2e:3b:52:c4:d2:ab:e7:9b:b8:e4:1c:0d:fa:
d1:36:cb:54:18:ce:56:56:05:46:2c:cc:ff:4a:71:c4:44:73:
13:bb:1b:8b:b3:48:d2:8b:f4:9b:0b:d6:99:ff:18:e9:64:bd:
8f:21:cc:28:27:f1:72:65:79:8e:26:7b:0f:ab:93:7c:d0:5a:
05:5f:c0:2e:60:2e:c7:55:4a:d2:98:73:fb:d8:9d:d6:41:88:
a8:ff:1d:2d:9d:ac:c5:4e:d1:ca:40:6b:a3:89:9a:66:9f:72:
ca:61:56:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:10:07 2026 by rpki-client