Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
File: kOszbVYE1HuugXI4sNu0l3HiRyk.mft (raw, json)
Hash identifier: gbfwt5dC+/DRp3Adh5eSdnqZHHNIkPoP4Ra2cmA+ViY=
Subject key identifier: C0:A0:55:38:E8:9E:32:0F:0D:2D:FB:F7:D5:D7:F2:94:85:49:B9:5D
Authority key identifier: 90:EB:33:6D:56:04:D4:7B:AE:81:72:38:B0:DB:B4:97:71:E2:47:29
Certificate issuer: /CN=90eb336d5604d47bae817238b0dbb49771e24729
Certificate serial: 019EB7A15957452E858378A93A8A55DA89C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
Manifest number: 1956
Signing time: Thu 11 Jun 2026 17:01:05 +0000
Manifest this update: Thu 11 Jun 2026 17:01:05 +0000
Manifest next update: Fri 12 Jun 2026 17:01:05 +0000
Files and hashes: 1: kOszbVYE1HuugXI4sNu0l3HiRyk.crl (hash: S99fy8JH2yyf7Hbw9o31azic/qTYy2CvDQVuXRUqiYo=)
2: mKOuhDb0lNg_dJ83TTrmFYMNIeA.roa (hash: Om4b1zrUyorfRjmzpKplEidWPKteQvqXZcg+Z0i4g3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 17:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a1:59:57:45:2e:85:83:78:a9:3a:8a:55:da:89:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90eb336d5604d47bae817238b0dbb49771e24729
Validity
Not Before: Jun 11 17:01:05 2026 GMT
Not After : Jun 12 17:01:05 2026 GMT
Subject: CN=c0a05538e89e320f0d2dfbf7d5d7f2948549b95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5a:c9:32:b5:9c:63:80:04:9e:93:6d:4a:bb:
4d:e2:96:92:d6:fb:5e:a6:99:40:e8:fe:17:d5:bf:
74:bb:da:bd:05:83:d4:d0:a8:c9:5c:81:66:26:fd:
73:e0:20:b0:05:37:b1:2d:3f:ac:b7:e7:f0:a3:9c:
a3:79:ee:07:5c:bf:27:62:f6:3f:dc:6b:1b:fd:ea:
5f:61:e2:ab:75:be:c9:69:f7:b6:fe:76:07:39:ae:
4a:3f:ee:e5:67:8d:4d:49:41:dd:a0:34:94:93:38:
56:9a:52:c0:08:f0:ac:99:9c:f6:99:08:16:21:53:
93:08:9e:59:fc:89:9b:94:37:9f:e6:93:ef:da:2f:
0d:6d:f2:30:fd:b3:e7:5e:08:78:c4:59:18:26:d8:
19:c7:eb:28:fc:4b:6a:a7:a5:01:6d:7f:c0:7b:82:
e2:d6:4c:7f:c3:0d:6f:d3:76:e2:7e:3e:92:d9:fe:
cc:b6:4f:c9:59:6e:c1:d7:cb:8b:59:28:dd:01:55:
72:a6:a3:3b:4e:eb:a8:2c:c3:4d:0d:b7:35:5e:b2:
17:92:89:05:20:e8:28:17:31:78:d9:b5:8b:fd:25:
84:d5:79:40:65:d5:80:15:2a:b1:89:27:46:d7:65:
e8:c5:63:2a:2a:ba:e8:ac:da:fd:b2:4a:09:00:fb:
6e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A0:55:38:E8:9E:32:0F:0D:2D:FB:F7:D5:D7:F2:94:85:49:B9:5D
X509v3 Authority Key Identifier:
keyid:90:EB:33:6D:56:04:D4:7B:AE:81:72:38:B0:DB:B4:97:71:E2:47:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:49:86:41:b4:60:8f:7d:f7:29:d1:f0:c3:97:9c:c2:fe:b9:
69:da:f4:7e:e6:9e:15:49:9a:04:90:50:5c:80:27:28:51:fa:
9c:43:a1:71:5e:93:b1:c3:a7:48:61:12:cf:5f:7b:cc:ee:50:
59:ee:88:e3:17:08:e0:80:d9:c0:5b:db:35:3e:22:9a:5b:f5:
74:af:50:60:f8:97:19:aa:d1:4e:d9:35:42:88:1d:8f:d9:ab:
e4:22:66:b5:02:da:30:95:1e:57:c1:0d:ac:ed:8b:d3:01:79:
ce:27:d8:55:ec:63:0b:40:c2:87:eb:e1:5c:7c:1f:e3:d3:ed:
bd:3a:c7:e9:d9:e8:02:c4:1f:c7:35:8d:fa:0a:eb:d0:6d:c9:
9d:37:cc:7d:6e:37:f6:2d:97:27:8d:04:28:c4:b9:a9:2a:d4:
5b:50:bb:92:b5:c7:2d:85:7d:af:ad:97:6b:04:9b:24:ba:7f:
13:1b:a4:a6:08:f0:21:6a:dd:01:a6:20:38:57:83:ff:90:c1:
2e:ae:95:f7:ae:7b:87:6b:e9:4b:d9:9a:ec:fd:0a:31:a4:43:
75:77:0c:3d:bc:5d:33:57:1b:c6:f2:ce:38:01:79:90:35:9d:
97:9f:8c:7d:27:f3:e1:39:8b:6e:6f:85:a6:5d:4f:5a:1c:18:
df:8d:18:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:58:18 2026 by rpki-client